Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa
File:                     3138392e38392e36342e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier:          YhxN0ZthUa3PVqeLTVDt86dznRdFoftK5N0tFJhhMS0=
Subject key identifier:   35:78:05:6F:DF:00:6C:A8:F0:70:B6:AB:00:EB:62:34:1F:25:BD:7D
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       4DDE6D17008FB58FA23E2F72F5A7FC8C4A1517BB
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa
Signing time:             Thu 29 Jan 2026 12:07:58 +0000
ROA not before:           Thu 29 Jan 2026 12:02:58 +0000
ROA not after:            Thu 28 Jan 2027 12:07:58 +0000
asID:                     28184
IP address blocks:        189.89.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:de:6d:17:00:8f:b5:8f:a2:3e:2f:72:f5:a7:fc:8c:4a:15:17:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan 29 12:02:58 2026 GMT
            Not After : Jan 28 12:07:58 2027 GMT
        Subject: CN=3578056FDF006CA8F070B6AB00EB62341F25BD7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:b1:02:fa:1c:36:15:44:a2:89:1d:c3:48:
                    ac:0b:c2:01:d4:24:5d:cc:43:10:a8:c8:ef:a1:15:
                    82:bf:7d:6a:5b:ce:61:bd:7e:3e:f3:d4:e7:3c:23:
                    a8:eb:0d:eb:7d:46:4c:03:c0:23:2f:f7:df:3e:02:
                    c7:17:be:eb:22:2c:10:f1:81:d1:a9:1b:88:06:df:
                    38:20:49:97:9e:f4:18:8a:8d:81:35:58:3c:05:e7:
                    69:8a:ea:6a:a3:bb:73:5f:f7:69:06:a2:d8:44:40:
                    fa:64:22:9b:d4:93:fb:b5:78:15:38:6a:e6:7f:47:
                    1f:69:5d:62:e9:bc:32:84:cf:0b:b9:7c:0e:c6:9a:
                    52:18:f0:c4:65:99:50:66:0f:f9:5d:2c:b9:bf:96:
                    60:e1:c7:63:9e:8d:96:7a:ba:a8:92:e9:f5:51:fc:
                    45:8e:87:ee:03:fe:fe:31:17:54:95:0a:98:b9:a3:
                    f9:c7:6d:55:62:25:84:26:34:bb:86:3b:96:f7:ce:
                    77:20:23:99:23:6e:5d:1a:f5:d3:f2:ae:c8:28:d4:
                    b8:98:e1:17:32:47:99:57:d0:da:49:57:86:06:d3:
                    d3:52:85:b5:62:eb:d0:ff:31:c2:1c:0b:cb:82:15:
                    6c:75:aa:10:dd:04:d0:a6:07:2f:8b:aa:85:1e:59:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:78:05:6F:DF:00:6C:A8:F0:70:B6:AB:00:EB:62:34:1F:25:BD:7D
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36342e302f32332d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:eb:22:ac:8a:f8:6c:29:87:65:6e:73:5b:83:ab:78:db:
         c5:83:7b:52:48:a2:5a:52:12:8b:5d:18:b4:57:65:68:fd:1f:
         14:1d:af:ee:01:9a:e9:eb:4a:c4:7d:a9:03:56:47:36:18:18:
         29:46:62:18:0c:67:83:7a:83:63:f3:0a:63:4f:d2:75:8c:50:
         5e:70:97:db:db:75:02:4a:e5:8b:9f:fe:7f:47:2d:e1:40:93:
         3c:8a:d0:49:d5:a2:66:bb:4d:61:af:30:89:08:68:bf:ec:57:
         c3:2f:56:59:38:67:90:43:4e:1f:0e:3e:54:2c:82:8c:b8:09:
         ee:9f:29:79:55:b6:f5:a6:b4:43:e6:47:3b:22:35:ca:f3:0b:
         d7:5f:6a:15:3a:f7:f9:e8:50:b7:72:b5:5f:d3:f4:67:54:46:
         6b:89:6e:39:d8:d8:02:ac:1c:a8:a9:22:32:bd:f9:fe:a3:04:
         46:64:ee:a1:38:c2:90:3e:66:74:2e:be:f4:f4:df:5c:59:ba:
         1d:0a:a2:79:99:8e:3f:b5:e6:19:e4:d7:65:2e:3e:57:8e:17:
         60:4a:63:b6:e1:ec:d5:9c:d3:22:f7:27:d5:e1:95:23:08:42:
         62:0e:0f:5a:9e:f8:f0:f5:2d:a9:33:35:20:bb:04:89:18:88:
         9f:1e:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 04:24:44 2026 by rpki-client