Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
File:                     3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa (raw, json)
Hash identifier:          eXMgw2oMwjKojZaUUELblZ06zkvuXTJUVZB7yNWQ6lc=
Subject key identifier:   ED:DC:18:6F:4F:5F:2D:91:83:1C:B9:52:3F:FE:9D:3F:9A:2A:7C:BE
Certificate issuer:       /CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
Certificate serial:       5BF5F316A3D6AF0F75414255A89F6B4ECD00A1FE
Authority key identifier: AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa
Signing time:             Wed 12 Aug 2026 13:04:21 +0000
ROA not before:           Wed 12 Aug 2026 12:59:21 +0000
ROA not after:            Wed 11 Aug 2027 13:04:21 +0000
asID:                     271111
IP address blocks:        192.140.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl
                          rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 12:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f5:f3:16:a3:d6:af:0f:75:41:42:55:a8:9f:6b:4e:cd:00:a1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0
        Validity
            Not Before: Aug 12 12:59:21 2026 GMT
            Not After : Aug 11 13:04:21 2027 GMT
        Subject: CN=EDDC186F4F5F2D91831CB9523FFE9D3F9A2A7CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:a7:2d:97:8b:33:91:75:56:71:75:76:32:
                    d2:1f:5a:49:8b:74:94:82:a2:64:8c:6f:47:7e:99:
                    3c:38:be:0c:79:57:3a:2d:6d:24:aa:b5:76:27:c2:
                    d5:8f:5a:3f:47:8f:4d:6d:c7:45:9b:9a:17:7c:31:
                    60:74:6e:ec:fa:94:f1:1e:d4:27:ee:22:ab:c2:79:
                    ac:d9:9e:8f:69:b1:30:dd:48:8a:3a:78:f9:24:8c:
                    dc:eb:8a:35:0d:9d:23:b4:40:7d:8c:7d:9e:7a:0b:
                    3f:00:8c:2a:74:5a:e7:b4:2e:79:d9:37:6e:7b:4b:
                    9e:29:5f:42:47:b7:94:86:09:f6:da:9c:da:b2:c8:
                    49:12:20:30:13:fe:a2:f3:04:fc:dc:be:6e:5f:fe:
                    94:a4:06:aa:f2:3d:13:5c:bb:12:a2:3c:0c:09:4c:
                    a0:1b:8b:c8:64:5b:f7:41:d2:81:ed:9b:75:f7:4e:
                    b5:aa:8a:c1:a4:f9:50:fb:47:8e:d1:74:ac:5b:48:
                    bd:f6:0d:e9:9a:84:aa:d0:14:cc:af:5a:82:f1:59:
                    54:fe:cd:4f:69:ca:c6:26:48:0d:aa:38:93:59:4d:
                    99:52:20:dc:66:de:55:e5:5c:45:ac:e8:85:49:31:
                    b5:90:1c:2b:e2:8a:e7:29:c4:ec:ca:6b:ea:36:30:
                    4f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DC:18:6F:4F:5F:2D:91:83:1C:B9:52:3F:FE:9D:3F:9A:2A:7C:BE
            X509v3 Authority Key Identifier:
                keyid:AE:25:EE:F7:E6:EE:89:4C:19:7D:BD:78:37:CB:3C:05:DF:B9:E8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE25EEF7E6EE894C197DBD7837CB3C05DFB9E8E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHkLgcgBFTWGScNbM3oSB4tRjBURmqaEyciqEyoD2y6b/0/3139322e3134302e38352e302f32342d3234203d3e20323731313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:48:55:6d:6d:aa:56:af:06:0d:ed:7a:67:68:b0:a1:46:88:
         37:77:6f:c2:09:53:77:77:44:9b:0c:bd:93:4b:64:8f:16:af:
         25:73:07:80:a7:4a:3f:c3:00:1c:7a:c9:34:45:b4:c4:13:91:
         bb:97:55:b9:85:03:b1:9d:40:59:d2:10:d5:fc:f7:02:31:9c:
         88:25:e4:89:ed:09:f8:81:d9:ff:38:6e:6c:7a:91:26:22:80:
         58:d9:b0:3c:61:e6:ad:a7:e9:fa:74:7e:66:eb:a3:7c:99:b6:
         c3:d5:90:07:a8:2f:af:c3:a0:d7:09:42:5c:21:9c:37:a3:b6:
         37:2a:11:c2:b1:ac:b8:86:72:11:98:a6:e6:f7:e2:95:0d:bb:
         75:5e:78:c8:17:6d:5c:ed:10:95:5d:e1:cf:2e:73:a9:52:29:
         9e:fc:2c:d1:23:1b:d6:9d:e7:4a:3e:ed:3f:fd:ab:1d:8e:b1:
         d3:53:4a:13:34:a5:ad:43:16:f4:5f:9f:4e:9c:1d:39:65:2a:
         88:05:f2:7a:8b:dc:50:d3:41:06:19:2e:6e:f2:51:82:2a:60:
         c5:73:37:ff:eb:c0:7a:5d:bf:a4:2f:44:99:98:c9:47:20:72:
         ac:70:79:c5:b5:4a:c1:31:d6:d3:2b:8e:28:19:2e:b0:2c:71:
         ae:41:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 23:45:29 2026 by rpki-client