Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
File:                     3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa (raw, json)
Hash identifier:          8GjOTL0jKYix2tWeOEsNC3nmfxhWqAVhpd3LRu2Eu6w=
Subject key identifier:   55:1B:16:50:DB:28:90:3A:7B:F9:67:69:83:B3:7C:41:3E:D0:A1:00
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       3184EF8D1A5EBF47C6ECF666334E625586214FDB
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa
Signing time:             Wed 12 Aug 2026 13:04:19 +0000
ROA not before:           Wed 12 Aug 2026 12:59:19 +0000
ROA not after:            Wed 11 Aug 2027 13:04:19 +0000
asID:                     271111
IP address blocks:        192.140.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:84:ef:8d:1a:5e:bf:47:c6:ec:f6:66:33:4e:62:55:86:21:4f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Aug 12 12:59:19 2026 GMT
            Not After : Aug 11 13:04:19 2027 GMT
        Subject: CN=551B1650DB28903A7BF9676983B37C413ED0A100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:77:df:c6:ef:b7:c2:41:40:64:c3:c1:9f:
                    a8:30:95:3e:8a:0f:57:1e:f7:65:8a:8e:db:da:73:
                    bb:2d:79:41:1f:85:33:73:c2:be:c0:f3:19:c7:8e:
                    40:f0:7a:f2:12:7f:dd:a5:28:3c:24:2b:c9:0c:3a:
                    9f:f2:9a:10:b3:e9:ee:0d:e7:64:c2:99:93:7f:72:
                    66:aa:2d:c1:8f:50:fd:dd:fe:3d:5c:1a:00:fd:75:
                    b0:d4:ff:ec:81:ba:01:c8:19:02:c3:c5:b2:ba:66:
                    cd:66:1a:ca:5e:f0:45:2c:3e:9e:85:dc:b6:a9:3e:
                    a2:1f:c4:84:9e:c5:70:aa:28:6f:87:63:8e:79:54:
                    24:ec:6e:9a:c1:9d:0e:a6:b3:17:51:80:69:fe:33:
                    6c:9a:0e:b3:50:8f:ec:f8:3a:4e:a2:2c:f9:72:f3:
                    ff:ac:dd:49:84:81:51:92:d8:59:fd:43:1a:9a:bc:
                    e8:a9:8b:7b:53:c6:0a:c8:c7:cc:d9:46:39:25:1d:
                    ae:03:c0:fe:e4:d2:9e:02:5a:b4:4d:b4:ba:d1:4c:
                    13:06:da:dc:2e:39:d1:2d:ff:82:c1:58:8c:f0:ec:
                    75:cf:33:0d:a0:0c:d3:b0:ff:5a:9e:a4:5e:28:55:
                    5d:6c:28:50:ed:6d:59:9c:ee:2d:e3:ca:61:cb:1d:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1B:16:50:DB:28:90:3A:7B:F9:67:69:83:B3:7C:41:3E:D0:A1:00
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38342e302f32322d3232203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:39:f8:ce:3e:2f:e8:7b:69:69:3c:cc:91:03:b6:12:18:
         87:8a:5c:8f:bf:a9:55:45:34:49:4f:c9:b1:34:b8:90:9a:09:
         34:f9:72:99:6b:17:c3:4b:e9:97:f1:45:cb:b3:84:40:c1:d8:
         df:08:03:8c:4c:93:13:93:3c:75:18:ab:b3:21:97:fb:0e:b0:
         c9:70:6f:ca:81:25:16:4e:8e:49:57:e8:c2:22:c9:73:0a:8a:
         76:d4:71:54:18:f3:c8:b6:52:e3:c7:38:01:d8:7e:83:4d:9c:
         8c:b4:8a:62:bc:6a:65:7d:cb:a3:5d:6c:01:55:23:f4:d1:e2:
         39:38:f0:c6:85:7e:47:aa:ec:0e:25:4e:33:3f:17:3b:97:c6:
         6b:f3:97:6b:33:04:46:80:f3:c0:4f:28:b9:ca:d7:1f:7b:46:
         e7:14:75:d9:89:91:ec:13:47:76:43:b5:77:2d:6e:dd:96:9b:
         c1:85:a6:ca:d7:b2:d1:10:af:dc:47:95:f2:73:4f:3e:0f:e1:
         0c:34:07:6f:28:39:e8:ba:3f:8b:29:c2:f9:90:c0:50:a9:90:
         f5:e2:7d:21:a1:82:54:8c:35:d1:99:2d:91:15:53:33:a0:77:
         7e:6a:9b:a5:e7:ba:31:67:78:17:2a:ae:bc:8f:3b:74:d8:2a:
         2f:cc:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:19:08 2026 by rpki-client