Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
File:                     3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa (raw, json)
Hash identifier:          HIaNPtou/2ueRxExcAHASDnkMmBioYdxjHHX/0rIDjc=
Subject key identifier:   19:33:A6:E5:53:23:24:15:45:8E:B5:A6:3A:6D:6A:80:AB:A3:81:92
Certificate issuer:       /CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
Certificate serial:       468D0158BA4374002D19999F439E3D389A023549
Authority key identifier: D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa
Signing time:             Mon 03 Aug 2026 16:38:50 +0000
ROA not before:           Mon 03 Aug 2026 16:33:50 +0000
ROA not after:            Mon 02 Aug 2027 16:38:50 +0000
asID:                     28153
IP address blocks:        186.193.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl
                          rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 16:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:01:58:ba:43:74:00:2d:19:99:9f:43:9e:3d:38:9a:02:35:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8
        Validity
            Not Before: Aug  3 16:33:50 2026 GMT
            Not After : Aug  2 16:38:50 2027 GMT
        Subject: CN=1933A6E553232415458EB5A63A6D6A80ABA38192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:7f:ed:6a:a8:27:1d:27:b1:cf:4d:4e:a0:
                    1c:7a:bf:8c:87:c0:68:e1:93:3e:52:98:d4:ee:e2:
                    70:d0:47:80:6f:e1:3e:9d:2a:8f:9b:b0:4d:2c:34:
                    2e:00:2c:a2:f2:3d:08:33:eb:cb:10:fc:92:b8:84:
                    1b:88:0c:ce:5e:81:35:1a:f2:2f:d6:89:73:97:f5:
                    1a:15:0f:38:ed:4f:d2:c8:ba:81:7c:16:ae:18:d7:
                    0e:21:1c:85:35:07:bd:ff:63:94:60:79:4b:71:56:
                    85:83:ab:7c:f2:9c:26:1e:11:b2:e3:50:d1:7b:67:
                    b0:b5:fd:dc:a4:7c:31:b9:02:ce:96:d7:cc:49:d5:
                    16:eb:06:e8:59:21:ab:41:0e:a5:89:63:c2:40:18:
                    74:a7:63:b7:bb:8f:09:97:cb:d3:0d:62:e0:0b:df:
                    7f:78:25:ba:84:ec:2f:d7:f3:14:44:8a:c7:86:b8:
                    1c:08:81:ff:a1:09:a9:99:b0:79:ac:a6:22:80:56:
                    74:4b:81:5d:a3:78:0d:c8:dd:1e:8c:24:24:bf:8c:
                    37:dd:99:e0:f2:57:61:ab:a4:8a:32:a2:9d:8b:b2:
                    47:b9:79:16:4a:42:cb:e2:bd:5e:0e:92:3d:14:f4:
                    86:ef:61:ab:c8:5e:45:4d:c4:a1:fe:57:52:83:78:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:A6:E5:53:23:24:15:45:8E:B5:A6:3A:6D:6A:80:AB:A3:81:92
            X509v3 Authority Key Identifier:
                keyid:D4:A6:0D:C4:12:9A:FB:29:DB:DC:F1:05:4A:04:8A:4A:2A:71:29:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4A60DC4129AFB29DBDCF1054A048A4A2A7129A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDZjPkin11DrQmSVittpm3tdXvXk7tsVorVeuaVfe9Px/0/3138362e3139332e3230382e302f32302d3234203d3e203238313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:2b:32:bd:1f:c1:36:00:eb:c3:4c:de:48:5b:19:f4:c9:
         22:c7:2e:a5:b0:49:9a:35:d7:59:9f:7e:b8:0c:31:22:a5:83:
         20:8a:13:3a:9e:90:5d:3b:69:14:13:c8:60:82:34:ae:30:59:
         d2:3d:52:58:d9:6f:25:f0:c4:4f:d9:5a:70:53:6b:9d:43:81:
         e8:f0:f9:a4:1f:cb:6e:24:6e:bd:9e:c7:00:44:1f:da:ef:ad:
         fb:69:59:2c:47:d9:a4:c2:fc:d1:91:c8:fa:63:46:ad:30:9f:
         ad:a9:ba:85:68:68:43:a3:92:f9:4f:19:ec:7d:be:a5:cf:a5:
         33:4b:29:38:26:f9:8f:16:b1:ff:65:f2:39:21:69:e3:1f:c1:
         a1:d5:93:0a:6e:6d:3c:50:e7:8a:56:f3:52:b3:3f:5f:0f:e9:
         0b:70:be:55:77:b9:54:e5:3d:db:cd:12:49:1b:30:c6:0b:da:
         d9:ad:d9:26:45:d1:94:57:b3:0c:82:ac:51:a4:06:cc:04:31:
         2d:22:59:5e:e2:4c:b8:26:8f:56:37:24:5c:05:91:1c:15:3c:
         27:d7:e7:4b:a2:9b:8a:2e:0a:69:16:d2:42:33:44:1b:32:8b:
         e3:ea:58:6d:be:1b:88:bd:1f:74:d5:b2:37:3e:01:46:0d:6b:
         d0:1f:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:14:57 2026 by rpki-client