Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130372e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130372e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          9oE476kfA6ZyB97S/wytlDaP4Da6tEL89vf2ntKl60Y=
Subject key identifier:   29:6F:59:39:7F:61:B7:7B:4E:F1:0A:0A:4D:F9:67:3C:0B:C3:4C:45
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       7F83F1E9E83B776A97D7E3AC3A1659731F6D369B
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130372e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:14 +0000
ROA not before:           Wed 23 Sep 2026 01:00:14 +0000
ROA not after:            Wed 22 Sep 2027 01:05:14 +0000
asID:                     263349
IP address blocks:        189.51.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:83:f1:e9:e8:3b:77:6a:97:d7:e3:ac:3a:16:59:73:1f:6d:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:14 2026 GMT
            Not After : Sep 22 01:05:14 2027 GMT
        Subject: CN=296F59397F61B77B4EF10A0A4DF9673C0BC34C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:15:d1:93:ea:83:98:41:b9:f7:d4:86:89:
                    7f:7b:b3:a4:b1:7f:5b:86:17:65:63:1b:31:3a:d5:
                    18:48:4c:0d:62:63:fb:23:78:51:82:a0:a3:82:b3:
                    ea:a8:d2:01:ab:12:ea:c9:40:f2:6c:77:f3:0c:07:
                    64:8f:59:97:53:ce:e4:15:ab:7a:53:d2:c2:94:9c:
                    30:97:6c:f2:42:02:8b:a7:8d:7d:b0:27:c5:ac:b6:
                    e7:6d:e3:1b:48:d7:0e:84:c2:e0:23:43:e9:3c:77:
                    9c:7e:6a:14:38:55:d8:e9:73:eb:f9:af:c0:ff:b4:
                    4a:f3:58:8c:e4:0e:b0:48:e9:aa:c5:f2:e1:df:8b:
                    e7:93:66:08:66:f0:4b:b1:c1:15:c2:27:38:81:a3:
                    03:04:80:7c:75:4f:bd:f9:63:11:d6:bd:5b:a7:87:
                    e8:61:7b:8a:58:6f:9a:df:a5:f4:6c:99:03:1d:a5:
                    83:aa:da:d0:1b:67:c1:af:91:93:9e:bb:4f:fe:5d:
                    88:28:34:59:ba:41:b1:fc:b2:89:bb:b6:a9:6b:2a:
                    dc:c3:47:e5:ce:a4:4b:42:e1:1c:23:0f:82:e6:16:
                    a9:82:46:09:a1:15:d7:c5:4e:51:64:20:49:ab:35:
                    88:06:77:3e:c9:36:33:91:d4:a1:40:ef:85:b4:c0:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:59:39:7F:61:B7:7B:4E:F1:0A:0A:4D:F9:67:3C:0B:C3:4C:45
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130372e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:57:37:19:18:6c:8b:7b:0f:23:3c:bf:99:35:9d:3a:9c:
         ac:3f:5c:20:f8:22:e1:49:45:65:7a:fa:80:5b:b3:f0:46:32:
         c6:b8:58:b4:02:ef:83:80:e0:6e:57:65:61:29:3f:59:67:4d:
         81:ed:c1:aa:41:a1:d6:0f:f4:aa:f2:96:06:a3:87:2c:33:15:
         c3:14:9c:25:76:50:85:bb:91:37:5f:ad:29:7d:9e:4c:4c:db:
         cd:35:0e:5b:b8:51:ef:57:31:08:82:d8:27:10:fd:ba:87:65:
         62:73:08:e0:cd:5b:87:7e:86:96:09:99:cd:88:ea:e8:1e:ea:
         18:3d:5a:b1:a1:64:83:da:b9:74:42:a3:a0:1d:10:bf:b2:b4:
         81:04:cc:99:32:5b:e7:8c:67:3d:07:ec:87:f8:5f:c0:dc:49:
         84:7f:69:b6:ea:82:13:ca:00:e5:09:0e:27:98:77:f1:dc:6b:
         07:c3:d7:5e:56:9b:95:c9:f5:c7:a4:33:e9:ac:d5:92:04:05:
         f7:58:be:17:8c:65:01:0c:b5:15:54:de:a5:93:36:d3:bc:b8:
         02:cd:61:25:ef:db:e5:2c:4f:ce:88:78:d2:ec:5f:2c:57:26:
         ab:f3:cf:f2:0d:d0:26:02:2c:1f:ee:95:e9:47:5b:24:32:cf:
         e4:61:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:30:18 2026 by rpki-client