Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38312e302f32342d3234203d3e20323633343738.roa
File:                     3133382e3230342e38312e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          3bne86AZKQpIbKPNAdcv9uiPww48W9iv+yLWIr24Q5o=
Subject key identifier:   B8:D7:01:30:96:EB:95:19:E8:29:3E:76:C3:3C:9F:D5:58:C2:80:FB
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       44C26FD4AAB5CDE6B61D5C0353EEC34E8C6D6387
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38312e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:39 +0000
ROA not before:           Fri 14 Aug 2026 18:46:39 +0000
ROA not after:            Fri 13 Aug 2027 18:51:39 +0000
asID:                     263478
IP address blocks:        138.204.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:6f:d4:aa:b5:cd:e6:b6:1d:5c:03:53:ee:c3:4e:8c:6d:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:39 2026 GMT
            Not After : Aug 13 18:51:39 2027 GMT
        Subject: CN=B8D7013096EB9519E8293E76C33C9FD558C280FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:71:f2:da:56:fe:c9:26:49:30:82:44:10:
                    30:fa:df:f1:d6:12:a9:0c:f1:d9:65:35:41:cc:f4:
                    a1:bc:44:bf:ca:47:c9:4a:6f:79:f7:de:c7:db:6c:
                    6c:b8:60:1a:79:f9:99:63:45:79:07:68:58:3c:b4:
                    f8:ca:4e:8f:ce:a0:05:e8:18:35:75:39:15:de:dc:
                    d4:de:5c:99:47:7e:f5:c5:a6:c0:9f:d5:db:bd:21:
                    ac:86:b0:62:c8:4d:0b:a8:fe:49:fa:17:8a:0b:db:
                    ee:13:21:08:91:88:8e:0c:f4:24:b8:d1:45:c4:4d:
                    35:92:ae:b0:c0:1b:2e:06:ce:06:30:a1:9b:be:7a:
                    03:37:ef:b1:85:f1:35:25:bb:82:2e:14:71:08:ec:
                    58:a0:79:c6:04:fd:e3:71:d8:6b:9a:4e:76:4a:1f:
                    d3:af:45:c3:68:1a:66:7c:6f:f9:62:ee:6e:c5:f5:
                    ad:9c:c6:eb:3d:a6:fb:56:0f:24:ac:72:d4:ca:76:
                    5f:54:ea:0e:61:e4:5b:58:8b:04:90:cd:17:c9:0b:
                    20:b2:5f:3a:4d:fa:23:16:f2:6f:8b:e3:e0:30:c1:
                    3f:28:0c:a1:61:e0:69:50:f2:e1:7a:86:b5:38:7b:
                    9e:67:c5:86:cc:eb:92:fd:c2:0a:81:0c:93:e3:ac:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D7:01:30:96:EB:95:19:E8:29:3E:76:C3:3C:9F:D5:58:C2:80:FB
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e3230342e38312e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:3d:2a:1e:1d:6c:ef:bb:28:d2:8f:60:aa:99:63:ab:7e:
         c5:f5:58:c8:2a:a3:46:30:7f:b0:fd:2c:b2:94:18:cf:5b:28:
         d2:bc:ce:5d:02:cd:5b:0d:1b:cf:12:ba:c8:92:80:45:2b:a3:
         0d:53:3e:d6:e2:a7:c8:36:69:ef:e6:9c:77:55:9b:d4:f5:ee:
         fc:26:91:9b:78:82:38:83:71:56:67:c4:26:82:de:0c:75:00:
         d7:bc:4f:55:f2:4f:66:6b:58:11:12:a8:ed:4d:5e:3e:f9:aa:
         35:2c:bc:a0:8a:55:35:8f:6d:c6:79:c6:e6:9f:e5:3d:3b:95:
         9a:aa:a8:c5:b6:6d:75:96:23:d7:70:48:03:41:1a:34:6f:d8:
         f0:d3:06:97:10:58:ad:07:29:5d:ea:c3:45:63:c4:2c:52:8f:
         13:2e:89:19:5c:7e:d3:5d:58:be:0b:29:9b:04:26:c8:b0:4f:
         1e:fe:9b:db:d6:6a:2a:d2:6d:27:2c:f6:2f:bf:88:a5:49:2f:
         3c:85:d4:d8:dd:58:ef:15:19:1f:a7:7a:fb:17:91:ed:e3:28:
         3e:10:18:61:b1:f8:20:3d:c4:0b:e7:c0:46:f4:b4:2e:1c:50:
         8f:21:8a:a7:9c:50:a2:79:96:4b:78:c3:b4:70:1c:c5:26:36:
         7d:df:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:44 2026 by rpki-client