Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/3138362e3139362e32382e302f32322d3234203d3e20323639323532.roa
File:                     3138362e3139362e32382e302f32322d3234203d3e20323639323532.roa (raw, json)
Hash identifier:          i51f6cRe4fsffYYcGRzinVEpdvi3wMps5OsaJWi1rpo=
Subject key identifier:   5D:5E:72:2D:71:AE:8E:F6:25:7B:FC:26:B6:A6:3D:4B:D5:1A:A0:48
Certificate issuer:       /CN=5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E
Certificate serial:       2CCCADB778DF9A44407BF20255EB01540FBADE0F
Authority key identifier: 5E:B7:BE:A7:5B:A5:E5:10:F3:86:A6:8E:A5:BD:69:AB:03:7A:BB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/3138362e3139362e32382e302f32322d3234203d3e20323639323532.roa
Signing time:             Fri 21 Aug 2026 19:48:19 +0000
ROA not before:           Fri 21 Aug 2026 19:43:19 +0000
ROA not after:            Fri 20 Aug 2027 19:48:19 +0000
asID:                     269252
IP address blocks:        186.196.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.crl
                          rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cc:ad:b7:78:df:9a:44:40:7b:f2:02:55:eb:01:54:0f:ba:de:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E
        Validity
            Not Before: Aug 21 19:43:19 2026 GMT
            Not After : Aug 20 19:48:19 2027 GMT
        Subject: CN=5D5E722D71AE8EF6257BFC26B6A63D4BD51AA048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:e1:e7:ef:eb:65:c7:60:48:c2:33:3c:f1:
                    d6:ac:ed:81:82:0c:2c:cd:a4:c8:ac:45:47:5b:b3:
                    8d:8d:98:ee:a5:89:d4:f6:8a:5f:0e:dc:1d:6b:95:
                    a1:49:ac:2c:e8:a7:5a:e7:dd:42:8b:9f:87:f8:ce:
                    38:02:6d:1e:70:af:4f:8f:f2:1a:18:57:ac:02:16:
                    6e:4d:4f:16:ba:ae:f0:eb:26:e1:7a:9e:ec:9d:0a:
                    68:7f:55:96:54:78:21:08:af:d1:61:e6:0f:fb:a1:
                    03:78:30:82:e1:a9:fa:b2:c4:02:56:34:c8:df:f7:
                    5d:cb:25:dd:7b:44:6d:0f:7d:fe:30:25:2f:b6:31:
                    d7:fb:df:6e:c8:95:6b:70:cd:2c:8c:f3:01:b8:c6:
                    a4:15:d5:8b:78:98:5e:18:16:b0:7f:94:f7:f0:46:
                    a5:1c:18:87:aa:f2:37:84:b5:ef:08:a3:74:e5:aa:
                    8b:91:59:56:e1:d8:cd:73:48:21:b3:19:52:f4:a8:
                    fa:b6:59:85:dc:72:60:fb:70:72:56:1a:8e:84:b0:
                    98:84:dd:65:19:62:e6:61:90:3b:48:c5:0b:10:38:
                    73:9c:71:6e:72:d4:30:49:a7:29:12:29:f6:00:23:
                    8b:35:cd:58:05:84:ee:27:16:a8:7e:02:3e:17:c2:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5E:72:2D:71:AE:8E:F6:25:7B:FC:26:B6:A6:3D:4B:D5:1A:A0:48
            X509v3 Authority Key Identifier:
                keyid:5E:B7:BE:A7:5B:A5:E5:10:F3:86:A6:8E:A5:BD:69:AB:03:7A:BB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EB7BEA75BA5E510F386A68EA5BD69AB037ABB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BXQ6NAVRZbsy5DhgX2kaULMFMPomLo3UCZ2tREqEk3H6/0/3138362e3139362e32382e302f32322d3234203d3e20323639323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:b0:07:ac:46:70:dc:f1:c9:ed:bd:e0:9d:6d:45:f1:b9:
         9d:6d:ca:12:78:ce:ca:fa:95:b0:3c:28:9d:87:fa:09:99:78:
         10:33:fb:1f:bf:24:c1:23:d9:64:a3:09:95:b7:30:94:29:a3:
         52:48:fd:ca:ae:ed:fe:24:80:f7:80:1f:03:e6:0f:17:d5:cc:
         83:5f:37:71:a8:9e:36:fb:7c:77:9f:60:91:8b:12:e7:55:df:
         4e:c9:4b:18:b7:3f:af:9c:64:5a:91:13:c2:d6:a9:a9:fa:30:
         6a:27:e4:a0:67:33:65:5a:40:e0:a7:22:69:57:fd:87:ca:48:
         d1:3d:1c:8f:3e:f7:22:42:00:51:01:0d:97:a5:31:a9:c8:7f:
         89:29:47:c8:00:75:8e:af:2e:c0:da:4c:3e:d4:92:35:8d:c8:
         41:d9:4a:a1:07:ab:56:63:d3:4e:ac:2a:a4:53:c0:5e:00:12:
         44:78:56:a7:ca:37:08:e1:6b:61:84:8f:e0:84:e7:32:83:05:
         cd:8b:b1:5d:94:c5:ba:b1:f6:ee:74:b2:78:bc:5e:0a:23:58:
         52:d1:76:44:00:93:f0:76:93:cb:e9:bd:29:19:34:ee:fd:19:
         fe:e3:be:9e:85:66:ed:0e:4c:f6:77:fe:4f:39:3f:50:1c:87:
         b5:0b:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 07:49:06 2026 by rpki-client