Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
File:                     3138392e35312e3133362e302f32322d3234203d3e203238333439.roa (raw, json)
Hash identifier:          f1oSkOZzSyHIwxpFF5W+zyw1m5pxCJBa37UCcyNWUU8=
Subject key identifier:   F2:2D:B6:0D:4B:6C:8A:0F:85:80:38:B2:60:13:7C:4F:14:27:8D:94
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       380A9E72F852E202D214E62633F9638D144F5645
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa
Signing time:             Mon 26 Oct 2026 02:38:22 +0000
ROA not before:           Mon 26 Oct 2026 02:33:22 +0000
ROA not after:            Mon 25 Oct 2027 02:38:22 +0000
asID:                     28349
IP address blocks:        189.51.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 12:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0a:9e:72:f8:52:e2:02:d2:14:e6:26:33:f9:63:8d:14:4f:56:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:22 2026 GMT
            Not After : Oct 25 02:38:22 2027 GMT
        Subject: CN=F22DB60D4B6C8A0F858038B260137C4F14278D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:26:76:e9:bf:cb:64:4c:f8:63:a2:9b:bd:
                    44:ea:4f:98:b0:b2:50:84:a0:02:0e:fc:1d:2a:51:
                    90:40:c5:eb:91:1e:55:c5:03:e7:55:cf:6c:ef:3f:
                    2f:2c:8a:66:5d:f2:40:e4:67:30:ff:a3:81:85:bc:
                    c7:af:72:14:dd:a6:90:4d:45:46:51:e3:0f:3d:2a:
                    24:30:ad:cb:ef:f7:cb:f2:70:8c:fd:76:a2:31:7f:
                    d9:2b:b9:08:79:59:eb:a4:57:38:c5:5f:21:cf:3d:
                    33:47:e0:1f:d0:82:20:d3:3c:0e:55:21:a1:b6:f2:
                    de:86:46:5e:7d:38:5d:76:9d:51:d6:5b:1d:c5:31:
                    6a:33:dc:bb:4e:af:1b:0a:6a:ac:93:a3:bd:bc:fd:
                    74:4b:1d:b1:03:04:54:c3:70:49:f3:9d:21:52:84:
                    c6:92:96:09:07:d6:cd:2b:84:5f:cd:91:bc:71:72:
                    64:a9:4b:2c:06:8d:e8:09:e0:d7:5f:aa:5c:89:41:
                    a0:28:dc:a4:52:f1:2c:fc:9b:d7:fa:c7:be:8c:91:
                    23:10:cb:4c:00:f5:6e:88:db:1d:f4:d1:95:ea:1d:
                    bf:25:ff:f7:21:f7:e9:34:34:ba:30:22:64:d4:87:
                    58:de:c3:f5:70:7d:67:db:03:6b:7f:4e:0d:43:7e:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:B6:0D:4B:6C:8A:0F:85:80:38:B2:60:13:7C:4F:14:27:8D:94
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e35312e3133362e302f32322d3234203d3e203238333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:77:19:5e:6b:79:47:e6:07:52:55:f8:f5:af:c1:19:c3:
         dd:c6:6e:ad:31:f1:24:aa:66:80:9e:39:23:22:14:d2:86:78:
         b7:e8:0f:bf:3f:5f:09:0c:ad:05:5c:95:cc:20:76:25:dd:b5:
         3e:7c:6b:9d:f4:ee:79:b9:63:93:c1:23:a7:a3:6f:db:e2:f1:
         ca:92:3e:82:2f:2b:f6:9f:b3:a2:ea:1b:06:f7:70:50:0d:44:
         27:61:fc:a0:25:f1:49:59:20:a6:03:ce:9f:44:f1:98:95:be:
         cc:0b:83:74:be:44:98:bf:07:12:58:37:89:47:7e:fd:44:28:
         20:74:fc:8d:64:f0:51:91:b6:76:cd:fb:75:a2:7d:9c:59:cf:
         33:91:24:72:79:6b:e1:42:b9:1b:4c:cf:7a:5c:61:b3:1f:4a:
         20:90:95:ed:ab:e0:a6:63:f7:86:27:63:94:fd:af:0b:a2:b9:
         82:64:96:47:f0:b6:de:8b:2c:d1:91:b9:b9:56:6f:20:2d:96:
         66:13:36:52:d2:0e:e5:fe:36:9f:b1:47:9d:31:9c:85:80:b3:
         46:58:cf:f2:c0:2f:2f:89:1a:4f:3b:d3:f5:8d:91:b3:fc:ef:
         a6:2d:83:e1:20:6c:0d:76:43:5f:bc:04:ed:2d:7b:23:55:58:
         b5:46:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 02:25:14 2026 by rpki-client