Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e36382e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3139362e36382e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          41vRb9+Flu4uOvezMKy/21qnXne6X2oQXcCT7s6bN9A=
Subject key identifier:   9A:2C:5D:7D:86:51:F1:08:24:EA:EA:C0:92:67:52:9F:7A:19:D2:E7
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       093A992E3D80B21D61F02E66AFE3C819E9820975
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e36382e302f32342d3234203d3e20323733343433.roa
Signing time:             Mon 14 Sep 2026 12:17:30 +0000
ROA not before:           Mon 14 Sep 2026 12:12:30 +0000
ROA not after:            Mon 13 Sep 2027 12:17:30 +0000
asID:                     273443
IP address blocks:        186.196.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3a:99:2e:3d:80:b2:1d:61:f0:2e:66:af:e3:c8:19:e9:82:09:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Sep 14 12:12:30 2026 GMT
            Not After : Sep 13 12:17:30 2027 GMT
        Subject: CN=9A2C5D7D8651F10824EAEAC09267529F7A19D2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:27:2c:78:ca:49:44:44:7c:d7:19:b1:84:
                    8c:8d:6b:64:81:fb:e1:e9:1a:cf:be:56:2b:ab:7b:
                    e7:74:e3:20:1c:38:63:c0:9c:01:8d:b6:5d:45:2d:
                    91:67:c3:6d:4d:58:90:15:99:61:09:2c:04:ec:00:
                    76:57:75:a1:a1:28:78:aa:ab:5d:9d:f8:56:66:4f:
                    b4:5b:35:d6:89:e8:85:04:b9:3c:42:5f:bc:a4:48:
                    9d:c1:93:55:f9:27:18:11:a0:cd:2a:9d:9d:c1:b6:
                    b3:f2:87:2d:58:56:de:99:b1:70:27:2f:23:42:f2:
                    8b:e7:95:20:88:22:f1:6d:57:4b:58:e4:29:61:1e:
                    6b:08:ec:99:c6:c7:34:5c:6b:fd:df:77:c9:bc:2e:
                    4c:1a:4c:c4:f2:a4:b1:a3:2b:86:1d:9f:d4:58:1f:
                    24:2e:44:34:6a:2d:85:b1:9c:10:e8:d1:1f:a7:36:
                    b0:0c:9e:89:7a:36:79:cc:33:0f:ae:a1:6b:3b:50:
                    43:39:d3:94:5b:d1:06:72:64:a2:22:49:84:59:4f:
                    8a:10:86:6f:aa:44:d3:dc:5d:45:c5:79:72:f4:05:
                    dc:73:6d:37:4c:0b:65:2f:54:c9:f0:91:c3:d5:38:
                    04:4d:ad:86:fc:c3:43:e7:23:1e:b2:6b:a7:ab:a9:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:5D:7D:86:51:F1:08:24:EA:EA:C0:92:67:52:9F:7A:19:D2:E7
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e36382e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:78:7c:83:3a:64:e1:33:56:6e:24:b9:24:9b:ff:b1:53:
         90:e5:0b:99:b6:7c:2b:3a:62:0d:c3:9a:42:76:5c:8a:c0:7f:
         56:78:ae:cb:b4:62:e5:2e:de:89:94:d8:49:06:e3:b5:84:56:
         5e:ba:47:f1:d5:b7:4a:85:d8:61:a2:8d:e7:88:53:7c:d1:8d:
         17:4d:45:06:a8:7c:89:3a:89:31:bd:77:4f:5f:bf:4f:5b:7d:
         90:5a:b9:20:d5:b3:d8:69:2f:91:a8:0d:63:69:26:51:35:5f:
         52:09:7f:48:38:09:f3:70:2f:5c:06:e4:bd:4b:d4:eb:86:9e:
         3e:14:bc:49:46:e0:a7:52:f2:7b:8d:cc:8a:ea:fb:be:64:4e:
         b8:d5:e0:21:3b:37:ee:6c:4e:22:b2:ac:39:e5:15:37:d7:a9:
         27:f9:a6:06:f4:53:cc:08:49:a8:6d:04:fb:74:9b:08:4f:d0:
         11:5c:46:16:8a:60:86:d0:f0:af:e7:23:cd:20:63:89:c5:2f:
         55:13:03:1d:21:b8:f8:18:a5:a8:73:bd:b8:01:5b:9d:16:dd:
         6b:c7:13:29:0c:e9:3f:2b:b7:de:d9:d6:ec:15:43:62:53:0c:
         22:1d:81:8e:42:d5:65:36:11:7a:31:d6:bc:93:ba:56:3e:95:
         03:05:59:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 21:40:03 2026 by rpki-client