Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa
File:                     3230312e37362e3232342e302f31392d3234203d3e203238363437.roa (raw, json)
Hash identifier:          G6Rj0n1Cf4LydOazV/xaJ0X71tJrh+A9aGaowTe010Y=
Subject key identifier:   E9:86:F7:16:43:53:61:B7:34:35:BC:08:8F:B7:44:B6:EB:3A:4D:B8
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       3C94D44C36A57416C71D81CCAA75FA6AE1CDE7AA
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa
Signing time:             Mon 26 Oct 2026 02:38:24 +0000
ROA not before:           Mon 26 Oct 2026 02:33:24 +0000
ROA not after:            Mon 25 Oct 2027 02:38:24 +0000
asID:                     28647
IP address blocks:        201.76.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 05:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:94:d4:4c:36:a5:74:16:c7:1d:81:cc:aa:75:fa:6a:e1:cd:e7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:24 2026 GMT
            Not After : Oct 25 02:38:24 2027 GMT
        Subject: CN=E986F716435361B73435BC088FB744B6EB3A4DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:c5:b5:50:11:41:3b:d8:3d:b1:bf:60:d6:
                    52:4b:70:9f:f1:5b:9b:d3:04:55:84:96:d0:f5:26:
                    e6:10:8f:a0:be:17:5b:39:73:81:e4:86:c7:12:79:
                    e1:25:66:9b:af:ad:05:34:b2:17:0c:11:58:3c:26:
                    f4:51:39:9a:c5:96:38:a5:1b:0e:4a:f0:d6:1d:36:
                    72:f8:12:fc:6d:13:99:5b:82:62:40:c8:52:c5:13:
                    e8:aa:e5:a2:a1:94:4a:34:1c:c0:41:b0:10:11:58:
                    7e:df:a6:cc:30:69:24:e9:a1:04:d1:cf:8e:c4:0d:
                    16:d6:1a:09:54:78:51:52:a3:a0:d9:ef:13:2c:fa:
                    8b:43:e4:e0:71:25:0f:65:d6:46:3c:cb:ad:50:98:
                    38:b5:a4:d4:84:f3:47:a7:ec:dc:4d:c1:8d:69:5e:
                    58:ce:70:c9:7c:b7:c9:01:c0:25:20:19:33:08:c7:
                    09:3c:59:cd:60:a8:14:52:30:99:5d:88:14:08:f1:
                    09:35:07:a9:d4:35:dd:79:2a:d0:e3:0d:96:e1:62:
                    b9:3a:0a:ce:7b:e8:c2:96:50:4d:4e:fb:5d:97:94:
                    5a:38:52:46:53:e7:ce:1f:8d:07:fc:90:cb:e6:07:
                    92:06:1b:e1:52:d9:52:2f:b1:25:b2:0a:cf:9e:80:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:86:F7:16:43:53:61:B7:34:35:BC:08:8F:B7:44:B6:EB:3A:4D:B8
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3230312e37362e3232342e302f31392d3234203d3e203238363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:69:17:49:1c:14:e5:eb:61:ad:79:ee:87:3d:4d:fd:82:
         73:99:39:3d:c2:7a:8b:09:0c:71:d7:f0:5c:05:88:9b:4b:f1:
         e3:e5:ed:91:6d:47:c8:db:b7:b3:96:24:89:0d:cb:28:53:27:
         ab:bc:e0:70:f3:6e:78:b9:6f:fd:ef:ca:26:33:2d:af:21:a1:
         d9:e3:6d:60:73:14:86:f5:3a:e6:85:02:91:f9:a9:51:a9:72:
         10:60:23:6c:4a:82:c1:36:87:73:5b:b9:ff:af:20:85:a5:7a:
         41:76:ef:39:c9:f2:56:6e:4c:b9:11:08:43:73:9f:e3:3a:8d:
         ee:69:3b:77:d0:43:a9:b7:95:0c:6b:d9:34:e6:13:0c:ac:31:
         66:c1:bf:cd:b5:f7:d6:60:61:03:df:73:09:eb:1b:88:06:78:
         dd:ad:dc:b3:29:ec:20:76:4c:61:9f:1b:fb:e9:77:29:2a:5f:
         95:07:5c:64:3a:4f:07:d9:8d:e8:9c:44:00:59:b7:81:05:b1:
         91:05:d3:5c:cf:bf:ae:bd:92:e7:04:e1:78:c6:b5:bf:93:f9:
         0a:d7:2b:b5:b9:6d:b5:b4:64:37:7a:aa:c2:f3:80:09:c8:bb:
         d1:98:75:e2:e3:0e:da:23:f1:28:b7:56:9c:12:1f:62:44:f8:
         fe:c3:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:28:24 2026 by rpki-client