Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
File:                     3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa (raw, json)
Hash identifier:          Q8xKFkpzwF7BUySYF5P1De6D+xhMeq7I8EdXHMfDfGM=
Subject key identifier:   A6:B5:1B:BF:80:93:8E:D5:91:57:B6:7B:FE:47:DC:A2:87:24:12:CF
Certificate issuer:       /CN=8F13AAB7385B49FF263CF792EE2E3F51587634B8
Certificate serial:       56E97A837DB7C2CFB1661282A2AA432C60CE6CDF
Authority key identifier: 8F:13:AA:B7:38:5B:49:FF:26:3C:F7:92:EE:2E:3F:51:58:76:34:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F13AAB7385B49FF263CF792EE2E3F51587634B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa
Signing time:             Wed 09 Sep 2026 19:49:21 +0000
ROA not before:           Wed 09 Sep 2026 19:44:21 +0000
ROA not after:            Wed 08 Sep 2027 19:49:21 +0000
asID:                     271046
IP address blocks:        128.201.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/8F13AAB7385B49FF263CF792EE2E3F51587634B8.crl
                          rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/8F13AAB7385B49FF263CF792EE2E3F51587634B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F13AAB7385B49FF263CF792EE2E3F51587634B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 22:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e9:7a:83:7d:b7:c2:cf:b1:66:12:82:a2:aa:43:2c:60:ce:6c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F13AAB7385B49FF263CF792EE2E3F51587634B8
        Validity
            Not Before: Sep  9 19:44:21 2026 GMT
            Not After : Sep  8 19:49:21 2027 GMT
        Subject: CN=A6B51BBF80938ED59157B67BFE47DCA2872412CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4f:dd:2c:05:45:b7:c1:0d:8d:67:d2:48:ba:
                    0e:6d:6e:c9:aa:8c:a2:17:1e:be:ae:61:c7:e4:e3:
                    60:d0:2a:97:e3:48:52:d1:9a:3c:a3:81:f4:20:c0:
                    98:d0:46:08:12:d9:39:ca:62:2f:41:92:bc:ab:72:
                    d3:89:38:ba:89:82:6c:08:6f:e5:6d:24:9e:0b:b9:
                    e3:e7:31:e2:ac:30:21:11:6b:a7:5a:7f:f4:5a:e4:
                    02:7c:cb:26:6c:e1:58:21:34:98:a3:a6:38:ca:9b:
                    83:b0:28:e6:fe:28:64:b0:3c:4c:e1:67:72:1b:23:
                    2c:99:1d:3d:c6:f9:4c:01:62:5b:54:4c:31:5e:31:
                    7a:ac:5f:75:13:26:72:a4:d4:b2:1d:39:69:d6:73:
                    44:07:94:c2:d3:21:11:96:82:e4:c3:ee:5b:e6:ec:
                    31:86:4e:12:bc:5a:61:f5:67:30:6a:a6:eb:e4:32:
                    6e:3a:1f:ff:b4:aa:d9:f6:44:7a:12:b1:bd:a5:92:
                    55:d9:46:a2:85:ae:7a:6d:e5:aa:4f:3f:41:83:97:
                    51:33:7a:5d:d9:92:d7:a9:e8:df:fc:26:cf:28:aa:
                    b5:e7:6b:a5:59:b7:1e:75:e7:56:c9:19:54:28:3e:
                    fb:a8:52:a9:62:13:ed:f3:2c:b2:82:0d:1e:3e:d2:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:1B:BF:80:93:8E:D5:91:57:B6:7B:FE:47:DC:A2:87:24:12:CF
            X509v3 Authority Key Identifier:
                keyid:8F:13:AA:B7:38:5B:49:FF:26:3C:F7:92:EE:2E:3F:51:58:76:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/8F13AAB7385B49FF263CF792EE2E3F51587634B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F13AAB7385B49FF263CF792EE2E3F51587634B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/3132382e3230312e31322e302f32322d3332203d3e20323731303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:f6:ba:82:2f:9b:2b:02:0c:d3:55:d0:7d:71:2e:cf:ed:
         1e:11:e3:78:31:99:07:07:80:7b:99:81:b4:d7:7c:5e:85:1a:
         a9:3d:1b:0f:53:99:17:25:2a:e0:23:8e:6d:9b:b6:79:18:81:
         73:1f:d0:98:99:c5:3c:68:bc:84:f3:aa:79:b0:2d:c3:6a:af:
         cd:ca:58:40:75:eb:7c:68:87:1f:3f:f7:78:18:96:8a:cf:0c:
         1d:88:d4:47:19:2a:4c:fb:20:a2:0e:22:8b:bb:ce:c9:a1:e8:
         05:30:c5:93:c7:e5:7b:06:84:cc:19:e1:47:47:c9:3c:e3:86:
         c0:32:1e:10:0e:d9:bf:a6:02:39:e3:26:10:58:74:d0:44:4a:
         76:04:bc:d7:d0:3c:4b:dc:f4:cc:cb:6a:fa:c4:62:d6:20:c2:
         89:5e:ec:ea:ff:84:f4:fd:bf:1f:98:b1:73:d4:32:8e:9c:31:
         ba:c8:ea:79:2a:70:7e:f0:1e:82:0d:41:39:ba:fd:ce:4a:a8:
         85:8a:2b:96:17:ac:dd:cd:05:09:06:ea:21:13:a8:a1:53:3e:
         c4:21:21:bc:41:f4:75:49:8d:05:9c:e4:ec:ac:c8:22:62:f6:
         76:4b:63:b2:b0:62:d6:d2:ad:a6:86:a4:60:b8:e0:0d:04:e3:
         6d:69:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:06:08 2026 by rpki-client