Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
File:                     3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa (raw, json)
Hash identifier:          TuQ2nqJwaxQipXga2Qdmx+I0ghnC5PUHXwlgO5kMLOM=
Subject key identifier:   9B:AF:CD:DB:52:A3:B3:AF:4E:8D:5E:45:FD:BD:F7:2D:8F:01:8B:A1
Certificate issuer:       /CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
Certificate serial:       70A43237520FC3D3E6BC95EC4473EB70319AD06B
Authority key identifier: 26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa
Signing time:             Sat 24 Oct 2026 19:25:17 +0000
ROA not before:           Sat 24 Oct 2026 19:20:17 +0000
ROA not after:            Sat 23 Oct 2027 19:25:17 +0000
asID:                     266252
IP address blocks:        192.140.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl
                          rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 16:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a4:32:37:52:0f:c3:d3:e6:bc:95:ec:44:73:eb:70:31:9a:d0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
        Validity
            Not Before: Oct 24 19:20:17 2026 GMT
            Not After : Oct 23 19:25:17 2027 GMT
        Subject: CN=9BAFCDDB52A3B3AF4E8D5E45FDBDF72D8F018BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:83:4f:85:ac:36:e5:ff:8e:4c:34:e0:ee:
                    d8:15:fb:bd:cc:57:33:9b:8f:fe:19:9f:9f:6c:10:
                    84:40:dd:ec:c1:bb:90:e8:1f:ed:51:ce:e8:1a:6f:
                    8b:64:82:02:aa:4d:65:56:b3:e4:fa:ee:58:24:80:
                    0e:a1:6b:d0:ad:0f:bd:de:73:d2:21:85:b6:a7:0f:
                    ce:d6:5d:0e:4c:17:10:ab:a3:21:a9:bd:be:19:fc:
                    42:d1:2c:9f:df:35:f5:42:23:3f:ce:43:87:ab:e1:
                    48:cb:e9:67:bb:ae:d2:85:0f:7c:47:54:37:f9:8f:
                    3f:9a:4f:2d:00:a1:76:ae:8f:73:1d:a8:6a:f3:39:
                    4b:5b:d8:61:d9:de:f8:21:8f:a1:fb:f5:19:16:b5:
                    3c:fa:df:ad:93:13:1d:cb:02:5c:39:6e:19:02:0a:
                    15:54:1d:1f:43:02:ea:9d:f4:7f:f0:04:07:e8:70:
                    5a:cd:1f:b9:f7:f3:75:24:ea:48:6a:7f:87:f1:88:
                    8f:85:3c:7a:74:6b:4f:6c:e2:90:63:b3:71:72:a6:
                    71:2a:b5:8c:69:ad:ad:a4:1d:d1:35:e4:aa:a7:45:
                    1b:2d:4e:cf:a8:be:bb:02:45:c0:aa:19:44:ac:c5:
                    61:73:84:a5:0f:a6:a6:79:b6:9c:05:68:4b:1e:52:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:CD:DB:52:A3:B3:AF:4E:8D:5E:45:FD:BD:F7:2D:8F:01:8B:A1
            X509v3 Authority Key Identifier:
                keyid:26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/3139322e3134302e3132302e302f32322d3234203d3e20323636323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:42:6e:bc:6c:a0:c8:73:28:d0:c2:e5:51:4a:41:e1:84:88:
         3e:f9:78:b2:44:7e:aa:ed:6f:f3:a5:51:80:25:52:f0:c6:2f:
         93:26:39:40:8f:b9:15:78:12:48:d1:00:f3:0d:be:88:48:a2:
         fc:c4:2c:8c:0a:9b:06:f7:5c:82:ec:64:0c:d6:b4:db:45:46:
         e9:eb:70:22:44:63:ce:01:ea:24:d8:ec:01:28:90:46:12:a9:
         1f:47:61:08:c7:f1:cc:56:54:36:e6:34:0a:1f:20:9b:83:d3:
         b0:72:b8:59:77:84:90:a3:98:11:96:b7:8f:03:9e:49:97:d3:
         39:c0:51:bb:d4:99:ca:cf:35:39:54:f9:b7:f6:42:eb:2a:3a:
         63:d0:ec:9c:b3:be:b8:af:91:38:e5:d2:44:64:68:8b:fa:84:
         3a:6b:ec:8b:53:77:4b:96:fa:e1:cf:9f:23:2c:4d:29:6f:56:
         11:81:39:3b:b0:c4:f4:7c:98:d1:ee:c1:31:68:d3:99:f6:21:
         00:59:a4:08:20:76:f4:d1:33:43:08:ee:33:3f:eb:05:46:95:
         cb:8a:3f:67:d6:bb:5d:ed:99:f6:e6:28:6d:02:93:4c:86:57:
         88:9e:6f:de:bb:ab:56:d7:f8:6b:ef:a9:54:b3:fd:4d:f7:8b:
         e2:02:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 00:07:35 2026 by rpki-client