Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32332d3233203d3e20323633343738.roa
File:                     3133382e3230342e38302e302f32332d3233203d3e20323633343738.roa (raw, json)
Hash identifier:          F7Yf969F3x4t9dEUpgda91jG9HWdj5CaJatebtYCkyM=
Subject key identifier:   FE:2A:14:D6:7F:E7:8D:B1:86:2A:7E:A7:E1:15:03:D6:90:B7:36:4A
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       36265F2AFA37CFD113BAD5F0C10B86083BDC85C5
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32332d3233203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:51 +0000
ROA not before:           Fri 14 Aug 2026 18:46:51 +0000
ROA not after:            Fri 13 Aug 2027 18:51:51 +0000
asID:                     263478
IP address blocks:        138.204.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:26:5f:2a:fa:37:cf:d1:13:ba:d5:f0:c1:0b:86:08:3b:dc:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:51 2026 GMT
            Not After : Aug 13 18:51:51 2027 GMT
        Subject: CN=FE2A14D67FE78DB1862A7EA7E11503D690B7364A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:d7:77:21:14:34:19:9a:36:44:35:4e:27:
                    46:e9:41:f6:46:08:15:08:98:b1:4c:18:34:87:24:
                    49:12:05:7e:2d:8f:9d:59:60:a9:2f:85:4a:d0:ec:
                    f6:56:b1:85:80:f0:fc:19:32:5a:b4:cf:86:47:06:
                    8d:9d:e2:4f:cb:56:60:c9:e8:d9:75:c7:5a:12:29:
                    70:d2:8e:19:6c:6a:b9:11:87:1a:b7:a0:00:28:df:
                    9b:2f:17:5d:79:dd:80:1f:e5:cb:88:c7:c9:9e:10:
                    03:8c:2d:c6:24:2e:bf:ef:d3:34:95:aa:0a:6f:ca:
                    ad:5c:0d:79:01:93:88:ed:11:b4:4b:2f:f3:f6:5b:
                    3e:06:14:7c:5d:9a:53:44:3d:a0:b4:7e:d9:55:85:
                    7a:fd:de:5f:f2:ea:d8:d2:73:59:8f:87:4e:80:e8:
                    23:f1:75:35:78:63:bc:4f:6f:f1:e2:35:4d:7f:1c:
                    34:d2:d4:74:b3:ec:81:ff:86:61:9b:7f:17:07:84:
                    4d:a8:3d:67:74:17:92:88:0b:33:37:d4:2d:f7:fe:
                    36:cc:1a:01:a7:ff:9f:d0:79:27:c4:70:9b:e0:73:
                    9a:49:e1:37:df:a4:2f:f0:24:3a:b0:50:1c:e6:5c:
                    59:6f:fd:aa:4b:45:ca:e5:98:0d:f1:f0:fe:71:a5:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:14:D6:7F:E7:8D:B1:86:2A:7E:A7:E1:15:03:D6:90:B7:36:4A
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38302e302f32332d3233203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:27:ae:1f:f9:25:95:61:b9:9e:59:01:58:9c:79:c0:96:
         8d:7c:9a:e1:78:ee:b5:ff:c8:d9:40:78:a1:39:9c:a5:77:12:
         7b:09:dd:3a:92:59:29:77:fa:d4:30:06:46:57:02:59:77:04:
         40:b0:39:7d:96:1a:1f:1f:87:aa:0d:79:86:80:f5:a6:f8:c4:
         86:ff:72:5a:de:75:c1:ab:91:da:39:34:8e:ab:df:14:b2:3f:
         2c:2a:8d:e7:77:04:dd:6f:4f:b0:fc:f0:b9:e5:cf:79:e1:a5:
         b5:7e:c8:a5:cd:53:1f:fe:11:b1:92:aa:3e:0b:87:fd:11:5c:
         af:6b:be:f6:11:0b:41:9d:4d:63:df:73:ca:fc:d8:2a:99:15:
         c3:90:73:f6:c8:1f:28:f3:e8:06:4c:79:a1:42:21:56:e8:2e:
         76:1e:30:a7:7e:55:16:7e:05:8d:51:35:ae:88:fc:85:0f:b7:
         6e:35:ee:fe:fd:21:56:ba:ec:f2:3a:c5:58:28:c8:45:ec:e4:
         0d:9a:43:65:a4:fd:e8:63:f6:3a:7c:26:db:b5:f7:14:ec:dc:
         bd:13:37:aa:df:16:a0:16:2b:d8:39:b4:3f:b0:54:81:44:25:
         72:e5:54:3e:63:ca:03:f8:16:ff:50:9e:1c:ef:3f:2d:d1:b6:
         c4:f5:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:54 2026 by rpki-client