Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
File:                     3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa (raw, json)
Hash identifier:          4vIdS1IBEyKgSUnK2PkhgBqUaP6XZ06ZkELyxU5qnu8=
Subject key identifier:   21:36:F1:8C:3A:BD:29:D3:FD:9D:BE:4F:CA:EE:5F:26:D8:85:B8:47
Certificate issuer:       /CN=A8F177498F7A2D41479F1C0011E59978A9CDA931
Certificate serial:       07DE5E7C8592B94FD1E40953A6D82E0B80B1B746
Authority key identifier: A8:F1:77:49:8F:7A:2D:41:47:9F:1C:00:11:E5:99:78:A9:CD:A9:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa
Signing time:             Thu 22 Oct 2026 16:25:18 +0000
ROA not before:           Thu 22 Oct 2026 16:20:18 +0000
ROA not after:            Thu 21 Oct 2027 16:25:18 +0000
asID:                     52999
IP address blocks:        186.216.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 21:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:de:5e:7c:85:92:b9:4f:d1:e4:09:53:a6:d8:2e:0b:80:b1:b7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F177498F7A2D41479F1C0011E59978A9CDA931
        Validity
            Not Before: Oct 22 16:20:18 2026 GMT
            Not After : Oct 21 16:25:18 2027 GMT
        Subject: CN=2136F18C3ABD29D3FD9DBE4FCAEE5F26D885B847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:6f:c4:d7:8a:9e:2b:8e:a2:26:87:2f:a8:
                    cb:d9:98:9c:7d:fa:b0:89:0a:4e:57:4b:5b:0e:5e:
                    b8:d7:59:ea:fb:8b:e2:fc:d7:54:21:6a:f9:9c:75:
                    e0:48:c5:51:58:2e:88:06:91:9d:dd:14:06:61:0d:
                    77:fd:24:5d:61:ae:0d:27:be:21:ca:33:ac:1a:e1:
                    be:92:54:fd:19:20:c5:fe:7b:bc:39:3f:c5:d1:8a:
                    bc:02:f2:d4:4a:88:b4:48:97:7f:0f:fa:0c:7b:82:
                    83:62:9e:67:db:cd:02:19:84:79:18:c3:1c:5e:1c:
                    aa:a2:7f:ee:2d:b8:dd:ea:81:68:b2:71:40:a1:62:
                    1a:3b:44:2f:64:8b:44:cb:89:00:52:0c:70:b7:b3:
                    12:57:19:59:fa:06:30:e9:cc:26:bb:80:5f:1d:b3:
                    77:64:ea:e6:c5:53:a4:78:57:15:cf:07:55:33:e2:
                    0b:1c:5e:8c:fd:11:f3:89:fa:07:71:9d:26:c2:d9:
                    1d:26:75:ad:e8:e0:e0:44:8f:e5:94:0f:ae:07:dc:
                    21:6a:2f:f2:8c:b5:c8:98:1b:4b:e5:22:21:4a:12:
                    14:86:0d:25:b7:71:d1:8f:49:b0:f6:fd:99:e8:4a:
                    d9:3d:9b:6e:b7:d3:95:ef:c1:67:4d:f3:e3:0d:64:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:36:F1:8C:3A:BD:29:D3:FD:9D:BE:4F:CA:EE:5F:26:D8:85:B8:47
            X509v3 Authority Key Identifier:
                keyid:A8:F1:77:49:8F:7A:2D:41:47:9F:1C:00:11:E5:99:78:A9:CD:A9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3231362e3231362e302f32312d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:c8:94:48:22:77:54:3d:97:c8:31:ea:a7:39:a4:ae:1d:6e:
         1e:ab:55:f5:7b:23:11:5b:38:37:fc:df:08:4f:21:f8:4b:89:
         23:ff:ff:db:1e:0a:1b:3a:0d:53:37:ae:fc:06:c2:65:c1:67:
         92:56:d6:8e:fb:8c:c0:e1:56:d0:79:17:5c:18:16:3c:fa:0b:
         7e:67:02:1b:e4:48:9e:7d:99:3f:65:c0:67:9a:c9:de:90:77:
         1f:a1:02:7d:46:31:e3:7e:45:ba:10:5f:0b:81:4a:d8:d5:d7:
         cc:98:51:35:96:92:dc:4f:f3:33:e7:1b:c1:49:3c:79:c0:4d:
         8a:ea:a1:bb:3f:9e:14:e8:cd:52:c2:1a:db:4a:38:1c:29:67:
         f7:d1:fa:52:d6:2d:ac:6f:57:00:b6:26:4a:95:27:8c:bc:b4:
         9f:0e:d0:3d:5e:90:71:34:58:48:0a:b9:d8:9d:2e:f8:5c:e1:
         eb:ab:79:b9:cb:c4:c5:d6:a3:3d:37:1a:e4:e4:f6:b4:c9:71:
         82:93:d2:5f:88:dc:21:f3:77:31:09:d7:b4:1a:ba:6e:4f:f7:
         bb:75:af:80:65:29:fe:36:3c:3f:ab:45:ab:96:e9:2b:48:34:
         85:14:e1:08:3f:08:19:fa:66:1e:4b:a3:f5:9f:8d:f9:06:da:
         ff:83:e5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 04:12:38 2026 by rpki-client