Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32322d3232203d3e20323633343738.roa
File:                     3133382e3230342e38302e302f32322d3232203d3e20323633343738.roa (raw, json)
Hash identifier:          AZDVxbM3m9uVUubxRCOf6KbJCgwBQrd/z34ViTV5qo8=
Subject key identifier:   47:07:A5:2A:08:94:0A:63:36:45:68:E2:4E:D7:BE:78:DD:5B:1C:63
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       74E2FB9E3F0E68018208EE1C606A8F48AA4DCB83
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32322d3232203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:40 +0000
ROA not before:           Fri 14 Aug 2026 18:46:40 +0000
ROA not after:            Fri 13 Aug 2027 18:51:40 +0000
asID:                     263478
IP address blocks:        138.204.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e2:fb:9e:3f:0e:68:01:82:08:ee:1c:60:6a:8f:48:aa:4d:cb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:40 2026 GMT
            Not After : Aug 13 18:51:40 2027 GMT
        Subject: CN=4707A52A08940A63364568E24ED7BE78DD5B1C63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:16:2a:47:1c:1f:27:a8:15:c9:5e:c4:f0:
                    c2:52:db:ef:77:0b:19:f6:b8:99:74:95:fc:06:50:
                    73:cb:30:5d:d8:e7:40:0d:7c:95:2c:9e:a8:aa:7f:
                    27:c2:8a:25:6d:fa:fa:fe:93:05:07:33:91:05:0d:
                    8b:89:47:be:26:97:80:0e:aa:60:36:f4:55:9d:e2:
                    d9:c4:84:fb:b6:bc:53:20:40:12:63:84:bc:e3:ca:
                    a1:5e:b3:80:44:3a:ae:e9:9d:7e:c0:43:42:03:c5:
                    aa:51:a0:50:48:2d:4b:ef:10:3f:46:02:4c:46:c1:
                    a3:75:f6:85:09:92:bc:a1:01:bf:e8:27:da:25:8d:
                    35:24:8f:d0:6e:ce:96:f4:c9:95:3b:e8:dd:e1:61:
                    20:98:f3:6e:de:f3:76:7d:37:d3:38:b9:16:3c:47:
                    ef:b9:31:7e:15:31:ce:e2:07:a1:12:38:2d:8f:74:
                    db:c9:81:87:c2:35:6a:ab:19:3b:bd:7d:11:c5:d5:
                    4d:b4:c7:ad:30:b4:89:2e:d2:d7:81:b7:07:26:aa:
                    bd:c0:2f:43:28:bf:11:ed:43:4f:69:7d:c7:d2:2b:
                    7a:7c:e8:aa:24:7d:d5:c8:01:48:d5:04:46:db:e5:
                    58:ed:b9:ca:17:f1:81:52:9a:eb:33:c9:65:5d:22:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:07:A5:2A:08:94:0A:63:36:45:68:E2:4E:D7:BE:78:DD:5B:1C:63
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32322d3232203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:70:ee:11:c9:fe:64:94:9c:f5:f4:e7:ca:84:df:b9:9c:bf:
         45:84:3b:68:b3:7f:d8:14:8b:bc:7a:89:49:b5:a8:0c:79:b7:
         67:8f:68:91:6d:d7:0a:3d:00:5c:83:56:1b:b8:d6:65:38:dd:
         af:5b:03:81:97:da:5a:58:2a:22:b4:88:9c:e8:25:c2:6d:1c:
         b8:92:c9:e2:a1:0a:01:ca:bb:8f:7d:b1:3e:44:98:0b:8b:8d:
         2c:60:e2:ad:9b:c4:1e:0f:9d:eb:67:7c:1c:73:47:39:18:9c:
         6e:ee:c5:87:bb:f7:ea:d3:15:8e:ac:e2:f5:af:64:94:00:03:
         68:bc:3b:d2:a5:3e:b3:84:99:ee:3a:38:d7:e3:f9:52:c0:1b:
         72:ab:38:b3:b3:54:4b:31:0d:42:b5:bb:2e:94:68:f7:82:85:
         e0:2f:e7:b6:e8:5d:d1:96:49:8f:3c:ab:80:65:ac:c8:5c:48:
         89:b3:08:f7:6a:17:d7:2e:50:2a:1e:91:4e:6c:7c:ad:9c:3a:
         65:34:42:09:bb:41:f4:4a:40:48:1b:77:a3:4a:a8:45:57:1a:
         32:08:12:25:59:1b:ad:6e:a1:52:97:0b:7e:2f:62:12:fc:a9:
         7d:73:07:bd:01:cb:86:53:ea:d1:4e:cb:dc:6d:54:66:4b:ae:
         bf:f1:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:35 2026 by rpki-client