Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139332e302f32342d3234203d3e20323633343738.roa
File:                     3139312e3234322e3139332e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          H0FGxB4V8Xle9SxvIdOWXLzOAjJCE+7Gbzdsx/K8Iw4=
Subject key identifier:   21:00:38:2A:25:32:3F:FC:CE:E3:CA:81:14:63:D0:20:C5:78:3F:95
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       534B87E9118917E1CCBEEF1A8BCEDD88C4A18097
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139332e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:45 +0000
ROA not before:           Fri 14 Aug 2026 18:46:45 +0000
ROA not after:            Fri 13 Aug 2027 18:51:45 +0000
asID:                     263478
IP address blocks:        191.242.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4b:87:e9:11:89:17:e1:cc:be:ef:1a:8b:ce:dd:88:c4:a1:80:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:45 2026 GMT
            Not After : Aug 13 18:51:45 2027 GMT
        Subject: CN=2100382A25323FFCCEE3CA811463D020C5783F95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:ec:12:a4:5e:ae:37:a2:ff:ea:31:5f:90:
                    95:1d:a8:c9:e5:51:81:aa:dc:d6:43:c0:8a:47:fd:
                    fa:c6:12:88:6e:09:90:25:0e:0d:6f:db:78:f7:5f:
                    d3:7e:bf:5f:51:ce:a1:26:9f:5c:a7:2b:63:a0:9e:
                    39:fa:f9:94:dc:f0:76:54:27:d3:b3:f7:41:61:6b:
                    8f:54:ff:bf:f3:75:eb:a6:8c:dc:76:ce:9e:b0:4c:
                    46:84:56:d5:37:0d:f7:30:26:ec:0f:66:de:50:a3:
                    33:5f:6b:c6:1c:56:ab:10:06:15:06:ba:49:c9:93:
                    41:64:ae:81:da:1b:c0:f3:37:19:d1:d9:08:a5:06:
                    80:e4:ff:8d:63:a2:2f:13:32:c9:5c:f8:16:4e:6b:
                    8c:82:bd:a7:00:26:87:8a:af:76:d5:18:d3:84:42:
                    85:c6:c8:04:ac:9f:bd:3d:e6:a0:bf:bd:31:a5:43:
                    5b:83:fa:36:41:53:e5:fa:f4:fd:c6:a9:8f:f9:86:
                    09:33:48:3a:25:7e:1c:48:3a:4e:b3:83:9a:08:43:
                    57:87:6c:db:f5:ca:fd:08:9b:3a:80:7d:33:b2:f2:
                    92:17:19:2d:a7:e7:8f:ef:a4:26:59:51:c5:30:c3:
                    29:e3:f5:8f:f4:57:f4:36:48:20:7c:11:73:da:30:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:00:38:2A:25:32:3F:FC:CE:E3:CA:81:14:63:D0:20:C5:78:3F:95
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3139312e3234322e3139332e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:3f:a6:f7:fe:10:7b:e7:32:07:c2:87:69:f9:84:35:7e:
         9e:33:3c:7d:08:fe:b6:de:28:c2:d3:f3:41:ff:10:db:bd:c1:
         75:3d:21:b6:c7:a7:a9:0c:82:87:da:2c:3e:2c:d1:a5:08:3f:
         d4:83:42:bb:ee:3a:8b:60:1a:ae:d1:37:c1:98:37:2f:ee:83:
         c3:6b:02:28:04:da:49:42:b4:e4:5e:14:ff:00:2f:80:f5:21:
         98:f4:30:f2:9f:40:96:e7:eb:01:99:7a:da:1c:f0:df:d6:16:
         52:c9:a7:c1:cd:c5:cb:88:73:3e:3c:55:3a:c2:2a:d1:92:80:
         fd:f0:b0:ad:96:47:53:1a:b3:91:66:99:2a:57:d3:bd:a3:0b:
         88:e8:1e:7a:87:e9:a3:11:4e:08:3a:04:59:25:36:95:66:66:
         cc:50:ae:3b:e4:70:eb:7b:fe:5d:68:ad:dd:31:47:53:ee:17:
         8a:2e:f3:17:a8:6c:4d:db:01:44:bf:91:26:11:0d:7e:3f:33:
         c0:eb:da:4f:c8:3c:ac:85:e4:7d:39:c9:26:50:3a:97:39:04:
         fd:d2:7c:cc:26:37:8d:2f:63:09:1a:4d:1c:b3:69:af:e8:2c:
         63:03:da:ec:3b:6d:bc:46:fb:46:61:dc:56:04:8b:3f:dc:61:
         68:db:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:18 2026 by rpki-client