Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32332d3233203d3e20323633343738.roa
File:                     3139312e3234322e3139322e302f32332d3233203d3e20323633343738.roa (raw, json)
Hash identifier:          G6RnLP9V+/MnPO1CRQwO0ueNVn3LWjwUI13yXkHc/Fc=
Subject key identifier:   8D:32:5C:19:89:9B:F4:F0:FA:00:22:16:EA:62:08:72:38:80:22:73
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       6D35338D23E8A7CCC2A5C6101401072C225CF40F
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32332d3233203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:43 +0000
ROA not before:           Fri 14 Aug 2026 18:46:43 +0000
ROA not after:            Fri 13 Aug 2027 18:51:43 +0000
asID:                     263478
IP address blocks:        191.242.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:35:33:8d:23:e8:a7:cc:c2:a5:c6:10:14:01:07:2c:22:5c:f4:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:43 2026 GMT
            Not After : Aug 13 18:51:43 2027 GMT
        Subject: CN=8D325C19899BF4F0FA002216EA62087238802273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:4e:f2:15:d5:d8:60:82:21:eb:47:db:84:
                    d4:02:93:f5:77:e9:fd:31:cc:ba:17:8f:f8:49:f1:
                    33:e0:a4:aa:58:8f:12:c6:ee:91:0a:40:d2:12:24:
                    81:0b:2d:30:a9:19:26:94:a9:af:6a:91:4d:c3:66:
                    bf:3b:ac:c3:e1:c9:42:ab:a5:a1:2d:4e:7a:6a:74:
                    d2:6d:fd:c6:01:2f:59:91:bf:38:3c:41:c5:3d:79:
                    30:4a:a0:77:a8:34:2f:e1:11:7e:5d:38:af:e4:a1:
                    77:6d:a0:92:e6:5d:76:cc:9a:d4:77:bb:ea:72:16:
                    5d:eb:20:e1:d7:cd:c1:1f:27:30:1a:79:1c:6f:ea:
                    35:07:a3:5a:7e:d1:71:07:7f:d5:53:0a:79:3a:c1:
                    b8:e7:f5:14:92:93:c4:d6:43:d5:22:76:19:a8:e0:
                    79:c3:0e:cf:47:f2:6d:b4:4c:49:86:47:59:ae:9b:
                    db:d8:ca:b9:e3:97:51:74:dc:b4:f7:df:19:3f:a3:
                    26:5b:e1:ad:9d:4f:b3:16:e6:41:31:e9:fc:65:1d:
                    47:d5:9e:e2:26:4c:b1:4b:15:1d:19:b1:e9:02:1e:
                    0b:47:93:e7:dd:a5:2a:91:ff:fa:71:8d:a3:b6:36:
                    98:bc:d9:45:05:7c:54:6c:0d:dc:bc:c4:d7:46:51:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:5C:19:89:9B:F4:F0:FA:00:22:16:EA:62:08:72:38:80:22:73
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139322e302f32332d3233203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:71:0b:3c:80:b4:be:70:e2:f7:e5:00:3a:63:c9:19:e4:92:
         cb:9d:9f:ea:25:e9:30:0e:7b:d7:c1:49:ed:ef:28:db:f3:c0:
         1d:e0:9f:fe:c7:c8:99:ee:df:d1:47:36:e8:e3:0d:54:7c:be:
         b2:0d:1e:86:1d:5f:ff:df:39:fc:7a:94:4e:31:68:c7:03:c6:
         dc:a9:48:a8:6d:30:a0:52:ea:ca:0d:78:43:dd:28:80:71:5d:
         10:8d:7f:f7:91:d1:57:95:62:47:46:d1:ce:a6:6d:88:15:b3:
         f7:01:ca:d3:75:5f:d8:26:70:6e:eb:50:58:b7:49:2a:7a:30:
         01:04:18:c1:6b:f9:86:d7:22:13:f2:40:7c:52:8b:9f:10:d6:
         c5:91:4d:21:bf:5f:11:d9:b9:ec:7a:c2:ec:58:46:a8:9f:2d:
         d8:5c:fa:ba:62:dd:e7:2c:56:04:f4:5f:c4:74:f9:4b:6b:65:
         60:ac:c8:b4:bb:64:00:79:89:a8:5e:ea:49:e9:50:88:fa:3e:
         28:57:23:0d:3c:f0:77:96:a5:2a:66:98:32:67:ba:7e:a1:b8:
         8e:f5:70:32:5c:20:51:17:ca:9f:4c:d1:87:f2:60:7c:21:29:
         d7:6b:49:e3:22:e5:2b:15:be:46:50:2b:b8:7f:65:c8:5b:ec:
         a2:42:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:32 2026 by rpki-client