Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131362e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131362e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          GzW+SHyUhv7bCMsVIl2vdVUB6lnS5bb9+ejwvk5rfIo=
Subject key identifier:   F0:CA:F6:7E:8C:BC:09:79:14:81:1F:93:EC:07:BD:E7:24:1C:77:FD
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       280B3C4AA7BD04DAEB89F32B1B1EA846BCDAE4E2
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131362e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:10 +0000
ROA not before:           Wed 23 Sep 2026 01:00:10 +0000
ROA not after:            Wed 22 Sep 2027 01:05:10 +0000
asID:                     263349
IP address blocks:        189.51.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:3c:4a:a7:bd:04:da:eb:89:f3:2b:1b:1e:a8:46:bc:da:e4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:10 2026 GMT
            Not After : Sep 22 01:05:10 2027 GMT
        Subject: CN=F0CAF67E8CBC097914811F93EC07BDE7241C77FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:a8:5c:ba:de:74:17:35:39:50:86:e9:61:
                    bb:12:b2:db:ed:2a:98:41:ce:ea:8f:23:ee:43:af:
                    a5:2f:fd:37:1c:a0:a9:b0:62:53:9f:b5:8f:6e:b2:
                    a1:a8:5a:e6:30:7d:88:7d:36:96:47:fd:db:c1:fa:
                    0a:37:40:78:38:31:81:e4:17:5e:a1:9a:cf:fa:c9:
                    15:78:dd:9d:be:6a:31:fb:af:ed:8c:ef:9b:7e:37:
                    d1:74:ed:ac:6e:8d:bb:90:e1:de:e6:19:a9:28:63:
                    cf:ba:e0:b9:e8:f3:bd:1d:3c:f8:4f:91:6f:2b:0e:
                    e8:df:1b:7f:fe:99:a2:6c:a2:64:05:ab:cf:20:9f:
                    db:05:8e:31:66:dc:82:20:e2:ce:22:30:fc:e3:7c:
                    8d:42:4b:58:ea:81:11:8b:cc:7e:c5:72:e6:84:cc:
                    c9:10:d3:c8:32:12:3d:0f:0c:71:17:5d:e3:54:78:
                    c1:fb:ea:bc:6d:d0:95:90:eb:f7:60:bf:18:ea:c0:
                    74:d2:af:a0:cb:ed:88:0d:94:1c:44:ca:30:ca:f4:
                    84:4d:02:a0:6a:2d:b8:3b:50:35:5e:e4:c2:6f:23:
                    a0:c0:b4:39:63:c7:28:96:73:5a:5d:4c:1a:8e:03:
                    fd:c0:fc:c6:cd:6a:58:e7:b8:12:d8:bd:bb:95:54:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:F6:7E:8C:BC:09:79:14:81:1F:93:EC:07:BD:E7:24:1C:77:FD
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131362e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d7:6f:b5:a0:1b:d1:09:7d:f8:f8:06:26:63:f0:48:24:81:
         d8:a7:77:9c:95:da:7f:28:d1:44:59:92:e8:e6:a9:32:ac:b6:
         9f:56:1e:ae:d9:7d:63:4d:ea:f0:1c:35:94:09:bd:ed:4f:b9:
         7e:32:f7:49:82:6b:b6:ae:36:4d:a0:26:d6:65:f6:9e:60:7c:
         18:47:6b:aa:b1:84:22:c3:22:b1:6b:4a:b5:10:44:3e:5c:c8:
         38:cf:9c:81:72:68:2d:b2:f0:5d:44:77:c2:49:66:a9:46:c0:
         5b:f4:f5:7c:e4:a1:2b:ed:e3:1a:1c:35:06:36:3c:9d:45:c3:
         2e:6e:cc:ec:08:c9:83:6a:0b:38:d8:6e:a6:ca:f6:11:0c:79:
         04:dd:5a:7b:b8:8d:e7:b4:75:8b:92:62:e1:23:91:ed:18:7e:
         28:6a:15:de:85:d5:26:a0:17:56:31:9d:d7:cf:55:39:1e:cf:
         41:ba:37:ac:80:bf:fa:ec:1b:76:fb:3b:39:86:a1:cb:30:b0:
         f9:56:15:a2:51:73:d9:b0:c7:e2:36:d8:3f:be:6a:fc:12:23:
         4d:ab:49:a0:0a:0f:c0:fa:7c:21:7c:aa:6a:df:0b:f9:fa:53:
         02:5c:2d:9b:9a:c7:a2:f2:33:76:d8:2a:28:a0:f2:af:9b:14:
         9b:42:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:41:43 2026 by rpki-client