Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
File:                     3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa (raw, json)
Hash identifier:          +Iq8/wIEce0ZtQ1zYpFgp0SUQxfyMJj8M0E1QOesLNo=
Subject key identifier:   29:FF:0D:B8:5F:40:AF:A4:66:FB:1F:73:46:8B:1C:5F:2A:73:A6:40
Certificate issuer:       /CN=14FFC8E5B952B4495755D566554505DF141BAB32
Certificate serial:       413163CAE3E6E92D1C211B75680F269DF0F2A896
Authority key identifier: 14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa
Signing time:             Wed 16 Sep 2026 18:51:39 +0000
ROA not before:           Wed 16 Sep 2026 18:46:39 +0000
ROA not after:            Wed 15 Sep 2027 18:51:39 +0000
asID:                     265419
IP address blocks:        168.195.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl
                          rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 13:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:31:63:ca:e3:e6:e9:2d:1c:21:1b:75:68:0f:26:9d:f0:f2:a8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14FFC8E5B952B4495755D566554505DF141BAB32
        Validity
            Not Before: Sep 16 18:46:39 2026 GMT
            Not After : Sep 15 18:51:39 2027 GMT
        Subject: CN=29FF0DB85F40AFA466FB1F73468B1C5F2A73A640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:38:c8:85:de:c9:d6:b4:6e:2f:18:99:ba:36:
                    08:2c:9f:e0:0d:0e:37:d1:57:2e:d5:6f:34:da:8d:
                    1e:5c:43:1f:1b:2f:1e:78:0e:da:80:1a:9a:f8:69:
                    1d:75:08:60:0d:79:07:19:80:17:3a:5b:92:7a:25:
                    6c:1d:a9:ff:b2:c1:65:89:20:5e:ee:12:fe:c0:cc:
                    69:86:68:e7:94:78:3e:fe:72:3e:e3:a1:3b:84:95:
                    98:2a:01:99:55:3b:db:25:84:f3:1c:cb:d1:e3:0c:
                    57:bd:99:b4:21:23:2f:8d:51:7c:98:bb:7a:5f:63:
                    bd:3f:70:ae:ad:1b:06:99:9f:83:49:e5:25:3d:7a:
                    fd:0d:26:e8:ec:ea:49:6a:fc:7b:a3:d5:2c:e3:b5:
                    16:47:0e:2c:35:f5:06:2e:65:fd:58:d8:98:65:38:
                    78:ea:6e:e8:da:44:19:cc:ac:c7:58:28:e1:c4:d0:
                    8d:01:76:a3:5e:ea:d6:50:85:07:ce:a0:68:2e:3a:
                    82:70:d9:c2:16:85:dc:aa:ce:24:e2:6e:da:e4:22:
                    79:1e:4e:15:aa:a3:06:5c:91:9a:c7:4d:ff:12:af:
                    bc:35:17:78:2b:b3:34:da:14:0c:63:5e:f3:2e:7b:
                    b3:f6:eb:33:35:d3:0f:36:e9:4c:32:b2:66:da:77:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:0D:B8:5F:40:AF:A4:66:FB:1F:73:46:8B:1C:5F:2A:73:A6:40
            X509v3 Authority Key Identifier:
                keyid:14:FF:C8:E5:B9:52:B4:49:57:55:D5:66:55:45:05:DF:14:1B:AB:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/14FFC8E5B952B4495755D566554505DF141BAB32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14FFC8E5B952B4495755D566554505DF141BAB32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrYdnp6sq9gTyc1MpJVaSz6a4B9MhHSUeJrxxSAwtr8c/0/3136382e3139352e32302e302f32342d3234203d3e20323635343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:f4:fd:f2:0b:5c:b6:f5:d3:de:e8:a4:f8:ac:6e:80:4c:
         14:17:5d:3e:a1:eb:42:e3:4b:4e:1e:aa:47:48:ab:4c:26:ab:
         36:05:c2:5c:21:cb:9c:2b:5a:69:10:8b:86:bb:15:39:df:27:
         66:f7:0f:d5:c6:d1:8f:2d:90:4f:7f:5d:7a:97:84:db:30:a1:
         96:16:f2:08:3e:99:fe:57:a6:fd:82:3b:e7:aa:f0:19:e3:9a:
         b9:9a:06:06:7e:f9:2d:73:29:7c:21:7a:3d:8d:3e:4f:26:40:
         e2:94:9f:15:2e:f5:a9:13:b0:b7:34:f7:75:27:28:3d:3a:60:
         e9:35:f8:e6:7f:a0:06:2c:58:6c:2c:2f:17:9e:4a:6a:b2:31:
         4b:2d:3e:3e:ca:9e:79:24:f8:d5:54:d3:26:f5:93:b0:6d:1a:
         cf:20:c9:92:ef:8b:09:6e:b6:55:b3:8f:37:7e:fc:2c:3a:95:
         f9:0e:2f:52:31:d3:bf:3b:37:ee:f7:df:2f:9a:46:b6:06:33:
         26:3c:41:40:44:f5:95:05:4a:c4:a4:4b:5f:c2:12:a6:47:0b:
         b0:aa:2d:20:f9:c2:1c:e7:4f:d9:a3:38:24:92:51:53:99:53:
         dd:0c:9c:4b:22:33:77:21:b8:74:c3:16:77:80:4a:ae:cb:fa:
         56:68:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:02:35 2026 by rpki-client