Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          ZfDzhlvbx180lQ3FweoWjuUMBp5wOXE8W86FE3QJOY8=
Subject key identifier:   12:CA:B8:B5:87:B8:AE:E5:1D:3F:61:A5:69:6F:5E:6A:6F:75:4E:58
Certificate issuer:       /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial:       15BAAB02DDC84472C2E21DE729AF6374B5EE2D9A
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 17 Sep 2026 13:32:24 +0000
ROA not before:           Thu 17 Sep 2026 13:27:24 +0000
ROA not after:            Thu 16 Sep 2027 13:32:24 +0000
asID:                     263650
IP address blocks:        138.255.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 02:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ba:ab:02:dd:c8:44:72:c2:e2:1d:e7:29:af:63:74:b5:ee:2d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
        Validity
            Not Before: Sep 17 13:27:24 2026 GMT
            Not After : Sep 16 13:32:24 2027 GMT
        Subject: CN=12CAB8B587B8AEE51D3F61A5696F5E6A6F754E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:a5:85:7f:28:80:9b:a1:48:6b:24:ad:aa:
                    27:d3:e2:73:83:4e:a8:eb:9e:25:7a:d6:a5:d7:93:
                    3f:22:c8:70:ad:dd:45:23:c8:44:c5:0c:9d:93:d6:
                    0e:6e:28:dd:e3:4c:81:f7:c2:c5:5d:d7:47:96:44:
                    54:54:f0:2f:2a:be:05:72:95:78:a0:a6:a2:04:6e:
                    12:a4:d7:a8:bb:ef:db:81:d9:af:c4:64:ff:45:7f:
                    9b:53:7f:83:f3:93:f5:b1:0e:6c:5e:ee:a2:a3:87:
                    f8:0c:27:93:e4:e5:d5:b4:a8:ff:68:59:65:9e:8a:
                    05:67:c4:25:86:f5:85:5f:20:62:15:03:17:cd:21:
                    52:dd:2d:3f:9b:1f:b4:3d:08:d9:22:6d:f7:c8:86:
                    56:fc:16:22:c6:ae:1b:8b:ef:85:e6:f3:cb:ec:fe:
                    fb:5d:c8:2b:21:95:6a:30:9d:d1:16:5d:40:67:6c:
                    a1:72:2a:d2:52:b3:b1:f4:a7:f4:78:0c:6b:d6:3c:
                    a2:8e:8c:56:fb:23:f3:8a:d6:57:32:30:96:a3:f3:
                    a1:ef:5a:9e:86:93:8c:dd:e0:4e:f8:e6:02:0f:01:
                    8d:c9:54:d6:47:ce:56:af:c6:49:56:35:2a:69:f6:
                    4a:25:ae:3b:57:00:50:f3:a5:ea:ee:37:a0:91:0d:
                    61:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:B8:B5:87:B8:AE:E5:1D:3F:61:A5:69:6F:5E:6A:6F:75:4E:58
            X509v3 Authority Key Identifier:
                keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135302e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:14:fe:12:0f:ac:d3:bf:c9:b6:a5:f7:09:37:33:a8:2f:bc:
         9a:db:47:8d:a0:44:89:1d:34:35:3c:89:b4:c6:47:9c:72:c0:
         18:da:c8:e8:0a:e9:dc:6c:bc:5c:44:01:e4:b3:eb:17:f0:19:
         22:23:d6:b8:56:2d:be:d7:f6:61:9d:32:9c:46:23:93:41:ad:
         5e:94:cd:63:c2:e6:be:fd:af:bf:9b:ef:e1:62:39:ac:85:50:
         19:7c:af:92:ac:64:13:56:23:57:36:3c:d9:fb:5e:27:a2:57:
         30:15:21:39:aa:da:c2:c1:56:1f:72:83:8e:81:e3:ef:38:b7:
         b2:59:75:3e:8a:08:dc:b1:59:a4:52:1f:89:69:29:92:ad:28:
         a8:4d:40:07:4b:bd:63:b9:86:f3:a1:d2:1a:e3:8f:27:bd:7c:
         92:a2:5d:84:6f:10:79:ef:9d:88:91:e7:33:d1:32:54:28:6b:
         92:cd:8e:51:c9:9c:93:a8:96:c8:29:06:bb:6e:fc:2a:f5:cf:
         ea:51:f9:d7:4d:80:f0:d5:d0:2d:fa:d9:87:03:1e:4b:65:47:
         e8:7b:6e:40:a6:41:13:69:bb:7a:9a:54:a5:9b:f9:a9:dc:97:
         5b:8e:31:cb:d7:17:47:0b:c5:2b:04:1b:25:70:b5:16:29:12:
         b5:63:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:09:01 2026 by rpki-client