Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3231332e302f32342d3234203d3e20323730363331.roa
File:                     3230312e3135372e3231332e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          LK0AZ9qqH4K2mFV+q63VdM07j7oaE01Cl9DhcTxclfo=
Subject key identifier:   26:3E:2C:A3:44:B8:3E:D7:4E:3D:7B:BD:68:B8:12:E0:8D:75:BB:C4
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       399F000B20871A967E230D4EE1250E30F881DAF8
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3231332e302f32342d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:44 +0000
ROA not before:           Thu 27 Aug 2026 02:16:44 +0000
ROA not after:            Thu 26 Aug 2027 02:21:44 +0000
asID:                     270631
IP address blocks:        201.157.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9f:00:0b:20:87:1a:96:7e:23:0d:4e:e1:25:0e:30:f8:81:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:44 2026 GMT
            Not After : Aug 26 02:21:44 2027 GMT
        Subject: CN=263E2CA344B83ED74E3D7BBD68B812E08D75BBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a5:36:86:8b:49:f9:b3:5a:e3:84:12:23:92:
                    1f:8d:86:23:7d:e6:7d:56:13:36:d5:76:27:35:c2:
                    84:d7:59:8c:1c:35:af:ab:71:06:12:4d:a4:b1:4e:
                    c5:8e:ac:c4:59:9e:7e:f8:a8:f4:6a:16:6d:96:98:
                    6a:ca:99:c3:b0:3a:a7:80:1e:d7:32:68:05:b4:cb:
                    e8:58:c3:8c:ab:44:74:23:8a:2a:6d:df:2d:4c:e4:
                    42:0c:44:a3:6c:99:66:a1:74:11:f3:e8:63:67:d4:
                    bf:e4:4a:e2:9b:f9:de:13:dc:c9:35:80:0f:26:71:
                    c3:76:87:8f:15:91:8b:07:78:c2:15:d3:3c:e0:a4:
                    7d:f5:aa:0d:c5:d0:ef:9d:46:f5:39:2c:0d:14:66:
                    f5:51:bd:db:22:17:3e:13:de:cb:2d:eb:9e:8b:77:
                    42:0f:ce:44:68:27:4c:48:ad:a8:b5:7e:be:33:25:
                    15:69:99:ff:5d:cc:42:af:97:63:6e:74:42:8f:25:
                    26:79:46:3b:69:94:9c:66:7f:22:5c:e5:17:0d:38:
                    24:4d:f1:4f:c8:8b:97:98:ca:9c:c8:23:dc:19:14:
                    df:ed:48:72:59:40:b5:c8:d3:42:bd:50:84:46:49:
                    85:f8:fc:b4:55:93:6f:37:5f:f9:5c:bc:d8:92:1d:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3E:2C:A3:44:B8:3E:D7:4E:3D:7B:BD:68:B8:12:E0:8D:75:BB:C4
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3231332e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:9f:c5:b0:62:8b:d4:80:2f:5a:02:af:e3:37:38:40:76:
         a9:03:42:b9:eb:09:6c:17:d8:ba:6e:fb:b3:38:e7:05:02:ab:
         bd:0f:e2:ea:1c:cb:1c:0a:4d:bd:b6:e3:39:f9:a4:90:3a:33:
         b4:82:9f:8b:d3:c8:0b:7a:6d:cc:cf:e7:4e:65:a3:7e:4a:90:
         59:78:00:51:10:bb:fa:69:47:a7:08:bb:c5:c0:c4:cc:97:fe:
         fa:7f:d6:75:f2:a5:b1:bc:e4:5e:84:e8:a9:f3:63:f4:80:f1:
         87:e0:7e:74:c8:ad:d4:70:69:ce:87:ae:b2:b7:59:41:38:a7:
         69:14:25:e7:6a:2b:cd:66:ed:e5:68:34:e0:54:16:7d:01:25:
         20:2a:db:10:23:f1:2d:65:cd:ff:40:17:ae:1d:e8:67:03:6e:
         ff:02:69:2a:17:05:c6:40:3f:4b:1c:3d:fc:a8:ce:13:13:26:
         cd:a0:2f:3d:b9:c7:d3:ac:e2:b2:f3:44:93:16:bb:71:66:fd:
         af:e8:32:54:de:50:b5:bf:96:d7:1d:f2:69:b6:ee:c3:1d:ab:
         dd:56:99:f4:e0:ea:96:60:22:0b:0e:95:4c:5a:19:5b:fa:25:
         da:91:8f:6d:9b:f4:b8:5f:2b:d1:91:48:0c:23:7e:fe:7e:c3:
         dc:66:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:27:40 2026 by rpki-client