Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
File:                     3138372e38352e3230302e302f32312d3234203d3e203238333439.roa (raw, json)
Hash identifier:          YEKOEQXougo4mTFz9JSVCOxBagPwbAcSNBq+EA6qnl0=
Subject key identifier:   6E:3F:55:B6:58:34:95:9A:0F:31:F6:77:1A:62:90:68:61:E9:09:76
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       3B62FCFB230DEC9C3214D9CCD13A0913185C41E8
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa
Signing time:             Mon 26 Oct 2026 02:38:22 +0000
ROA not before:           Mon 26 Oct 2026 02:33:22 +0000
ROA not after:            Mon 25 Oct 2027 02:38:22 +0000
asID:                     28349
IP address blocks:        187.85.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:62:fc:fb:23:0d:ec:9c:32:14:d9:cc:d1:3a:09:13:18:5c:41:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:22 2026 GMT
            Not After : Oct 25 02:38:22 2027 GMT
        Subject: CN=6E3F55B65834959A0F31F6771A62906861E90976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:89:32:c7:d0:16:45:2c:fd:85:2e:d6:ff:
                    e2:39:52:e8:30:7c:20:a6:93:3f:fd:9b:92:e2:cd:
                    82:03:51:af:3e:9c:23:60:d6:56:ce:77:05:61:f5:
                    e7:fd:97:93:df:91:05:9e:8d:c5:64:aa:2f:bc:1f:
                    0a:47:1e:88:4c:07:5a:0e:73:97:10:a9:f2:d8:0d:
                    f1:20:07:22:da:71:2b:4d:2e:c1:54:9f:2c:76:32:
                    00:57:89:73:09:2e:4f:c3:01:2b:6e:ff:63:df:49:
                    38:c6:6e:47:52:f0:04:6e:a1:35:8d:94:eb:95:2d:
                    22:e2:02:ea:34:7e:e5:95:6e:85:f7:95:fb:8e:10:
                    ea:08:61:97:6f:85:34:be:b2:7a:ed:6a:ef:68:99:
                    2e:54:d1:ba:d4:8f:e4:79:10:e7:d5:05:4a:16:6d:
                    ab:eb:40:09:1d:7e:17:54:3f:5c:56:c7:48:d0:65:
                    81:22:6f:08:6d:a9:fc:ea:16:4d:fe:71:91:ef:e1:
                    20:ad:5a:30:21:99:cd:80:83:24:f6:37:f8:7e:ba:
                    e1:4e:d1:f7:0e:66:a3:9e:0a:1d:60:ad:4a:2d:ee:
                    cc:c8:95:70:07:c9:c3:07:ba:db:e2:11:8a:32:59:
                    7b:79:56:bf:f9:2b:28:08:53:f5:5d:b3:fb:ec:be:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:55:B6:58:34:95:9A:0F:31:F6:77:1A:62:90:68:61:E9:09:76
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138372e38352e3230302e302f32312d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:7a:fe:98:a6:c6:7c:7a:fc:8f:32:8e:03:75:7d:fd:03:d5:
         b4:4e:88:4c:50:99:fc:60:36:10:d5:d2:22:ca:55:f4:92:e1:
         d3:63:45:1f:70:54:73:a8:bc:34:06:99:18:97:09:43:a6:7b:
         32:24:aa:5b:d5:3b:90:8c:66:70:fb:20:f0:ef:82:b1:e2:1e:
         2c:3b:4e:68:a4:3c:ea:fb:80:18:c8:bd:7b:8c:cb:db:8c:c4:
         57:d0:37:1a:60:1e:ef:7f:01:27:ca:40:63:f3:1f:55:c3:38:
         f6:7c:a3:36:d4:d8:b4:da:fd:bc:64:a3:5e:c3:49:cc:86:8f:
         14:7f:71:5b:c5:16:54:87:de:9f:22:a7:af:b4:f6:81:2d:e3:
         8a:56:c9:29:08:7d:71:b3:3f:ca:4e:0b:18:60:04:4d:87:9f:
         c3:38:ab:e6:6b:9e:47:8c:7b:70:50:68:e6:34:8e:e8:42:6f:
         39:ee:78:59:20:05:80:db:c9:fd:9c:4c:c2:50:f3:0a:53:c4:
         d5:03:40:53:41:fc:b9:24:f9:e6:e5:9c:3f:2b:57:fb:cb:11:
         aa:03:43:ff:b7:c2:14:70:ea:e6:ca:93:51:8a:5a:e6:9a:4c:
         14:44:f4:ae:67:a9:a6:ee:0a:7e:11:36:4f:92:d9:c3:05:7d:
         88:07:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:49:22 2026 by rpki-client