Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
File:                     3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          pbzDvICSg12qWlNoNHisoUaR7ybegIMzcDK+wyerc3c=
Subject key identifier:   BC:D8:20:DA:53:E5:66:26:A9:D3:4C:13:2F:3F:F4:A1:F0:41:DA:CE
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       5949EF82BAD6485B520407427817E5E94EF10897
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 26 Oct 2026 02:38:22 +0000
ROA not before:           Mon 26 Oct 2026 02:33:22 +0000
ROA not after:            Mon 25 Oct 2027 02:38:22 +0000
asID:                     28349
IP address blocks:        189.126.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:ef:82:ba:d6:48:5b:52:04:07:42:78:17:e5:e9:4e:f1:08:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:22 2026 GMT
            Not After : Oct 25 02:38:22 2027 GMT
        Subject: CN=BCD820DA53E56626A9D34C132F3FF4A1F041DACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:78:44:bb:89:3d:e5:40:6e:88:f3:f9:77:
                    68:e7:b5:c5:4f:64:eb:c5:24:b1:d8:07:1c:99:cd:
                    31:ad:14:ab:23:27:c9:55:27:0b:e7:1d:77:70:dc:
                    a9:89:ca:d6:90:0a:aa:7e:07:89:35:16:9f:1f:d1:
                    80:1d:91:d6:e9:3a:6e:83:d8:a6:73:b0:0c:c5:00:
                    e0:92:75:91:7f:6c:fa:86:c9:5e:e2:d1:f7:dd:0b:
                    b1:82:9e:34:77:92:25:5f:00:13:c6:6a:21:3d:de:
                    ed:cb:2d:2b:67:e1:fb:c2:38:03:24:ff:40:3d:6c:
                    df:93:ac:3e:59:e0:0d:50:0e:75:e2:d7:12:72:7e:
                    e2:01:07:f4:ce:3a:2c:0c:99:2e:22:40:38:65:37:
                    4e:f9:d3:12:76:aa:b0:20:b2:ce:ea:b2:70:a2:ab:
                    d0:ba:5b:a3:80:73:34:ee:b3:b3:90:0d:da:7d:9a:
                    b0:f0:99:f5:fb:7a:72:34:72:2e:5a:42:73:53:2a:
                    cf:e1:7b:cb:5e:4a:b7:4f:ff:81:6e:06:e7:5d:82:
                    c4:71:c2:f4:39:3f:1d:d8:fc:ae:27:7d:2d:ef:78:
                    d4:fa:9d:d4:68:cf:22:32:dc:9e:5b:54:38:51:0d:
                    05:cd:30:ba:d4:04:ce:41:6b:96:70:30:91:55:62:
                    6d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:20:DA:53:E5:66:26:A9:D3:4C:13:2F:3F:F4:A1:F0:41:DA:CE
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3132362e3137362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:2c:c5:7d:b9:90:5d:81:ba:b3:9e:f6:97:0d:6d:74:70:
         c9:99:36:8a:a1:42:3c:8e:03:1e:b0:47:6a:d0:1b:d6:fe:c9:
         56:1c:3f:6e:35:8e:da:b8:ae:10:96:95:a2:ed:47:59:eb:54:
         ee:a8:1e:d9:18:a8:65:7f:ca:81:3e:bd:bf:77:8e:c6:93:bd:
         85:30:0e:a5:18:4e:70:93:9d:b1:55:9b:38:cf:a4:7f:a8:69:
         93:46:d9:48:05:bd:60:97:18:6f:85:0f:b2:df:55:3c:59:f0:
         a8:02:f9:47:bb:a1:84:5b:3b:2e:42:75:b4:33:e8:d1:b7:1d:
         0f:0c:99:c2:e7:ec:52:93:20:71:f1:a1:0a:df:5c:5a:b2:3d:
         99:6d:f9:af:dd:ce:cc:46:ed:06:d9:21:9c:72:c9:58:89:a0:
         9d:a5:1a:0d:e4:d2:ac:df:83:72:8d:e1:25:6f:1c:19:2f:58:
         da:f6:0e:9e:78:02:74:57:4e:d1:4a:e8:55:f3:e2:9d:c4:a0:
         9b:c5:0a:c5:df:dc:12:fd:4b:f2:7a:80:37:15:04:62:c6:53:
         8b:6d:cd:e2:c4:cd:3a:5f:b2:bb:81:f7:58:04:6c:bd:38:18:
         06:94:9a:53:6d:d1:a4:ba:6c:2c:2d:05:35:dc:f1:a5:72:53:
         09:68:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:36:46 2026 by rpki-client