Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131372e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131372e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          jN0bU29KcX36n21fPApc7uK9jAbfl1J7cmcDT/LsFUI=
Subject key identifier:   F9:B1:AA:7F:CD:33:61:93:A2:16:E6:66:67:A2:F8:0D:BD:5F:A2:84
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       2C9EBD0F475B0DD10DF5BA70ED4CA238BC6C10B0
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131372e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:13 +0000
ROA not before:           Wed 23 Sep 2026 01:00:13 +0000
ROA not after:            Wed 22 Sep 2027 01:05:13 +0000
asID:                     263349
IP address blocks:        189.51.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:9e:bd:0f:47:5b:0d:d1:0d:f5:ba:70:ed:4c:a2:38:bc:6c:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:13 2026 GMT
            Not After : Sep 22 01:05:13 2027 GMT
        Subject: CN=F9B1AA7FCD336193A216E66667A2F80DBD5FA284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:c4:3a:de:4b:b6:71:5a:36:b8:63:38:f8:
                    2f:75:21:1d:c0:7b:ee:a3:3c:4e:06:bd:b3:d3:fb:
                    82:e9:38:9a:eb:71:b9:19:5d:d3:cc:dd:55:ae:5d:
                    02:a9:a8:a3:12:5a:13:b1:fc:4c:07:4e:8c:a9:fa:
                    a6:03:c2:9f:fb:e3:e5:98:61:77:4d:74:93:e3:8c:
                    bc:c1:c3:5f:cd:50:33:4f:30:80:92:38:64:25:c0:
                    22:a7:38:d3:ad:23:dc:a1:57:05:97:96:ef:7e:eb:
                    0f:64:b0:86:75:79:4c:bd:d4:14:41:cd:0c:3d:02:
                    2f:7f:cb:f1:94:b8:3a:9f:77:28:4d:d5:a9:65:ea:
                    ce:1f:b3:03:03:67:8e:a0:5a:44:c0:c1:c7:eb:c0:
                    6a:5d:11:89:a1:61:36:44:fd:85:4b:34:c0:64:c8:
                    e9:c5:62:c6:e7:e5:90:15:2d:62:b0:54:bc:7c:59:
                    57:86:b2:15:ac:bf:c1:f4:6c:65:6b:8f:7b:af:ff:
                    d7:51:a9:31:90:6c:6e:c6:a8:e8:e0:53:59:80:04:
                    28:98:b6:90:3e:09:dd:8f:3d:7e:8f:35:a2:85:be:
                    20:dc:2d:64:42:05:33:03:1a:fe:9a:a4:c8:72:e0:
                    7b:e8:87:fa:36:70:0e:2c:7d:74:fd:8f:37:9c:22:
                    e2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B1:AA:7F:CD:33:61:93:A2:16:E6:66:67:A2:F8:0D:BD:5F:A2:84
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131372e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:41:a6:d2:30:71:e2:be:12:79:a2:55:74:35:62:bd:39:
         16:fa:34:4a:92:39:d9:b7:f3:5c:4c:fb:d7:d2:f7:a4:91:19:
         3d:11:a5:70:ca:be:6b:53:fb:75:e8:f6:a6:94:c8:a5:e0:b9:
         ab:c1:3d:34:45:2b:60:cc:91:e3:c2:ce:b2:f7:17:f4:f8:6b:
         40:c0:75:69:aa:ee:99:ec:28:fa:d5:e0:43:5d:38:2d:e0:03:
         91:17:85:ff:68:6e:22:97:73:5c:fd:43:ae:15:3b:6c:76:24:
         23:41:90:c0:f8:13:ca:48:a8:68:3e:51:78:07:4e:50:4d:96:
         51:b2:de:16:05:89:1f:2a:70:09:f4:e5:a1:95:b5:7f:fe:7a:
         ab:6f:a7:d8:43:a1:2d:56:e7:41:9a:a7:28:d3:47:3b:29:88:
         d6:04:21:a9:8a:13:1d:e0:a6:1c:39:3f:5b:61:d5:57:0c:b5:
         f3:cc:97:54:72:fd:d9:7f:12:73:df:80:81:b0:e0:65:15:07:
         cd:ba:6e:c1:43:86:63:4c:73:d0:bd:13:dc:e0:db:8e:35:81:
         09:c7:2d:71:30:99:e2:87:a5:40:9c:9f:d2:93:75:ea:f1:04:
         a0:ac:82:00:84:cd:ca:c4:6b:4f:92:8b:af:15:1f:7f:7e:bf:
         b2:8d:19:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULJ69D0dbDdEN9bpw7UyiOLxsELAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZBNjhEMzc3REQ2NzBFMThFQ0UzRTEyQUE2NTZDNjI4
MEIyRDBDMzAeFw0yNjA5MjMwMTAwMTNaFw0yNzA5MjIwMTA1MTNaMDMxMTAvBgNV
BAMTKEY5QjFBQTdGQ0QzMzYxOTNBMjE2RTY2NjY3QTJGODBEQkQ1RkEyODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJs8Q63ku2cVo2uGM4+C91IR3A
e+6jPE4GvbPT+4LpOJrrcbkZXdPM3VWuXQKpqKMSWhOx/EwHToyp+qYDwp/74+WY
YXdNdJPjjLzBw1/NUDNPMICSOGQlwCKnONOtI9yhVwWXlu9+6w9ksIZ1eUy91BRB
zQw9Ai9/y/GUuDqfdyhN1all6s4fswMDZ46gWkTAwcfrwGpdEYmhYTZE/YVLNMBk
yOnFYsbn5ZAVLWKwVLx8WVeGshWsv8H0bGVrj3uv/9dRqTGQbG7GqOjgU1mABCiY
tpA+Cd2PPX6PNaKFviDcLWRCBTMDGv6apMhy4Hvoh/o2cA4sfXT9jzecIuIHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+bGqf80zYZOiFuZmZ6L4Db1fooQwHwYDVR0j
BBgwFoAU/6aNN33WcOGOzj4SqmVsYoCy0MMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC9GRkE2OEQzNzdERDY3MEUxOEVDRTNFMTJBQTY1NkM2MjgwQjJEMEMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQTY4RDM3N0RENjcwRTE4
RUNFM0UxMkFBNjU2QzYyODBCMkQwQzMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9M3UwDQYJKoZIhvcNAQELBQADggEBAA0eQabS
MHHivhJ5olV0NWK9ORb6NEqSOdm381xM+9fS96SRGT0RpXDKvmtT+3Xo9qaUyKXg
uavBPTRFK2DMkePCzrL3F/T4a0DAdWmq7pnsKPrV4ENdOC3gA5EXhf9obiKXc1z9
Q64VO2x2JCNBkMD4E8pIqGg+UXgHTlBNllGy3hYFiR8qcAn05aGVtX/+eqtvp9hD
oS1W50GapyjTRzspiNYEIamKEx3gphw5P1th1VcMtfPMl1Ry/dl/EnPfgIGw4GUV
B826bsFDhmNMc9C9E9zg2441gQnHLXEwmeKHpUCcn9KTderxBKCsggCEzcrEa0+S
i68VH39+v7KNGTk=
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:52:56 2026 by rpki-client