Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa
File:                     3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          /byCCNl3f5kzfg0cqgrCpFY+2p6pVn165t1eyjE4Gac=
Subject key identifier:   97:C8:2E:99:21:4A:D1:2A:E5:34:5B:E1:F4:F5:A4:19:47:62:86:7A
Certificate issuer:       /CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
Certificate serial:       2D492E3C2E02C61F316F6DA917DFCCA35DD5A398
Authority key identifier: B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa
Signing time:             Mon 10 Aug 2026 14:34:26 +0000
ROA not before:           Mon 10 Aug 2026 14:29:26 +0000
ROA not after:            Mon 09 Aug 2027 14:34:26 +0000
asID:                     263569
IP address blocks:        186.249.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 12:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:49:2e:3c:2e:02:c6:1f:31:6f:6d:a9:17:df:cc:a3:5d:d5:a3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48698C1C13EA3C66442C7F77BC37509C48A1BAE
        Validity
            Not Before: Aug 10 14:29:26 2026 GMT
            Not After : Aug  9 14:34:26 2027 GMT
        Subject: CN=97C82E99214AD12AE5345BE1F4F5A4194762867A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:28:51:63:51:e8:1c:6a:81:80:e1:9d:8f:
                    67:f6:82:08:d3:18:c3:4a:13:3f:39:b9:2f:ad:29:
                    fe:15:f5:b4:01:e8:58:4e:ff:15:45:1a:02:54:fe:
                    16:c4:6d:03:34:f3:25:15:0c:21:8d:ff:d3:45:37:
                    47:27:b0:ca:07:1b:2d:be:8b:a1:a7:61:8c:c5:03:
                    20:5e:6e:e4:d7:0e:c4:38:85:ce:87:2c:dc:3c:50:
                    b9:a1:23:fa:89:c8:d5:78:41:0a:87:4c:b8:5d:f4:
                    eb:12:2d:13:a1:ff:44:31:fe:2d:d2:83:73:a1:22:
                    de:53:7b:fd:74:ce:a4:c5:aa:9e:3d:45:b4:50:a4:
                    2a:53:40:a3:42:38:c4:be:58:bf:56:09:e0:ab:3c:
                    5f:2b:d0:39:93:a8:fb:2a:c0:fc:5c:52:73:ba:52:
                    fd:77:60:46:af:a2:89:db:3b:f7:bb:b7:b2:ba:e2:
                    53:17:10:43:b6:09:7f:44:5e:c7:b0:52:fc:c6:b7:
                    c1:6c:e0:5f:25:be:e8:13:09:df:f2:1c:1e:c5:8f:
                    20:29:cc:bc:41:93:29:c3:52:e3:b3:39:6a:5a:e6:
                    5e:a9:16:33:d6:58:3c:7a:81:67:47:d4:01:c1:e3:
                    c7:6a:80:15:31:c3:c6:55:c4:03:97:1c:9f:b4:bd:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:2E:99:21:4A:D1:2A:E5:34:5B:E1:F4:F5:A4:19:47:62:86:7A
            X509v3 Authority Key Identifier:
                keyid:B4:86:98:C1:C1:3E:A3:C6:64:42:C7:F7:7B:C3:75:09:C4:8A:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48698C1C13EA3C66442C7F77BC37509C48A1BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/3138362e3234392e3231362e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:19:86:60:8d:33:b9:b7:16:a4:4a:8a:f9:82:98:ef:05:
         a5:1b:3a:03:9b:22:c9:f6:f0:6b:2e:e8:0e:a1:1b:e3:75:fc:
         29:76:65:f5:ba:00:b9:b9:fd:4b:34:09:56:f3:4a:06:1b:39:
         8c:b2:a5:de:87:3e:22:af:4c:08:93:4b:68:83:11:c8:f8:e0:
         6c:fc:94:22:d3:93:4b:61:63:c6:20:dd:8e:77:ba:a8:41:25:
         05:15:fb:e9:1e:0e:2d:6c:da:96:a4:cc:cd:b3:9e:a8:aa:4e:
         7f:cd:38:12:f9:bc:32:be:5c:10:95:5b:7d:b0:97:43:d8:4b:
         2b:ff:b2:75:cc:64:04:43:c2:82:e7:a5:45:15:5e:e7:5a:b4:
         96:bf:90:62:b6:62:28:1d:4b:13:07:96:26:7e:98:2e:03:82:
         37:24:9e:8f:7b:c7:33:ab:d9:f6:f7:f0:1f:93:83:d4:61:f0:
         46:19:1e:bb:6a:10:b5:40:7a:1c:d2:7e:fc:9e:08:6f:1c:ba:
         5c:1d:10:28:a3:18:f3:6f:03:2d:58:28:45:06:cd:7c:fe:30:
         a8:83:25:48:f9:2b:4e:e6:e9:04:30:7f:88:5b:a0:e8:6e:f7:
         6a:6a:4a:6d:a4:9d:90:f4:fd:58:d4:c8:70:9e:d9:57:f6:f0:
         6f:d3:db:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 20:55:28 2026 by rpki-client