Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38322e302f32342d3234203d3e20323633343738.roa
File:                     3133382e39392e38322e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          xhq+SwrjiwfaTvxW8SQfyrTwd11odC5kkBGqu9tWfaA=
Subject key identifier:   E9:84:A0:81:DA:D4:8A:11:9B:37:EF:FB:04:D2:2D:49:37:76:18:0E
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       60F836CFE764365372BA604A7569A776704FA02B
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38322e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:51 +0000
ROA not before:           Fri 14 Aug 2026 18:46:51 +0000
ROA not after:            Fri 13 Aug 2027 18:51:51 +0000
asID:                     263478
IP address blocks:        138.99.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f8:36:cf:e7:64:36:53:72:ba:60:4a:75:69:a7:76:70:4f:a0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:51 2026 GMT
            Not After : Aug 13 18:51:51 2027 GMT
        Subject: CN=E984A081DAD48A119B37EFFB04D22D493776180E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:8e:ab:42:6d:11:56:93:c4:80:9d:e6:db:
                    3d:84:1a:4d:bb:44:98:0f:a8:15:03:33:bd:a4:96:
                    3f:b1:33:59:fe:c1:f3:4d:c7:87:e5:3f:e9:a7:2c:
                    fb:3e:ca:0b:98:7b:c3:22:f3:6e:35:5e:27:d8:61:
                    66:8a:64:f3:95:cd:a4:7e:32:bd:5b:11:d1:53:65:
                    61:2a:7f:ff:66:03:6a:61:89:f6:38:57:84:2c:cb:
                    30:b4:6e:ee:bb:46:d2:9b:af:59:ab:07:aa:f9:c0:
                    53:4f:83:10:cb:2c:69:a9:43:53:eb:58:8a:eb:f8:
                    16:cf:3b:73:1c:3d:52:df:25:be:73:2b:b1:84:b4:
                    7f:53:cd:91:32:09:b3:4b:ce:af:59:54:b6:4a:28:
                    4b:3e:6f:72:1d:e9:27:61:95:68:31:72:06:09:f4:
                    64:0c:75:74:40:db:b2:9e:7d:c4:74:1e:98:ff:bf:
                    b0:4f:c8:a8:60:c4:e0:a0:f2:90:c7:3e:71:e7:77:
                    1b:cb:db:18:8a:0a:8d:2e:ce:fd:e9:ab:2b:be:18:
                    40:5b:b8:22:89:c1:ba:1c:9b:07:e7:9f:0b:f3:fa:
                    84:ca:8f:61:c2:10:7f:1c:73:c3:85:13:f8:c2:88:
                    d5:a0:6c:3b:f5:8e:c8:62:8b:de:6d:aa:40:9b:34:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:A0:81:DA:D4:8A:11:9B:37:EF:FB:04:D2:2D:49:37:76:18:0E
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38322e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:3f:06:34:f9:38:a8:f3:c4:9d:97:fd:d4:7a:36:0a:dc:
         19:86:0c:37:c2:8c:67:a7:82:4f:d8:00:0a:ce:82:36:42:69:
         24:5b:6e:8b:31:f2:4b:ef:f1:ec:09:a9:20:9f:ad:c6:fb:c6:
         7a:68:72:36:89:07:65:4c:82:48:98:96:be:5d:47:76:16:32:
         1c:7d:9c:f1:23:60:94:1a:e2:04:7c:e2:fc:71:84:94:b8:fe:
         76:cb:1e:2a:7f:46:7a:fe:2e:f0:d2:6a:a0:2c:d4:aa:22:f8:
         2f:2e:a3:c5:46:aa:e3:e3:29:07:13:6c:9e:b4:f3:c7:e8:c5:
         94:7c:2f:e0:61:75:5d:2e:95:2a:4d:09:36:a1:5f:c6:6a:46:
         45:d6:f7:ac:89:e1:a1:b9:c2:ca:ba:b2:3e:63:e5:05:27:60:
         1c:79:25:3d:81:f6:aa:87:50:43:70:68:24:47:91:e2:2e:ed:
         3c:df:d5:7f:09:54:d3:5c:d8:cc:93:f1:12:9c:cb:06:c7:32:
         d4:31:f1:32:9c:c2:73:ca:ae:e6:6d:ea:75:7c:c1:1b:19:95:
         fd:ed:4c:d4:48:ed:e7:18:cb:e8:96:d1:b3:4e:1a:af:b6:07:
         5d:77:10:30:7f:46:8c:db:0d:00:f9:1d:9a:cd:68:cb:ea:35:
         d0:b1:c4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:52 2026 by rpki-client