Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          0RRh3teZAHwmucwDk3NJIEpvbplEPcViei89/iKZoQA=
Subject key identifier:   ED:3B:76:09:27:C2:B6:89:C9:4F:47:6C:73:F7:96:F5:B5:0F:6B:C6
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       452D5F7CC636D46AC758BE59843F854B9D2638AF
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa
Signing time:             Tue 20 Oct 2026 11:59:17 +0000
ROA not before:           Tue 20 Oct 2026 11:54:17 +0000
ROA not after:            Tue 19 Oct 2027 11:59:17 +0000
asID:                     264863
IP address blocks:        168.205.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 14:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:5f:7c:c6:36:d4:6a:c7:58:be:59:84:3f:85:4b:9d:26:38:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Oct 20 11:54:17 2026 GMT
            Not After : Oct 19 11:59:17 2027 GMT
        Subject: CN=ED3B760927C2B689C94F476C73F796F5B50F6BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d5:b0:c0:e6:2a:1d:b4:61:bd:3c:dc:eb:8a:
                    d3:ec:4d:33:8b:a2:80:4c:d3:62:3f:8b:0e:1c:d2:
                    84:82:6c:7c:ab:41:f3:11:6a:29:f4:94:2c:dc:ff:
                    4a:fc:a3:70:1a:85:12:89:9e:18:9f:6a:00:d4:4a:
                    72:b7:dc:b1:9b:d6:0e:7b:5f:3e:8f:bc:71:8b:54:
                    3b:1a:97:1f:74:0a:55:33:60:e8:a9:63:3f:35:98:
                    7d:c2:6b:05:2d:31:fc:28:87:bb:c4:a1:b7:ae:9d:
                    0a:76:11:c7:4e:8a:a1:25:b4:5d:f4:93:eb:2b:94:
                    fe:64:f5:40:df:74:c2:14:2f:de:c4:2b:eb:e6:7b:
                    a6:cc:9b:53:4b:e2:50:3a:5f:58:49:d4:c3:12:00:
                    03:eb:01:75:b2:d0:25:cd:f7:37:ea:09:cf:ca:e2:
                    0e:24:fe:86:c4:50:9d:58:51:89:41:f4:64:e4:be:
                    a4:29:f2:54:c5:18:de:69:22:41:88:63:e4:13:2a:
                    68:89:5b:3e:48:19:dc:2e:4c:6f:68:64:25:bd:44:
                    27:25:93:32:1f:22:97:b9:ff:c8:c2:39:c3:af:63:
                    2f:f5:39:09:8e:9d:82:d7:bd:46:ee:88:13:21:b4:
                    1d:80:ab:bf:95:31:f2:2c:ba:43:8e:93:e3:2a:86:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:76:09:27:C2:B6:89:C9:4F:47:6C:73:F7:96:F5:B5:0F:6B:C6
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234382e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:77:d3:9e:2c:0b:c8:98:af:65:ca:21:a2:9f:03:73:09:de:
         f3:d5:78:23:51:84:30:50:52:f5:1a:c1:92:0a:b6:fc:18:d0:
         f3:bf:b5:28:c4:1b:fe:0f:5a:07:e6:dd:bd:d8:64:1c:2f:c9:
         f9:07:3f:ae:06:86:78:47:d4:0a:cc:be:df:aa:73:3c:f6:9f:
         f3:ca:25:71:87:e9:1f:9a:79:74:4c:dd:dc:17:ef:68:04:93:
         49:45:be:8b:aa:52:ec:0b:43:13:47:de:c7:6d:ed:ff:4b:92:
         b7:34:58:ae:97:c0:d6:b2:b3:23:4b:67:d5:a4:8d:6d:36:2a:
         3d:94:dd:3c:61:d5:c7:ba:c4:71:34:e2:ec:9b:c6:f5:ef:e9:
         22:46:9c:fd:03:82:4b:7b:7c:74:c3:da:66:12:87:15:7a:94:
         4d:da:ed:55:ac:05:2e:52:56:43:a0:e3:d3:9a:ef:47:ba:8f:
         8f:76:87:92:a2:11:28:07:29:59:94:07:3d:97:2c:86:34:cb:
         e0:e8:a7:c3:06:32:ab:3b:71:58:1f:3d:ac:e9:1d:42:c5:6b:
         59:57:90:42:e3:bc:a9:4b:af:61:4a:af:05:64:4a:5f:79:20:
         de:14:9b:e3:a4:90:1a:a1:3f:97:ff:22:08:9a:a4:dd:95:5e:
         ef:9f:9f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 15:51:27 2026 by rpki-client