Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32322d3232203d3e20323633343738.roa
File:                     3139312e3234322e3139322e302f32322d3232203d3e20323633343738.roa (raw, json)
Hash identifier:          ht7GfTn1tDHAFYxTvBmNgY+FEXcW/DiBSqUfdlZZQfM=
Subject key identifier:   34:D1:06:E2:A3:93:0B:8F:B1:7C:1C:5D:C4:AA:6E:05:CB:27:F4:00
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       114D8EA998C0A50C25DF6D636BB45F819F8C31C2
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32322d3232203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:41 +0000
ROA not before:           Fri 14 Aug 2026 18:46:41 +0000
ROA not after:            Fri 13 Aug 2027 18:51:41 +0000
asID:                     263478
IP address blocks:        191.242.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4d:8e:a9:98:c0:a5:0c:25:df:6d:63:6b:b4:5f:81:9f:8c:31:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:41 2026 GMT
            Not After : Aug 13 18:51:41 2027 GMT
        Subject: CN=34D106E2A3930B8FB17C1C5DC4AA6E05CB27F400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:53:64:cb:e4:38:76:07:69:85:fb:8e:3d:
                    8f:47:40:fe:c4:84:ad:91:66:45:3d:28:4f:81:7c:
                    75:dd:b6:8a:aa:32:d4:f5:48:64:83:7d:b6:a5:78:
                    47:c7:f7:e7:68:70:36:2e:70:c5:99:1a:2f:a6:22:
                    aa:2b:59:cf:d5:8f:71:bb:53:68:f6:8c:f6:83:6a:
                    f9:44:7b:2e:38:be:c0:d8:fd:3b:89:cc:5c:91:a0:
                    c5:25:cf:ce:ae:9c:b9:5f:a6:82:7e:a3:28:69:c9:
                    b9:a2:c9:ee:1c:07:af:69:e8:fe:f8:6f:ad:fb:6c:
                    2c:5d:53:5a:1e:83:0b:12:dd:66:a0:3a:9a:1f:5f:
                    2c:61:8d:39:3e:27:e6:74:c9:3e:f1:8d:9b:6d:22:
                    3f:0e:68:80:b9:33:f9:81:13:9f:c9:58:8a:69:6d:
                    81:74:a7:1f:3a:45:2b:f8:78:5e:ca:bf:79:56:13:
                    c8:c1:f1:bd:9d:22:74:94:92:b0:90:8a:17:70:ff:
                    91:60:dc:78:3f:bd:6d:e9:2c:a9:61:d4:6b:8c:8e:
                    4b:7f:20:41:75:b9:37:cc:5e:5e:7e:56:cb:8e:5c:
                    5b:6c:9e:ff:a5:8f:59:51:de:90:93:8e:2b:0a:2e:
                    77:8b:a9:b1:7b:22:51:d8:70:b6:4a:ad:d5:09:7d:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:06:E2:A3:93:0B:8F:B1:7C:1C:5D:C4:AA:6E:05:CB:27:F4:00
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32322d3232203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:93:c4:f2:7a:35:5b:b4:c5:cb:e0:ac:89:9d:15:37:15:85:
         fb:57:45:c1:32:49:a2:e9:72:6b:2b:c3:10:49:bb:7d:0b:36:
         d8:2d:db:85:9f:34:58:f6:36:af:c7:c2:a1:8e:dd:51:9a:91:
         1b:43:75:8e:d7:64:4c:23:9d:78:3b:2f:30:06:10:da:a6:b3:
         02:9d:df:65:37:69:58:fc:82:ae:cf:93:bb:42:e1:9a:7d:2b:
         81:a0:43:87:16:68:d4:a0:d0:5a:ec:3c:93:ef:40:8c:2e:a0:
         a5:4c:0c:1b:9f:2d:6a:c6:b7:ea:28:19:21:c1:2b:58:77:17:
         4b:e6:e3:e1:ff:f6:20:f3:e9:e6:b9:30:cc:91:f0:04:45:d9:
         71:9f:cb:49:4d:c8:c1:d4:de:33:ad:e8:2a:70:43:7d:09:08:
         42:2a:23:44:c2:b7:75:db:76:ef:98:0a:11:86:c2:ae:9b:1e:
         9c:b5:7a:3f:e3:f1:54:5e:fd:14:80:1f:7b:b4:a5:bd:43:e0:
         44:94:d1:46:0d:58:c7:ac:b2:a6:fb:06:c7:c4:65:b3:9b:9e:
         5a:a3:ea:14:61:5b:54:1a:25:c4:d7:80:6f:1e:f9:d9:68:ab:
         ed:08:06:3f:47:82:de:c4:81:2b:d3:e3:0b:d2:e7:ff:be:a2:
         10:8a:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:52 2026 by rpki-client