Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130332e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130332e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          cgtrKfBo44eUs3SgOIU0RTDIEVD3aB+8+FLE0gvjYHk=
Subject key identifier:   E8:AA:89:45:7B:E5:56:A7:11:9C:EB:DC:A5:BD:5D:78:D6:05:09:BA
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       2F036F468C313C8F11BA51E8E8DD18E9BD73251D
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130332e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:14 +0000
ROA not before:           Wed 23 Sep 2026 01:00:14 +0000
ROA not after:            Wed 22 Sep 2027 01:05:14 +0000
asID:                     263349
IP address blocks:        189.51.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:03:6f:46:8c:31:3c:8f:11:ba:51:e8:e8:dd:18:e9:bd:73:25:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:14 2026 GMT
            Not After : Sep 22 01:05:14 2027 GMT
        Subject: CN=E8AA89457BE556A7119CEBDCA5BD5D78D60509BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:fd:9e:60:81:ac:5f:ef:10:30:34:52:26:
                    20:8a:6c:ff:99:43:be:e5:06:65:bd:aa:53:1a:b5:
                    80:e3:3e:c9:0d:cf:31:40:e9:95:d8:8b:3d:54:8e:
                    53:1f:f8:c1:f3:1b:0a:30:02:b6:c2:9f:8e:ab:e2:
                    15:8a:23:18:70:2e:08:65:51:45:2f:e9:f7:e2:f7:
                    5c:ae:2e:4c:39:e0:40:3b:41:27:30:80:c1:af:3c:
                    2c:2f:0e:f8:1a:9f:25:4e:c9:69:a7:7a:e8:c7:e3:
                    1f:12:cb:25:98:50:49:20:36:f6:54:d6:66:89:99:
                    bd:75:51:07:cc:04:ca:85:42:fd:ef:8a:52:00:a6:
                    03:79:cb:7e:a3:6f:44:97:b4:8e:1e:b4:08:52:96:
                    46:88:57:00:61:2c:05:3c:6e:66:c7:0b:4e:e5:a1:
                    21:43:ee:7c:3b:fe:c0:42:dd:c5:40:d9:1b:c3:cb:
                    4a:cd:c1:a1:be:18:37:d4:ed:c8:29:8e:3b:fc:7d:
                    6c:a9:80:39:27:d4:0e:30:6c:ab:0a:18:b7:18:37:
                    2d:dc:7d:b5:06:99:12:bb:e4:5d:08:e1:ee:9b:ac:
                    71:c1:64:aa:ed:c0:14:52:01:dd:a6:22:a7:d5:f3:
                    a0:97:95:70:31:33:70:9f:1d:d1:00:0e:c2:27:01:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AA:89:45:7B:E5:56:A7:11:9C:EB:DC:A5:BD:5D:78:D6:05:09:BA
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130332e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:e1:ec:db:67:1e:4d:da:9b:92:5b:f8:20:00:ad:fd:3f:
         f2:9b:3b:7f:9c:cd:01:c9:ef:c1:66:b7:58:d5:b4:4a:d7:5c:
         e7:68:df:b5:dc:6d:73:95:3a:52:57:02:f8:c3:e0:85:9c:29:
         23:0f:0c:3e:f8:00:c4:50:99:77:01:45:cd:a5:d6:02:a1:e2:
         e2:72:11:6a:93:74:c1:90:b0:e0:8e:05:02:f2:7a:4c:d5:e2:
         d3:59:07:0c:de:b3:be:0c:93:54:ec:89:ad:bb:2a:74:d7:ee:
         31:ae:84:3a:e6:d8:ac:c2:a8:dd:98:fe:36:ee:42:ef:6f:67:
         f9:29:15:30:50:52:1b:01:da:ef:d7:ec:88:28:ab:89:a8:ea:
         d5:93:d9:ef:0a:1d:c5:1e:8b:92:f1:b8:92:02:5f:dc:14:db:
         68:f1:ef:59:a7:ae:01:93:23:5a:2e:08:39:8a:b9:f8:a9:a2:
         e2:98:df:dc:3c:10:aa:c0:8a:80:46:43:68:d8:7b:a3:c3:6c:
         c2:9b:66:c1:f5:87:fe:94:eb:35:98:06:7d:83:f0:12:99:a4:
         cb:fc:a7:f0:d9:6b:5a:b7:f6:3b:26:a9:28:0a:fb:ad:1a:8a:
         75:74:1f:cf:96:f5:4c:8d:f9:f2:43:99:06:d8:8d:3d:08:38:
         cd:8c:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:15:30 2026 by rpki-client