Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3230302e352e33322e302f32342d3234203d3e20323633343738.roa
File:                     3230302e352e33322e302f32342d3234203d3e20323633343738.roa (raw, json)
Hash identifier:          bMCATX/uum+HrE/bap3UErD2eCDLvr7ums6ujbw4zHs=
Subject key identifier:   50:14:37:06:AA:54:C4:58:D8:53:D1:3B:2A:8C:45:6E:4A:AE:C0:B1
Certificate issuer:       /CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
Certificate serial:       38F96BF07CB6494460496C45160C0CFCC586F1F3
Authority key identifier: 96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3230302e352e33322e302f32342d3234203d3e20323633343738.roa
Signing time:             Fri 14 Aug 2026 18:51:50 +0000
ROA not before:           Fri 14 Aug 2026 18:46:50 +0000
ROA not after:            Fri 13 Aug 2027 18:51:50 +0000
asID:                     263478
IP address blocks:        200.5.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl
                          rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f9:6b:f0:7c:b6:49:44:60:49:6c:45:16:0c:0c:fc:c5:86:f1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E8B6585A704FD3BF88A1C96B4B9371432D4A73
        Validity
            Not Before: Aug 14 18:46:50 2026 GMT
            Not After : Aug 13 18:51:50 2027 GMT
        Subject: CN=50143706AA54C458D853D13B2A8C456E4AAEC0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:55:b4:0c:ee:5a:68:05:eb:b2:64:f1:76:
                    2a:1c:a9:5d:bd:17:c5:4c:d5:14:39:44:df:73:ed:
                    21:27:6a:d0:ae:31:07:de:0e:ba:46:2c:e5:d1:1a:
                    ba:38:ca:ee:fa:69:3f:cc:56:30:d3:87:ee:c3:e3:
                    52:c8:e4:96:60:ba:ad:64:f6:9a:3d:d0:aa:88:29:
                    b4:d2:5e:55:4d:87:3e:f6:2b:9d:e7:0d:f5:5b:d1:
                    01:52:89:ae:eb:32:27:a7:af:b0:8f:b1:f4:c2:09:
                    0f:96:c0:f7:77:e3:1f:09:3d:0a:f6:2a:75:d5:66:
                    56:06:eb:09:0a:2b:d3:ba:b9:49:45:c3:c6:45:15:
                    76:37:eb:63:c2:45:03:3d:0f:67:d5:23:51:e2:55:
                    6a:0c:4e:75:36:df:d8:d3:37:93:86:51:19:7d:fa:
                    ce:35:a3:f2:4e:f4:bf:c2:e0:a0:fd:e3:df:ff:6a:
                    ba:f3:e3:59:09:4c:45:63:2c:48:06:e5:18:e3:1c:
                    50:ba:15:3a:24:70:e0:35:fa:6d:07:e5:4c:58:b4:
                    7f:51:46:3a:d2:6c:ea:c0:d0:c5:ef:70:b7:88:ab:
                    aa:b5:12:cf:f9:d7:b5:c5:52:20:cd:96:1d:e2:59:
                    5f:19:cd:32:c7:b8:8d:3e:38:82:67:96:44:11:8e:
                    1c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:37:06:AA:54:C4:58:D8:53:D1:3B:2A:8C:45:6E:4A:AE:C0:B1
            X509v3 Authority Key Identifier:
                keyid:96:E8:B6:58:5A:70:4F:D3:BF:88:A1:C9:6B:4B:93:71:43:2D:4A:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E8B6585A704FD3BF88A1C96B4B9371432D4A73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWCqeK6CFT8tE5nPW3YrwFUmKU3PtFwQAAjaRuFoN15T/0/3230302e352e33322e302f32342d3234203d3e20323633343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:54:e3:8e:71:c1:71:83:b6:e5:3f:7f:91:ee:54:4a:31:6b:
         c3:00:76:a7:29:e4:a6:e8:49:8c:69:72:98:5b:c8:7a:e7:a2:
         41:5c:96:9d:c8:0e:c0:49:5a:e4:05:6a:0f:3d:4a:07:da:df:
         2c:c5:be:40:1c:c8:07:be:e3:d1:66:fb:44:96:28:45:7a:5d:
         f0:77:e4:61:d0:61:00:51:41:d4:b1:ac:29:29:3f:f3:6f:87:
         50:7d:26:13:ff:0c:e5:d3:51:4d:25:0a:c1:ae:e4:cc:bd:76:
         3c:12:f0:45:4c:4b:85:7a:83:b5:2c:6d:bc:18:2f:f0:70:1d:
         22:5b:04:b0:c9:d3:1f:13:a9:11:e7:3a:92:3f:8e:7f:0f:45:
         33:2d:d4:fe:a2:a2:2a:0f:52:ba:32:91:35:a2:69:15:d3:c7:
         d7:9d:35:8c:6e:35:a8:99:7d:2c:19:ce:01:e4:e8:1f:6b:58:
         ac:b1:b4:4f:96:bc:7c:20:da:17:f4:c4:c7:38:3c:83:b0:04:
         08:0b:77:c3:0f:f9:c7:b9:56:8f:ae:f4:89:82:8e:49:94:41:
         db:47:ed:12:2e:54:96:49:84:51:89:a0:16:24:f6:13:6d:ec:
         52:d2:8b:26:5c:61:66:4a:62:fb:ee:36:00:63:6e:99:ec:ef:
         d5:96:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:42 2026 by rpki-client