Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
File:                     3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa (raw, json)
Hash identifier:          3c2X4BiS2lFZwvyYDA4ONZI1KphMKrdJtI2ARgV+u/w=
Subject key identifier:   66:ED:00:3B:5D:EE:0F:8A:FC:B6:B5:F7:C3:0C:F4:57:AE:CD:D5:36
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       5EED807810190D680A2308DDD3A3F15010E5E338
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     262420
IP address blocks:        186.219.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ed:80:78:10:19:0d:68:0a:23:08:dd:d3:a3:f1:50:10:e5:e3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=66ED003B5DEE0F8AFCB6B5F7C30CF457AECDD536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:db:4f:2f:79:c9:2c:df:a2:5c:5d:1d:6e:
                    a6:8f:a3:00:ea:55:8d:fc:71:f0:27:b7:24:3d:e7:
                    c4:04:56:df:29:31:71:8b:50:ac:59:b3:96:08:dd:
                    45:37:1a:c9:0e:31:89:c1:ea:5e:0d:b4:ad:35:aa:
                    f8:c6:33:a6:5e:3f:c1:68:10:16:35:24:b5:6d:44:
                    1c:3f:ec:20:a7:2c:fc:bd:34:be:98:f2:2f:5c:fe:
                    19:6a:45:c2:03:58:c9:69:ae:9b:e6:ba:34:cd:47:
                    9d:16:31:3d:64:74:45:94:69:a4:80:20:40:ab:30:
                    95:02:ac:44:8d:e9:6a:98:e8:50:1f:5d:74:e0:06:
                    d1:81:b8:3a:2b:55:f9:9e:d0:ca:1b:4c:e7:cd:80:
                    0c:bd:c9:4d:c8:7e:e2:30:6b:06:49:86:f8:17:13:
                    db:f9:81:ea:c0:f3:1d:55:b7:69:ed:1b:63:30:8b:
                    90:e2:2a:49:d6:18:5d:f5:23:f0:60:d2:9b:64:06:
                    95:07:5f:ec:3c:c8:c4:0b:e1:03:35:61:cd:63:6e:
                    24:fc:e8:07:ad:a6:81:2e:6e:cf:5f:aa:9f:02:f4:
                    de:2b:36:53:15:07:f4:39:00:86:5b:45:7d:d4:c0:
                    4d:1a:8b:24:ad:e8:a1:e5:29:85:56:4c:30:d9:06:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:00:3B:5D:EE:0F:8A:FC:B6:B5:F7:C3:0C:F4:57:AE:CD:D5:36
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138362e3231392e39362e302f32302d3234203d3e20323632343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:41:b6:0b:ef:7f:2e:49:f8:e1:60:7d:28:34:54:46:19:d1:
         67:00:a2:dd:fc:ad:c4:7c:96:a7:ec:a4:26:a0:ae:bc:5a:15:
         9d:df:a7:e9:14:f2:45:67:be:ef:aa:3f:83:67:96:bf:bc:b3:
         de:78:f0:4c:c7:a7:7d:e4:ad:ff:61:25:9e:21:ae:f6:dc:bd:
         1c:81:9f:a6:10:16:60:76:8b:8c:3b:31:af:f7:39:93:af:1c:
         38:19:ee:05:81:00:e4:01:c9:59:da:e0:4e:00:33:07:28:91:
         70:fa:bd:40:37:e5:18:61:82:dd:16:e6:dd:f9:ba:a9:82:90:
         4e:65:ed:7b:2a:82:4e:bf:1b:91:35:55:69:c8:67:3a:86:fe:
         32:82:05:aa:15:46:b2:73:a8:ff:19:1d:83:85:da:5e:0e:68:
         3e:ed:13:03:f1:8c:7e:2c:2b:d6:0a:63:27:13:74:0c:c3:00:
         70:ad:f6:70:92:ab:9f:c1:64:19:31:e4:d7:f0:15:09:71:83:
         e9:c6:6e:09:f6:4c:83:08:b4:3e:f2:ab:b7:a3:07:22:a9:7c:
         7d:ea:79:14:38:c4:1b:be:fe:e5:a6:10:7a:1d:80:1b:ef:ca:
         d9:fa:8c:5f:e0:5d:b6:ba:6f:79:2c:90:ea:60:12:71:2e:1e:
         17:d1:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:59:43 2026 by rpki-client