Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa
File:                     3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa (raw, json)
Hash identifier:          qsPt2W4V0ZnBv3i8Ns0xldumwowseEPP4dA7E2o+WwU=
Subject key identifier:   E8:A3:52:D5:36:E1:9E:B9:7C:CD:35:FA:A5:66:7A:35:18:8E:17:1A
Certificate issuer:       /CN=FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C
Certificate serial:       65BE9EB9CD8EB0986F8A1FE990C5A3773AEC42F1
Authority key identifier: FD:BA:D5:D7:1C:1F:9E:FB:50:E5:C1:6F:4C:10:FA:C1:A2:FB:BD:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa
Signing time:             Fri 03 Jul 2026 15:17:53 +0000
ROA not before:           Fri 03 Jul 2026 15:12:53 +0000
ROA not after:            Fri 02 Jul 2027 15:17:53 +0000
asID:                     267456
IP address blocks:        181.191.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:9e:b9:cd:8e:b0:98:6f:8a:1f:e9:90:c5:a3:77:3a:ec:42:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C
        Validity
            Not Before: Jul  3 15:12:53 2026 GMT
            Not After : Jul  2 15:17:53 2027 GMT
        Subject: CN=E8A352D536E19EB97CCD35FAA5667A35188E171A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:4f:e5:3e:ff:da:f1:93:66:88:28:99:af:
                    9b:28:37:05:36:d4:2c:4a:03:23:bf:6c:d4:c4:91:
                    a8:de:85:6d:81:1f:93:4e:98:68:ca:24:0c:73:99:
                    86:7c:e0:f6:5d:d4:9a:29:88:77:ed:10:e0:1b:b9:
                    db:1c:a1:fd:d8:5d:23:12:59:d2:0c:88:35:cb:e1:
                    96:56:17:11:c0:36:33:1e:cb:66:b7:b7:8f:ac:4c:
                    cc:75:a3:23:00:e8:71:d4:86:a5:b3:ec:ca:00:48:
                    af:5a:01:a0:3b:db:a0:b6:ed:cc:5e:a0:4a:ab:ee:
                    4f:a5:29:84:29:06:b9:3e:77:99:5c:36:21:7b:6b:
                    de:5f:cc:19:2b:87:74:f4:e4:9c:92:ab:61:47:48:
                    77:13:ec:cf:d2:a3:3e:72:e6:11:0d:ce:20:a1:e7:
                    a6:91:0b:c4:50:0c:70:20:d7:71:a7:44:39:a0:fa:
                    63:cf:f1:ae:41:4f:05:b7:b7:26:87:2c:d0:a3:74:
                    12:8f:99:23:a7:ff:d5:da:e7:32:41:0e:6e:82:3d:
                    ef:cd:42:d7:6e:13:ce:f0:b0:ba:58:57:75:3e:84:
                    b1:d4:e8:35:b8:29:23:6e:d8:0b:1f:40:04:5e:2f:
                    6d:67:9e:6b:0b:c9:ac:e4:5f:50:5c:87:eb:d5:6e:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:52:D5:36:E1:9E:B9:7C:CD:35:FA:A5:66:7A:35:18:8E:17:1A
            X509v3 Authority Key Identifier:
                keyid:FD:BA:D5:D7:1C:1F:9E:FB:50:E5:C1:6F:4C:10:FA:C1:A2:FB:BD:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDBAD5D71C1F9EFB50E5C16F4C10FAC1A2FBBD2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/3138312e3139312e3234302e302f32322d3234203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:6e:3e:97:43:a1:0f:d8:53:0b:eb:43:23:fb:c1:3f:22:b2:
         33:49:47:59:4d:85:3c:88:63:bd:c0:2c:8b:8b:e7:cf:59:14:
         a1:39:b6:e5:9e:36:b4:93:cf:88:e4:a6:63:ce:fa:d8:5b:2c:
         6d:b7:5d:9e:c6:1f:49:bc:89:35:8f:7e:88:f5:08:86:d8:54:
         05:e9:77:02:04:40:69:94:1b:56:9b:23:4b:7a:16:97:11:f7:
         d7:f5:ce:9c:56:da:d5:ee:6b:cd:5f:93:6c:9b:63:88:b0:01:
         8e:be:c1:6a:f6:53:2c:55:69:47:56:cc:1b:d6:04:4c:ea:45:
         60:25:3f:53:aa:84:dd:8e:38:fe:9f:ff:f2:62:5c:76:40:23:
         f6:bc:e2:e3:c0:08:47:f7:3f:98:b8:af:67:08:31:fe:f8:ca:
         24:08:bf:7b:81:c8:38:1b:73:a3:01:bb:54:9f:30:fe:a7:60:
         5f:71:e8:76:4d:c6:f9:de:4b:8b:8d:4a:d5:08:ee:8a:89:39:
         a6:5c:8f:90:f5:a3:12:74:4a:3d:9a:63:cd:35:a7:d0:94:8f:
         89:4f:07:2c:4c:69:94:a9:16:e3:e9:1d:1e:68:8d:3c:c7:6a:
         ee:33:44:9a:c7:8b:dd:49:3c:d5:e6:55:22:86:9d:51:55:a2:
         a8:4f:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:00:20 2026 by rpki-client