Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138332e302f32342d3234203d3e20323633343738.roa
File:                     3137302e38332e3138332e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          kRKJQ5pJgUW+4oFIF6ga2njplCDowGemQFJefTtCVpQ=
Subject key identifier:   ED:50:FE:86:6F:07:26:17:6E:B7:41:14:7E:61:FB:6E:0E:18:FA:76
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       6DBA81F0AAD116F39D908AB88D62F9451A5DC54F
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138332e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:46 +0000
ROA not before:           Fri 14 Aug 2026 18:46:46 +0000
ROA not after:            Fri 13 Aug 2027 18:51:46 +0000
asID:                     263478
IP address blocks:        170.83.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ba:81:f0:aa:d1:16:f3:9d:90:8a:b8:8d:62:f9:45:1a:5d:c5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:46 2026 GMT
            Not After : Aug 13 18:51:46 2027 GMT
        Subject: CN=ED50FE866F0726176EB741147E61FB6E0E18FA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:97:92:b5:87:e4:c4:c5:47:38:d3:82:cd:
                    b0:6c:f6:3a:05:40:2b:1d:ae:06:18:ca:95:b5:1d:
                    ae:8a:fc:eb:98:dd:14:fa:be:1a:c8:93:e2:c8:71:
                    21:25:eb:d7:f9:c9:90:8b:0c:e8:8d:ba:7b:d5:88:
                    69:3e:ba:e8:7b:df:f5:98:6a:23:c0:47:ae:22:4a:
                    28:b2:db:c7:32:af:8f:1c:cc:25:1c:c0:31:6d:41:
                    05:b0:a4:1e:28:9c:19:e2:9f:08:10:30:5c:9b:de:
                    db:bd:07:77:72:7a:da:15:38:8d:68:89:41:d9:5c:
                    c6:33:e4:92:bc:bd:1e:7b:db:aa:31:f1:d4:47:27:
                    4e:1a:55:55:f9:7c:e9:45:0b:bc:97:a3:3e:cd:92:
                    11:ee:18:3e:52:ca:73:f4:d3:e1:de:a8:00:f4:8a:
                    8f:01:d1:f0:3f:16:6a:19:b2:e2:d9:16:57:a9:aa:
                    2d:76:f7:fd:34:c1:84:8e:7f:ef:2e:69:47:38:41:
                    a3:ab:dc:10:b7:07:02:44:10:c3:73:a7:b8:ee:db:
                    d0:13:26:d7:5b:33:1b:e1:06:40:47:61:f3:7d:66:
                    4f:94:d1:e6:ae:29:53:aa:ab:98:bb:9f:fb:4f:c5:
                    51:5e:b4:c7:a2:b3:59:52:f7:fb:7b:c5:45:a5:05:
                    d0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:50:FE:86:6F:07:26:17:6E:B7:41:14:7E:61:FB:6E:0E:18:FA:76
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3137302e38332e3138332e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:e7:50:7d:1e:1e:ba:71:31:e2:c4:d7:46:b3:6d:56:d2:48:
         a5:76:04:ed:b7:f8:d0:9c:01:ea:53:a6:8f:20:fe:c6:74:0f:
         67:da:60:0e:e3:6a:a2:8e:ba:70:d6:e0:5f:0a:34:5c:9c:3d:
         c0:79:6f:7a:8a:e5:1e:bc:14:96:bb:28:c6:6f:9f:46:4a:c7:
         31:91:9b:9f:93:d3:90:30:fa:45:f8:7b:29:22:1a:d5:2f:0b:
         1d:fa:60:94:48:45:91:43:21:10:e0:77:27:8f:0f:cd:13:55:
         00:de:a5:6f:79:13:59:a0:a6:d1:53:16:16:36:d0:a8:0f:b0:
         79:a2:d9:c8:3b:56:a0:45:5f:aa:3b:50:00:db:02:97:a0:b1:
         e1:36:7a:b4:f9:aa:a3:45:54:19:c8:ba:f4:6f:91:4a:d0:59:
         78:b2:21:36:74:c8:b6:8f:b8:ec:33:54:d3:78:d9:7d:90:6f:
         50:5c:c2:d0:3b:f8:14:5c:fc:50:28:c8:a8:1b:38:a8:be:98:
         72:38:3b:e8:e5:02:21:8a:79:e1:a1:fa:07:3c:07:41:29:e2:
         1d:57:da:28:5f:ac:5a:2a:15:c5:ac:3f:2e:de:f5:60:33:da:
         e3:97:15:b5:79:23:5f:2c:59:46:83:21:67:88:b2:cc:ee:5a:
         09:94:f8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:25 2026 by rpki-client