Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          HVhIhOKojxgOLiFfovePoV2T0otE2UMGL6BVC/8h0MA=
Subject key identifier:   F1:F3:F8:A7:E5:E8:F2:A1:53:CF:F4:3C:02:62:DE:ED:05:DF:9C:54
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       4CC779B73EC46B1DA05B1D8F9604CA6F8763775C
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:10 +0000
ROA not before:           Wed 23 Sep 2026 01:00:10 +0000
ROA not after:            Wed 22 Sep 2027 01:05:10 +0000
asID:                     263349
IP address blocks:        189.51.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c7:79:b7:3e:c4:6b:1d:a0:5b:1d:8f:96:04:ca:6f:87:63:77:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:10 2026 GMT
            Not After : Sep 22 01:05:10 2027 GMT
        Subject: CN=F1F3F8A7E5E8F2A153CFF43C0262DEED05DF9C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:67:d8:32:d1:21:c8:bf:96:c4:9f:b0:52:
                    e2:f7:11:f7:21:8e:36:16:84:b2:53:35:66:7e:ff:
                    09:4a:8b:b6:35:1a:94:c4:02:12:3b:f5:c8:18:2b:
                    77:23:38:60:b5:86:fa:7d:a6:bf:ee:76:a3:bf:34:
                    7e:15:32:e5:24:73:c0:6c:ab:02:d0:53:dc:b4:e1:
                    77:7a:c0:9a:0d:24:84:ff:ce:19:eb:b0:7d:ca:f0:
                    06:6f:5a:0f:54:b4:05:c9:93:b6:e6:37:0b:b6:bf:
                    75:be:b3:6f:40:9c:14:59:9c:2e:ec:4c:e2:9d:3c:
                    57:08:a0:a5:26:bc:77:7c:f1:84:8a:97:85:9f:6b:
                    96:74:55:f4:00:83:f9:cf:76:94:fe:8b:be:55:43:
                    19:ba:81:61:f3:94:27:5d:33:fb:87:87:ea:ef:dc:
                    dd:dc:5d:0a:92:aa:39:a5:6c:59:34:ca:f4:cc:22:
                    9a:fe:93:4a:69:9b:8f:6e:a9:f7:b6:5b:74:8f:a1:
                    b7:1f:cb:95:fd:47:1a:35:b6:d5:da:69:99:bb:31:
                    de:5a:0b:ed:e2:e2:f4:9f:19:f3:95:0e:35:fb:ae:
                    80:5a:d0:59:7a:3d:74:10:68:7c:32:11:7c:6a:45:
                    d5:b1:bb:2d:a8:00:ea:f6:66:51:d4:93:b6:90:dd:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:F8:A7:E5:E8:F2:A1:53:CF:F4:3C:02:62:DE:ED:05:DF:9C:54
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:50:df:81:92:c7:22:51:cd:aa:52:24:39:9e:09:cd:1d:
         b9:9c:da:d5:3b:69:45:f7:14:0d:11:71:75:e7:2f:d9:f3:10:
         5b:06:4d:0a:98:c2:84:0a:b5:90:f5:e4:d7:ba:da:73:7a:a9:
         4d:91:f8:02:52:ea:2a:34:74:9e:a1:e6:1b:a8:6e:ab:9e:53:
         34:c1:bf:78:cc:61:23:4e:66:12:db:69:00:fb:40:40:a6:22:
         2d:52:f1:ea:ba:09:17:37:b0:9a:e4:15:29:07:9f:d3:16:19:
         6b:b0:a3:c5:0b:26:76:68:6f:ac:d8:72:14:85:7a:a9:b3:25:
         3e:85:54:bb:fb:8a:15:47:4a:08:8f:3b:a8:06:7f:48:ec:b4:
         d1:51:4e:f9:c4:23:68:d0:f9:e8:e8:e6:bd:bc:9d:2a:7f:c0:
         8f:da:7f:37:b2:1d:36:00:5d:0c:fe:a3:77:60:5a:03:2b:80:
         4d:37:3c:fa:ca:dd:be:f9:e5:49:00:a1:12:8d:87:a9:a4:44:
         74:d7:69:4b:3a:d6:d9:be:5b:cf:54:94:a8:dd:ba:de:f5:bf:
         6e:2a:3e:71:b6:ba:b1:89:2c:eb:21:b0:cf:68:73:6d:5a:13:
         c7:54:29:a6:ba:cc:fe:1f:d7:f8:37:04:16:36:31:97:ab:84:
         72:7e:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:52:40 2026 by rpki-client