Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38332e302f32342d3234203d3e20323731353233.roa
File:                     3133382e39392e38332e302f32342d3234203d3e20323731353233.roa (raw, json)
Hash identifier:          KYiwAvYFL8hczLNwPuWPaCm4AnH+GKa2SsiBr5LPTU8=
Subject key identifier:   AA:59:AF:AF:52:D5:85:19:53:AB:EC:5B:69:07:4B:8C:B4:97:C6:9D
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       0DD288FE7F010EBDDD77988B4CEEA91CD2F4EDA5
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38332e302f32342d3234203d3e20323731353233.roa
Signing time:             Fri 14 Aug 2026 18:51:49 +0000
ROA not before:           Fri 14 Aug 2026 18:46:49 +0000
ROA not after:            Fri 13 Aug 2027 18:51:49 +0000
asID:                     271523
IP address blocks:        138.99.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d2:88:fe:7f:01:0e:bd:dd:77:98:8b:4c:ee:a9:1c:d2:f4:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:49 2026 GMT
            Not After : Aug 13 18:51:49 2027 GMT
        Subject: CN=AA59AFAF52D5851953ABEC5B69074B8CB497C69D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:d9:75:35:84:49:66:ab:bc:71:15:8f:c4:
                    96:4a:50:29:af:0b:85:7b:a1:5c:59:a1:17:be:22:
                    81:e7:ec:25:a9:71:db:cb:e0:ae:b3:a4:7c:60:1d:
                    04:d9:89:fe:52:de:d0:0f:ca:4a:a9:2d:dc:20:88:
                    40:b9:f9:a8:d7:6c:1e:e7:af:ac:32:ed:f0:c4:5a:
                    60:38:f6:79:fb:48:d2:56:42:de:b5:b0:a5:06:08:
                    d3:1a:14:fa:6f:da:e8:3c:90:79:bf:29:92:37:06:
                    e5:d4:b4:87:5c:01:5e:04:f7:c7:b6:84:44:ef:fd:
                    2d:a5:a9:16:5a:91:d0:7e:b2:7a:bd:37:56:a9:de:
                    9c:72:29:91:5f:13:28:82:89:13:45:5e:b7:81:0e:
                    e8:f0:6c:5a:42:0e:cb:20:e6:c6:c5:c3:35:db:72:
                    a5:9a:37:2a:34:79:19:a6:92:fb:fd:ac:40:18:ab:
                    4d:53:6c:4c:c1:74:6d:a3:09:dd:62:d7:d8:4f:41:
                    3e:b1:20:85:e6:8f:63:47:0f:a2:e5:c4:ec:a0:17:
                    20:01:4c:8c:bb:68:26:88:43:0f:1e:5b:3d:d1:2c:
                    d5:95:25:a0:51:f9:e8:84:4d:a3:bd:25:b5:22:43:
                    19:fb:68:78:d1:39:da:1d:98:a9:a0:60:e2:95:af:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:AF:AF:52:D5:85:19:53:AB:EC:5B:69:07:4B:8C:B4:97:C6:9D
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3133382e39392e38332e302f32342d3234203d3e20323731353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:db:51:f4:83:bc:e4:50:82:e5:39:01:39:b1:31:2e:53:
         38:51:49:eb:3f:cc:8b:59:3f:a0:c2:d4:4f:73:1e:43:b6:d4:
         c3:05:99:f3:17:f1:22:36:e5:57:0a:8c:43:b8:2a:c1:7a:de:
         7c:7d:8f:0a:d3:99:ea:83:b0:a2:aa:5a:fe:b3:97:13:e7:4d:
         3a:44:74:e9:e3:3c:eb:b0:35:f2:5f:dc:e1:48:0e:a8:c0:1f:
         08:cf:98:2e:fa:60:b2:a8:dc:f2:b1:de:5d:7f:0d:ec:d2:b5:
         c5:cd:f1:21:ce:e9:a2:ad:a8:c8:7a:72:6e:0e:67:b8:c5:24:
         61:60:98:6c:d3:a4:51:c2:58:e6:26:3a:a0:e2:cb:96:08:c5:
         f8:fb:06:22:2a:a9:b2:d2:be:2b:6a:fc:6d:7f:20:6a:55:71:
         15:50:89:b6:a9:21:9d:72:aa:ae:bd:dc:41:25:39:91:03:77:
         24:d8:d4:65:fd:47:60:a2:ad:84:b9:bb:bc:ec:d7:6a:44:4f:
         85:ff:d6:29:91:78:82:e1:17:fc:eb:15:44:a5:98:ea:fa:c7:
         59:a4:43:f5:bd:08:b2:72:19:a9:49:39:34:11:04:3b:51:9e:
         67:57:09:00:4a:28:9c:f4:5e:a8:d4:fa:65:b5:5e:2f:70:03:
         83:af:76:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:52 2026 by rpki-client