Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          hAdipL+PO/5T+Gq7ZNI1V0DzuEog6tj2tsxskzKMoWk=
Subject key identifier:   EE:82:B6:96:97:02:D9:5C:47:46:CA:AA:F5:D7:40:13:1D:72:99:0B
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       148221824FF935062CB438184717C2601CB44C79
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:17 +0000
ROA not before:           Wed 23 Sep 2026 01:00:17 +0000
ROA not after:            Wed 22 Sep 2027 01:05:17 +0000
asID:                     263349
IP address blocks:        189.51.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:82:21:82:4f:f9:35:06:2c:b4:38:18:47:17:c2:60:1c:b4:4c:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:17 2026 GMT
            Not After : Sep 22 01:05:17 2027 GMT
        Subject: CN=EE82B6969702D95C4746CAAAF5D740131D72990B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f9:d5:10:da:02:55:46:fd:fe:02:0e:81:c7:
                    f1:8b:7f:23:78:94:b9:67:c0:b8:f8:ae:96:8a:9a:
                    3d:e3:93:cf:0e:ee:bd:b9:5a:57:0a:f0:0b:77:1c:
                    82:d2:10:ac:d9:26:b7:c6:b8:6d:5b:c0:aa:83:16:
                    93:f2:4a:87:1c:27:54:3a:fa:93:c9:6c:37:0e:6e:
                    80:f6:14:7e:2d:b7:54:6e:58:15:9a:d7:df:86:80:
                    f1:b0:68:de:cf:94:f1:40:74:51:f8:dd:39:cc:96:
                    07:29:0b:fb:94:5f:f8:fe:a5:8f:68:47:a1:ff:1b:
                    e4:b1:00:10:51:64:ff:5b:ba:b2:0c:eb:12:0e:e8:
                    fc:b0:28:16:7d:cf:88:fd:79:3b:9a:17:c6:b5:aa:
                    2e:a1:47:a5:f1:f9:18:6f:a8:30:af:77:ef:72:28:
                    0d:f4:c3:e2:f1:6b:a0:8d:4f:fe:7f:ed:40:47:74:
                    c5:0a:f9:ab:d5:fb:ba:54:5a:1b:75:cf:66:d7:a2:
                    22:ac:01:1a:c9:4b:08:dc:e9:d5:ab:eb:ab:82:6f:
                    f1:95:7a:4a:58:b7:3d:3a:83:cb:dd:7b:ee:3d:59:
                    c9:56:e5:80:35:0c:1d:c8:95:91:5b:06:dc:c2:c9:
                    c1:74:61:49:4d:2a:23:07:42:6d:fb:f1:94:c9:43:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:B6:96:97:02:D9:5C:47:46:CA:AA:F5:D7:40:13:1D:72:99:0B
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:12:c4:2f:2b:d0:b0:8e:be:1a:c4:9c:7d:90:e8:0a:0a:
         85:70:2a:ff:5d:8e:79:ca:2b:88:6a:9e:7e:6d:22:b0:3f:80:
         21:42:97:67:b6:5b:5d:f3:8c:c5:b7:2c:8b:5c:45:04:0c:c7:
         d3:02:26:78:8c:1f:f7:dd:00:ba:15:6e:99:74:58:00:15:f5:
         65:f5:86:bb:22:27:e9:a9:7b:02:58:b6:68:b0:fe:60:36:84:
         49:a0:a9:3c:4b:61:75:26:ca:1b:98:ec:18:43:30:eb:96:d6:
         b9:8d:94:65:7f:8a:62:42:99:38:ec:ab:da:dc:68:a3:9f:1e:
         ed:e0:cb:b3:4f:66:18:e6:84:46:3e:b2:45:0a:3a:cc:f6:d4:
         74:0c:d0:36:b0:d3:1f:40:89:c3:81:77:db:f0:40:01:4b:d6:
         95:cf:0e:57:b7:e1:34:16:ab:fc:d3:b8:cb:11:08:a4:ce:56:
         cb:04:5f:1e:a3:19:57:a9:1d:e8:5a:45:8d:c3:2a:ff:1c:23:
         5e:b9:05:94:e0:6c:af:7e:50:20:f4:0d:ec:a8:29:63:4c:ba:
         10:4c:5f:d1:b4:bd:89:33:93:04:1c:62:c3:d9:bb:06:71:6c:
         fc:da:c1:81:07:8a:04:da:d9:d9:2a:41:4b:b2:bb:9f:8f:87:
         5c:c5:6c:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFIIhgk/5NQYstDgYRxfCYBy0THkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZBNjhEMzc3REQ2NzBFMThFQ0UzRTEyQUE2NTZDNjI4
MEIyRDBDMzAeFw0yNjA5MjMwMTAwMTdaFw0yNzA5MjIwMTA1MTdaMDMxMTAvBgNV
BAMTKEVFODJCNjk2OTcwMkQ5NUM0NzQ2Q0FBQUY1RDc0MDEzMUQ3Mjk5MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt+dUQ2gJVRv3+Ag6Bx/GLfyN4
lLlnwLj4rpaKmj3jk88O7r25WlcK8At3HILSEKzZJrfGuG1bwKqDFpPySoccJ1Q6
+pPJbDcOboD2FH4tt1RuWBWa19+GgPGwaN7PlPFAdFH43TnMlgcpC/uUX/j+pY9o
R6H/G+SxABBRZP9burIM6xIO6PywKBZ9z4j9eTuaF8a1qi6hR6Xx+RhvqDCvd+9y
KA30w+Lxa6CNT/5/7UBHdMUK+avV+7pUWht1z2bXoiKsARrJSwjc6dWr66uCb/GV
ekpYtz06g8vde+49WclW5YA1DB3IlZFbBtzCycF0YUlNKiMHQm378ZTJQxZbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7oK2lpcC2VxHRsqq9ddAEx1ymQswHwYDVR0j
BBgwFoAU/6aNN33WcOGOzj4SqmVsYoCy0MMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC9GRkE2OEQzNzdERDY3MEUxOEVDRTNFMTJBQTY1NkM2MjgwQjJEMEMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQTY4RDM3N0RENjcwRTE4
RUNFM0UxMkFBNjU2QzYyODBCMkQwQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9M2wwDQYJKoZIhvcNAQELBQADggEBAKc+EsQv
K9Cwjr4axJx9kOgKCoVwKv9djnnKK4hqnn5tIrA/gCFCl2e2W13zjMW3LItcRQQM
x9MCJniMH/fdALoVbpl0WAAV9WX1hrsiJ+mpewJYtmiw/mA2hEmgqTxLYXUmyhuY
7BhDMOuW1rmNlGV/imJCmTjsq9rcaKOfHu3gy7NPZhjmhEY+skUKOsz21HQM0Daw
0x9AicOBd9vwQAFL1pXPDle34TQWq/zTuMsRCKTOVssEXx6jGVepHehaRY3DKv8c
I165BZTgbK9+UCD0DeyoKWNMuhBMX9G0vYkzkwQcYsPZuwZxbPzawYEHigTa2dkq
QUuyu5+Ph1zFbKI=
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:52:58 2026 by rpki-client