Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa
File:                     3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa (raw, json)
Hash identifier:          4TSaPUP1K88o0htR4NbZTg+JCbMVo+3N+n9tTDXZ2/Q=
Subject key identifier:   C2:D5:75:57:3D:91:FB:38:3D:6D:73:4D:02:BA:15:20:47:5E:B6:D7
Certificate issuer:       /CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
Certificate serial:       642493FC77FA08B869EBFD26CABCAFBCF0F3AE42
Authority key identifier: 34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa
Signing time:             Wed 28 Oct 2026 00:56:03 +0000
ROA not before:           Wed 28 Oct 2026 00:51:03 +0000
ROA not after:            Wed 27 Oct 2027 00:56:03 +0000
asID:                     272548
IP address blocks:        181.232.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl
                          rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 06:34:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:24:93:fc:77:fa:08:b8:69:eb:fd:26:ca:bc:af:bc:f0:f3:ae:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F
        Validity
            Not Before: Oct 28 00:51:03 2026 GMT
            Not After : Oct 27 00:56:03 2027 GMT
        Subject: CN=C2D575573D91FB383D6D734D02BA1520475EB6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:6d:0a:b0:db:82:48:9b:13:c0:fd:cd:bc:
                    40:30:27:bb:db:bb:05:dd:01:a5:58:e6:4e:b8:09:
                    63:4d:43:96:73:b4:94:a6:30:c5:b1:db:ba:8a:15:
                    1f:03:79:8b:99:38:10:c5:b9:46:50:a9:ee:ff:59:
                    b8:5c:63:0d:eb:e3:51:3a:00:5a:10:05:84:85:f1:
                    70:ae:77:23:69:55:f0:aa:d5:2f:64:99:6b:61:25:
                    ea:35:24:e9:9c:61:94:5b:ef:17:28:94:07:bb:0f:
                    ca:48:74:75:95:c6:2c:9b:a8:b3:20:84:d5:75:1e:
                    a8:7a:1a:b2:b7:c5:8a:93:17:6f:92:67:91:cc:7b:
                    b6:43:ac:a8:04:c6:69:5c:7f:02:41:85:26:17:31:
                    40:2b:40:7e:22:1b:34:bb:d0:7f:e0:0a:16:b8:5a:
                    8f:d8:c5:55:80:0d:cb:42:aa:ef:42:67:05:93:15:
                    a4:b4:d7:6c:0c:71:dd:76:72:85:3a:6e:70:de:fa:
                    53:2d:15:dc:01:a8:14:92:37:3e:ac:37:5d:09:c4:
                    ba:fc:19:0d:f3:c8:b2:06:3d:01:35:bd:6c:7e:5f:
                    ff:4e:66:1b:38:9b:12:5d:30:b1:d0:36:55:6b:45:
                    d9:64:fe:e1:40:4a:8d:cd:f1:59:b0:74:ec:54:4d:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D5:75:57:3D:91:FB:38:3D:6D:73:4D:02:BA:15:20:47:5E:B6:D7
            X509v3 Authority Key Identifier:
                keyid:34:29:6A:C0:27:4C:9E:18:FF:A1:DE:6A:76:D8:E8:B8:EF:7F:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34296AC0274C9E18FFA1DE6A76D8E8B8EF7FD31F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNBS5VBKde4N9cbH2szsj1eohxMPp16nAMFQ9A6DKRGk/1/3138312e3233322e3233322e302f32322d3234203d3e20323732353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:97:c7:dc:29:db:7f:39:ed:b5:a1:f7:0f:d0:9d:4b:8c:fe:
         c8:6a:d0:39:d6:31:da:64:68:74:fb:fc:97:d0:a2:c3:d8:5a:
         d9:67:79:9b:c3:61:8e:a0:91:f7:34:fb:63:fc:74:2d:b8:b1:
         d7:e2:9a:7f:7c:12:4b:89:5e:5d:04:79:df:f2:d7:23:ee:ad:
         c7:65:a3:64:38:04:7f:09:cd:f2:f2:65:3d:96:b3:c3:c6:59:
         5b:ae:9b:f2:64:2f:43:d4:03:e3:cb:04:c3:74:b1:70:91:22:
         d1:d0:b4:1b:3a:45:a4:1e:c0:b7:88:94:82:9a:6c:31:ac:91:
         f5:12:f1:11:2d:3f:87:3a:5a:cb:0b:83:a3:09:b4:f7:3a:e3:
         b8:3f:81:5f:a7:b9:72:04:f3:01:6c:e9:b2:3a:76:6a:d3:13:
         14:a1:4f:b9:3d:41:26:14:47:9a:c6:50:18:9d:3b:b5:5b:3a:
         79:09:1a:ab:28:2f:02:3c:ec:56:99:bc:28:a5:21:32:73:7a:
         ee:f0:8d:e7:8a:e6:d5:ad:b5:3d:c1:42:4e:3d:8e:36:8c:b3:
         d0:c2:fb:09:65:79:89:7f:b2:66:25:06:a8:24:59:66:38:9a:
         4b:c8:c6:ff:39:6e:57:e2:ae:67:56:06:06:c8:4b:7e:14:98:
         8d:00:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:09:41 2026 by rpki-client