Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          wzAVdxBBNMkYI94Nxd83MdtADPVcouEo75b+WVse/Qo=
Subject key identifier:   71:3A:89:EE:EF:7D:86:9E:57:BD:6A:0E:32:79:BD:10:7B:7A:1A:75
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       5D981466A476B53DDD693347AE2F0D82D3396CE9
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa
Signing time:             Tue 20 Oct 2026 11:59:19 +0000
ROA not before:           Tue 20 Oct 2026 11:54:19 +0000
ROA not after:            Tue 19 Oct 2027 11:59:19 +0000
asID:                     264863
IP address blocks:        168.205.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 02:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:14:66:a4:76:b5:3d:dd:69:33:47:ae:2f:0d:82:d3:39:6c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Oct 20 11:54:19 2026 GMT
            Not After : Oct 19 11:59:19 2027 GMT
        Subject: CN=713A89EEEF7D869E57BD6A0E3279BD107B7A1A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:3e:53:6c:85:21:1d:38:c0:a8:61:e4:a2:
                    72:0d:88:74:41:20:28:5f:dd:f4:1c:8c:8d:af:71:
                    d8:12:ae:40:8b:ed:85:5b:16:b3:25:7c:82:1c:7b:
                    2a:13:56:56:4f:01:35:f0:38:67:e4:dd:2b:94:2e:
                    d1:07:f9:2f:e1:b9:4a:0f:ac:bb:03:de:66:87:4f:
                    9d:91:8e:89:2d:9c:10:69:1f:ef:c8:38:ed:f2:42:
                    c4:df:a9:a5:be:43:b5:ca:54:54:19:50:58:e2:5c:
                    4a:d6:78:af:14:07:21:b9:5d:6b:aa:87:ad:14:2e:
                    2e:95:d7:27:27:24:b1:fd:7a:72:8e:8e:6b:bd:54:
                    7c:00:4d:53:9a:10:a8:66:1d:92:b6:55:6d:1e:97:
                    c8:c1:27:9f:68:86:76:96:67:ae:ff:31:d7:00:d7:
                    00:23:83:45:bb:bf:89:89:a6:e4:96:33:4d:5a:06:
                    10:14:ae:b3:ff:db:5b:ca:e7:c7:dc:4a:02:92:6d:
                    88:5d:89:e8:08:17:04:0d:b2:0e:80:bc:5b:70:3d:
                    13:3c:89:25:68:b0:69:85:64:64:15:d3:3f:81:e4:
                    2e:57:51:95:9e:a3:c8:34:a4:14:3b:1c:23:6b:64:
                    f3:96:63:5b:07:63:1c:4d:50:86:70:f0:38:a3:8b:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3A:89:EE:EF:7D:86:9E:57:BD:6A:0E:32:79:BD:10:7B:7A:1A:75
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1d:a8:c3:37:2c:f1:47:e1:f1:02:71:d0:ec:84:5a:c8:2b:
         fc:b1:32:82:ee:b8:57:e5:bb:3f:d9:59:5a:d4:b3:48:22:1e:
         2c:84:00:55:3c:47:0b:87:84:32:08:0c:f9:2d:7f:41:c8:5a:
         ae:0f:cb:8f:94:9b:22:4f:37:48:02:38:ab:ea:fd:3b:be:89:
         dc:f0:29:45:02:a9:88:9f:c5:49:ca:08:5d:41:9d:43:c3:ed:
         6c:e0:61:43:0f:6b:91:24:73:62:55:ad:12:61:75:3a:79:11:
         86:4c:99:da:30:1b:b5:b7:af:f9:ba:0c:6b:cb:20:96:c8:0e:
         43:35:e1:07:9b:e1:13:c1:98:4b:44:46:87:fd:f1:d1:49:e8:
         6d:42:6f:61:e7:20:5e:d9:2a:d4:1f:70:bc:8b:c7:5a:cc:94:
         37:5b:b9:f3:76:73:62:bd:f6:9e:6c:b0:fd:1f:b7:68:d7:40:
         40:6a:0f:6c:a5:16:bb:c3:a7:e0:06:de:e8:e9:55:4f:fc:13:
         ee:6a:70:a3:5f:7b:0a:04:dd:86:05:24:b7:82:03:b2:fe:3f:
         ba:e7:ed:04:c7:b3:83:de:1d:03:70:87:1f:d8:4f:1c:c8:62:
         b0:1d:af:be:10:4e:81:f9:2c:ed:1b:7c:3f:d7:67:90:5c:86:
         08:b1:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:34:07 2026 by rpki-client