Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa
File:                     3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa (raw, json)
Hash identifier:          bHkaMgsQI+wNREFKFuJNbcR0Pr4FXc5yHzm39e6iE2U=
Subject key identifier:   F9:E9:FB:16:CF:40:4C:F3:84:9B:CB:DF:8A:BC:36:B0:BC:9B:F8:1F
Certificate issuer:       /CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
Certificate serial:       2200251643694EC029AE57BBC60DAB0DD24590C7
Authority key identifier: 8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa
Signing time:             Mon 03 Aug 2026 21:42:22 +0000
ROA not before:           Mon 03 Aug 2026 21:37:22 +0000
ROA not after:            Mon 02 Aug 2027 21:42:22 +0000
asID:                     266006
IP address blocks:        131.196.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl
                          rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 07:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:00:25:16:43:69:4e:c0:29:ae:57:bb:c6:0d:ab:0d:d2:45:90:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB
        Validity
            Not Before: Aug  3 21:37:22 2026 GMT
            Not After : Aug  2 21:42:22 2027 GMT
        Subject: CN=F9E9FB16CF404CF3849BCBDF8ABC36B0BC9BF81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:ac:39:7b:2b:38:1f:cd:a5:af:56:32:6d:
                    f3:4d:ac:4d:8a:b3:8c:6f:ad:3a:dc:c8:34:f1:41:
                    0d:b8:67:9c:0c:46:bf:5a:d1:44:2d:53:c7:1e:86:
                    f4:98:73:2c:45:c3:37:c4:2e:db:ec:be:4e:5d:1f:
                    82:4a:6b:bb:ef:29:da:2e:47:b8:ba:97:7b:af:8b:
                    1d:c9:82:79:43:1d:0e:68:75:e8:63:fd:76:96:de:
                    55:27:82:65:47:c2:72:b8:78:e4:bb:47:b6:51:75:
                    6d:a0:40:77:a9:b6:fb:42:10:dc:48:84:5e:bd:c7:
                    fe:77:4b:0f:a8:01:3a:98:d0:21:86:c2:f1:51:08:
                    f3:09:2a:fe:4c:42:cd:cc:9e:5d:0e:ec:08:9c:c0:
                    fa:08:7f:fa:ca:59:6f:7d:eb:b3:5f:6d:ac:51:d7:
                    2c:87:1e:54:76:fb:af:6a:c1:ca:c7:ab:84:4b:0e:
                    5a:13:a4:88:9f:d3:8f:dd:2d:38:ba:c4:00:d6:97:
                    a2:38:27:ef:ea:44:91:ef:a5:e1:22:a0:0d:d0:6b:
                    d1:ab:b8:e9:fd:31:78:2d:7b:12:54:c4:e9:cf:bf:
                    75:4d:f9:fd:bd:50:53:5a:ed:ae:ca:cc:da:e2:d8:
                    f0:94:21:56:74:66:c5:f2:c6:ad:3b:86:f4:a8:8c:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:FB:16:CF:40:4C:F3:84:9B:CB:DF:8A:BC:36:B0:BC:9B:F8:1F
            X509v3 Authority Key Identifier:
                keyid:8A:9C:87:7C:E4:96:B4:F3:FA:BB:A1:D4:99:6C:34:FC:8B:BF:99:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9C877CE496B4F3FABBA1D4996C34FC8BBF99BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CEzpnXV3g1hczBHWqaG6L6g3p6pFvnMSt3TFDxMxES6J/0/3133312e3139362e3232342e302f32322d3332203d3e20323636303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:76:83:06:b7:44:ad:b3:0e:68:6f:41:fe:09:65:b2:8b:5f:
         d5:32:c7:02:d9:8e:4d:2a:7e:24:c5:70:51:40:65:76:a2:0c:
         cf:c7:71:0f:cc:b4:be:06:f4:0d:1f:18:2e:26:09:6b:3a:8e:
         45:fd:1f:ee:fb:35:a2:3f:88:bb:71:4f:d6:59:2e:8d:50:09:
         d9:d5:e7:3e:f8:a1:96:e9:53:ea:05:79:bd:70:5c:99:b0:d7:
         88:04:c0:a8:5b:5c:46:b5:08:9a:4f:13:81:f5:b0:44:e9:4a:
         fb:b6:e0:2e:60:6c:8b:c0:16:92:ab:24:64:ad:17:6b:ea:c4:
         56:35:b6:2f:a1:b1:ab:c4:2e:54:8b:8f:de:46:d0:16:7e:2b:
         e5:a5:35:83:a8:0c:96:77:19:d2:0a:bb:e5:cb:05:4b:2f:48:
         b0:a6:e6:f3:17:8a:95:6c:12:30:f6:46:eb:32:77:b8:e2:78:
         7c:af:0f:60:3e:60:31:57:24:af:b0:b5:60:85:f8:f5:88:10:
         ee:b3:9a:c5:bc:fa:ea:e7:e5:0d:40:93:80:b1:5d:e0:ca:c3:
         eb:f3:6c:30:5b:9b:8f:64:81:2c:f0:81:f2:55:ae:b5:ae:7b:
         f5:45:0e:c1:10:dd:37:93:58:22:7a:5d:35:c2:16:ab:3f:a1:
         9a:65:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:08:11 2026 by rpki-client