Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233332e302f32342d3234203d3e20323636333132.roa
File:                     3138392e39302e3233332e302f32342d3234203d3e20323636333132.roa (raw, json)
Hash identifier:          ty4JHv3+53mG9HL5w7X2PWcpsnoskAmwyps1Ias0ePE=
Subject key identifier:   0C:4E:AC:EB:BA:6B:F3:D7:FE:AA:4E:59:E5:C2:36:20:73:84:93:8E
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       7D592EB02EB8AABA6246C3ED24361296B8E31E2C
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233332e302f32342d3234203d3e20323636333132.roa
Signing time:             Wed 19 Aug 2026 04:18:20 +0000
ROA not before:           Wed 19 Aug 2026 04:13:20 +0000
ROA not after:            Wed 18 Aug 2027 04:18:20 +0000
asID:                     266312
IP address blocks:        189.90.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 14:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:59:2e:b0:2e:b8:aa:ba:62:46:c3:ed:24:36:12:96:b8:e3:1e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Aug 19 04:13:20 2026 GMT
            Not After : Aug 18 04:18:20 2027 GMT
        Subject: CN=0C4EACEBBA6BF3D7FEAA4E59E5C236207384938E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:52:14:29:51:8c:72:29:ad:21:cf:0a:88:
                    a3:e5:72:ec:81:8c:0d:56:21:31:9e:0e:c3:12:87:
                    c4:8a:96:59:de:7a:bc:77:40:53:a9:e2:c9:87:d7:
                    06:46:45:c7:05:47:19:f2:8f:77:8b:40:35:40:dc:
                    19:7b:19:d1:13:cf:cb:63:5f:bc:db:bb:2d:d4:06:
                    d9:77:ae:6f:8e:b4:46:90:aa:8a:a8:6f:3b:30:a6:
                    61:63:14:0f:48:7f:4c:b4:3a:b5:06:fd:96:3a:23:
                    66:b8:f3:f1:6d:d7:ab:93:11:3b:27:3b:41:a0:6d:
                    17:ff:f9:3c:04:fe:cd:93:e7:8f:d6:81:4e:2f:18:
                    46:03:4f:94:c3:af:55:77:01:55:ee:ee:dc:55:da:
                    72:06:a1:f1:1a:56:15:74:b8:ac:3d:7a:bc:4d:fa:
                    92:23:d5:6a:b5:58:9f:19:32:e0:f1:19:da:36:20:
                    29:6c:f4:27:32:98:72:4e:08:43:f9:b3:fc:b7:c1:
                    44:25:e9:13:7f:1e:1c:1d:e4:74:3c:53:e3:a4:17:
                    e6:6f:3d:77:f3:58:05:d5:6b:b5:fe:df:ce:b5:ff:
                    fc:1f:9a:07:4f:71:cb:b8:fe:f6:3f:f3:ec:e4:9c:
                    49:1c:ad:8c:b5:fa:60:1d:94:62:ff:e0:b7:a4:ec:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4E:AC:EB:BA:6B:F3:D7:FE:AA:4E:59:E5:C2:36:20:73:84:93:8E
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/3138392e39302e3233332e302f32342d3234203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:56:ce:dd:25:e6:9b:04:15:ce:75:82:41:1b:4f:52:35:40:
         fb:a3:f1:74:e7:aa:c2:c6:fc:4f:24:fd:22:69:c7:c5:fe:7c:
         f1:3c:1f:b2:4d:25:54:1f:a8:0d:ca:2c:36:de:7b:b6:11:a9:
         1f:42:21:80:f5:a7:81:26:44:97:57:f9:4d:9f:a0:b3:0f:90:
         72:60:3e:1c:81:3a:61:09:77:5f:a0:ed:34:75:ce:8f:3e:b2:
         cb:cc:4f:fe:c2:e1:1c:a2:d0:7a:65:a2:a5:16:5b:35:f6:2b:
         68:35:01:5c:92:0a:29:ba:ef:d4:5c:85:b2:fb:ca:ee:22:a3:
         4a:f7:e4:70:8b:9a:ea:25:64:a7:da:b2:0e:b0:a5:ef:4e:48:
         30:4c:a1:8e:0d:84:d9:35:53:67:c7:e6:3c:e4:c6:f5:03:7c:
         fd:de:4b:c3:b6:44:64:f4:04:4e:5e:e8:27:36:cf:24:f3:fd:
         10:55:63:a7:18:82:dc:4c:1b:05:f1:93:af:db:aa:81:a9:46:
         dc:21:56:6f:b4:32:ee:67:21:bd:5e:0a:09:31:5e:b3:1b:33:
         e4:91:57:a7:28:e8:2d:46:8d:32:3b:a7:da:1d:97:58:d8:7e:
         8a:7b:47:91:26:93:3b:cb:73:18:8f:a2:52:d8:23:a4:d5:cd:
         e4:9f:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:32:21 2026 by rpki-client