Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3138362e3139362e3230382e302f32342d3332203d3e20323735383139.roa
File:                     3138362e3139362e3230382e302f32342d3332203d3e20323735383139.roa (raw, json)
Hash identifier:          R0fxA1JNd9n0oZ6XkJNID4p3GyGTv8K/SmKfPMTOvGs=
Subject key identifier:   93:A9:49:0B:4F:BD:7C:61:38:72:FA:89:C4:64:20:F0:A7:FA:A3:33
Certificate issuer:       /CN=3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE
Certificate serial:       79818B7C9A0E05EA9A0433A57FD0CD3BC83887AC
Authority key identifier: 32:73:BA:6E:F4:FE:A4:CB:67:4B:47:EA:84:DC:AC:FE:0F:21:C2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3138362e3139362e3230382e302f32342d3332203d3e20323735383139.roa
Signing time:             Mon 28 Sep 2026 12:46:57 +0000
ROA not before:           Mon 28 Sep 2026 12:41:57 +0000
ROA not after:            Mon 27 Sep 2027 12:46:57 +0000
asID:                     275819
IP address blocks:        186.196.208.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.crl
                          rsync://rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 15:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:81:8b:7c:9a:0e:05:ea:9a:04:33:a5:7f:d0:cd:3b:c8:38:87:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE
        Validity
            Not Before: Sep 28 12:41:57 2026 GMT
            Not After : Sep 27 12:46:57 2027 GMT
        Subject: CN=93A9490B4FBD7C613872FA89C46420F0A7FAA333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:60:02:14:b4:57:22:42:66:d1:54:8b:b7:
                    ab:6e:b1:a4:5c:ee:c6:2b:be:4e:6e:fd:38:c7:f9:
                    b4:22:0c:d4:19:0d:a2:30:9c:a4:3e:11:07:84:47:
                    0e:79:71:dc:2c:a5:92:ff:9b:be:1f:17:aa:e0:bb:
                    4b:1e:27:19:54:2c:f7:a2:7a:81:fe:a8:4c:9d:ce:
                    4c:2f:e1:7d:6b:6f:ca:a1:f5:bb:1a:27:60:63:4a:
                    6d:fe:48:35:c8:f7:e9:fa:05:35:27:99:df:2c:29:
                    e9:9a:d6:de:a5:c8:7f:f1:59:a5:13:e1:52:f5:7c:
                    48:94:83:86:72:03:d3:d8:af:f4:36:d3:d3:8c:13:
                    05:14:02:0e:a3:da:0e:0e:9e:96:d0:48:db:63:02:
                    5c:4c:22:7f:4d:28:8f:ad:d3:c5:c6:d7:31:09:06:
                    b8:25:41:8b:50:4a:60:6d:7a:82:04:63:58:26:57:
                    44:09:8d:3d:16:b8:66:61:41:c3:76:26:f8:24:e8:
                    ac:0e:56:29:59:b3:1d:61:ed:ea:8d:73:46:9f:fd:
                    15:ec:f8:e4:f0:f7:fb:98:6b:4a:43:0f:19:44:59:
                    6d:61:68:39:bc:80:23:62:ad:12:21:75:46:62:98:
                    51:4a:60:3a:a5:09:a1:1c:8f:c9:fa:ee:96:02:65:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:49:0B:4F:BD:7C:61:38:72:FA:89:C4:64:20:F0:A7:FA:A3:33
            X509v3 Authority Key Identifier:
                keyid:32:73:BA:6E:F4:FE:A4:CB:67:4B:47:EA:84:DC:AC:FE:0F:21:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3273BA6EF4FEA4CB674B47EA84DCACFE0F21C2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSy4BoLUe56UN4a6X26Vj8NKYTdS9wCntssKDdydXGVg/0/3138362e3139362e3230382e302f32342d3332203d3e20323735383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:8b:39:ff:2f:76:7f:59:7d:a9:c3:d4:66:d0:04:43:0c:
         21:29:87:be:3d:4c:43:8c:20:57:da:7e:b8:1d:c4:5e:8d:ee:
         ec:34:31:e4:e0:c3:49:b1:6d:dd:71:6a:90:e5:8c:9b:62:8e:
         4d:0c:70:4f:1f:dd:59:e6:f4:40:43:25:30:e6:75:9a:3e:e7:
         a5:e0:f5:f2:5e:3f:3c:3c:95:43:f3:47:b5:46:56:8e:a9:13:
         31:6b:c2:5c:ca:2c:72:d8:39:09:6a:c4:21:10:39:43:67:c5:
         73:a1:70:3c:fd:5f:0e:22:6a:f0:4c:c3:89:41:b1:a6:5f:26:
         09:9c:0d:61:38:1b:01:ab:df:d9:84:0d:1f:a9:bb:5f:f2:8f:
         61:c6:a7:0a:70:e7:25:f2:dd:38:03:65:82:24:24:2a:a8:e5:
         92:1b:7e:0a:97:d1:67:b5:d2:7d:ad:a6:78:e2:ce:71:49:11:
         bc:95:41:7f:8a:77:40:f4:61:44:cd:d4:1d:86:bf:9e:0b:61:
         f7:2b:9c:39:8a:b0:69:83:cc:37:ee:d1:06:eb:9e:52:82:ca:
         27:c1:86:51:3b:b0:fb:88:50:12:36:58:27:a9:a3:a0:4c:99:
         52:d3:e2:f5:f1:02:63:36:7e:5e:a4:97:29:98:73:89:0a:31:
         2b:92:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:56:41 2026 by rpki-client