Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3234203d3e20323632373733.roa
File:                     3138392e39302e3230382e302f32302d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          k4/Kh+uMoYTQssz7YkyMzuwWDXgl8IfIhUK6J2Qj0GA=
Subject key identifier:   80:A3:E8:2A:35:E4:73:92:FF:37:30:13:30:16:99:38:19:79:53:78
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       5AB2EED235E1A5B5C623F4FA4D5AC01289C3CAA3
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:49:44 +0000
ROA not before:           Fri 14 Aug 2026 19:44:44 +0000
ROA not after:            Fri 13 Aug 2027 19:49:44 +0000
asID:                     262773
IP address blocks:        189.90.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b2:ee:d2:35:e1:a5:b5:c6:23:f4:fa:4d:5a:c0:12:89:c3:ca:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:44:44 2026 GMT
            Not After : Aug 13 19:49:44 2027 GMT
        Subject: CN=80A3E82A35E47392FF3730133016993819795378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:cc:55:cf:29:53:5b:cb:61:c3:50:1f:f5:
                    3a:05:0d:b5:55:ce:17:f7:2e:78:43:ce:4f:a5:c6:
                    75:b9:6a:22:28:da:56:44:6d:a3:f8:f9:3d:fe:c2:
                    09:f7:08:6f:b3:69:7c:22:ce:24:d1:ac:7b:5f:95:
                    c0:66:cc:e6:4f:06:7c:0b:43:c5:e5:fa:23:25:b4:
                    5e:2a:86:b2:75:4e:97:66:a5:5d:00:bb:08:51:4b:
                    97:49:47:6f:67:9f:16:58:86:90:9e:4c:71:03:d4:
                    94:29:32:90:5c:46:36:39:8e:75:87:63:df:b5:62:
                    fa:4b:f1:6f:df:27:3c:ef:59:d1:71:2e:cc:18:f8:
                    03:7e:2e:90:7d:9a:c7:5c:3f:df:84:06:db:92:20:
                    0b:03:09:1e:f1:2f:16:02:cf:d5:66:4b:61:07:c3:
                    4a:8b:a6:24:ab:f6:2a:1f:e7:76:f4:f4:a5:c1:47:
                    19:7d:33:49:2a:22:d8:64:f3:59:7a:94:cf:55:bd:
                    66:e2:34:dc:a0:b4:e2:bb:9c:7c:62:a7:30:69:13:
                    85:9a:e0:65:20:d5:60:d1:cd:c2:4a:f1:c8:24:64:
                    c3:1c:6a:2a:ef:2b:68:62:a4:e6:2a:9d:51:ba:9c:
                    de:1c:6f:d3:66:1c:9b:79:0b:c6:ab:dc:67:52:2c:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A3:E8:2A:35:E4:73:92:FF:37:30:13:30:16:99:38:19:79:53:78
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3138392e39302e3230382e302f32302d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:f5:c3:31:29:ed:3f:ed:0e:b1:55:fd:31:74:e0:5c:a8:f4:
         ad:5b:f6:4a:17:ea:2e:1a:c3:bc:8f:79:5c:15:8e:ae:4e:bb:
         05:51:27:62:a8:bd:3d:4f:e5:48:b5:43:d5:b5:f6:4f:03:c8:
         88:aa:66:ca:ac:e5:78:a3:66:6e:7e:06:03:2c:d3:12:08:3c:
         b9:48:ea:63:a8:92:b1:cd:a8:0f:00:75:8c:db:72:cf:15:89:
         b6:71:f5:b9:31:d2:89:7d:c8:b8:21:fa:29:54:cf:9c:18:eb:
         40:c5:fa:a8:fa:86:e1:f1:3e:85:39:28:0a:3a:9e:2e:2e:ee:
         1c:21:b9:34:46:38:54:dc:bc:12:c5:93:ca:94:bc:dd:40:3a:
         92:3a:f0:f4:61:3e:f1:db:b0:9f:79:c4:b8:6e:37:aa:11:a3:
         4c:07:ab:70:85:2b:61:5e:c1:35:16:ed:85:6c:cf:b0:d3:03:
         20:6b:24:9d:dd:f7:f7:a7:3a:b0:5b:ac:86:0f:66:9f:62:7b:
         fd:05:20:6c:95:2d:24:d8:3b:7d:89:04:95:b1:04:ed:88:61:
         af:18:d5:d9:14:e6:a5:e5:4b:20:8b:a4:a6:1b:5e:9b:10:1f:
         5d:90:2e:6f:cf:56:4d:6c:9f:63:8b:7b:39:10:9d:8d:e7:a7:
         3d:bb:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:36:05 2026 by rpki-client