Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa
File:                     3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa (raw, json)
Hash identifier:          XXMZhbwCsivmtOgGXLArWNOWpvHiLPPdn/1WsXjVjk4=
Subject key identifier:   59:FC:35:D3:9A:E6:EB:F5:F4:54:95:6E:9C:EE:36:A6:AF:79:21:50
Certificate issuer:       /CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
Certificate serial:       31D6407AA3100A391168CFC4C485A3BE3CA570A6
Authority key identifier: 3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa
Signing time:             Wed 30 Sep 2026 16:45:50 +0000
ROA not before:           Wed 30 Sep 2026 16:40:50 +0000
ROA not after:            Wed 29 Sep 2027 16:45:50 +0000
asID:                     262895
IP address blocks:        201.140.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl
                          rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:40:7a:a3:10:0a:39:11:68:cf:c4:c4:85:a3:be:3c:a5:70:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C
        Validity
            Not Before: Sep 30 16:40:50 2026 GMT
            Not After : Sep 29 16:45:50 2027 GMT
        Subject: CN=59FC35D39AE6EBF5F454956E9CEE36A6AF792150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:85:25:74:a6:8a:e6:56:64:72:7e:62:f2:
                    1c:9b:88:2f:2d:2c:85:3c:bc:1a:be:c4:cf:02:58:
                    8a:63:38:8a:25:f7:2e:6c:88:f0:ee:e7:56:31:49:
                    ee:1d:15:53:76:7b:a4:ff:cb:12:63:b6:54:f6:86:
                    96:94:24:81:6d:04:f1:0e:02:43:5f:cf:a8:f7:55:
                    67:4e:ff:1e:cc:9c:30:1c:82:ed:13:49:ac:83:f5:
                    07:70:1c:83:ba:74:04:99:d9:4f:75:6f:2b:41:79:
                    8f:d2:06:1f:df:fe:25:82:d0:76:6f:58:2b:df:1e:
                    5e:2b:f6:ec:0d:a3:b2:9f:27:42:25:0d:13:80:3f:
                    48:30:d6:75:27:7d:1d:8d:08:51:42:98:e3:62:bf:
                    16:36:70:32:26:fe:de:af:d0:9f:2a:26:06:79:63:
                    a0:ac:6f:e9:2f:30:58:84:fd:56:ba:41:cc:50:26:
                    c1:96:e4:f5:1b:e6:7b:21:e5:3a:02:32:20:05:7f:
                    c4:d8:b5:02:87:78:28:33:07:39:e3:2b:92:8d:93:
                    16:7e:8f:47:20:5f:f8:9a:7d:08:8b:aa:0b:20:07:
                    4e:c4:7a:b5:3f:6c:01:6d:19:0e:04:42:da:10:d7:
                    5e:f4:fc:ac:69:39:e5:c4:fb:e6:c6:75:ce:8a:e1:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:35:D3:9A:E6:EB:F5:F4:54:95:6E:9C:EE:36:A6:AF:79:21:50
            X509v3 Authority Key Identifier:
                keyid:3E:B4:CB:7F:A0:F5:2D:0C:D2:97:70:EC:CF:1E:6A:EF:5E:07:18:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EB4CB7FA0F52D0CD29770ECCF1E6AEF5E07188C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3yubhbdNY9HsjaA6SjeXWJLjMMLRsYPmPMMWockTZkC/0/3230312e3134302e3230382e302f32322d3332203d3e20323632383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:be:b8:4b:8f:39:f1:18:75:48:ec:ef:76:29:b7:ec:9c:cb:
         89:48:7a:5b:8b:28:10:eb:e9:34:61:53:9b:4b:cf:5a:7e:9e:
         ea:44:cd:15:0d:d4:04:3a:55:4a:dc:8c:bc:fc:42:18:5f:a9:
         73:7f:88:e8:44:d1:47:40:fa:98:f5:ac:ed:9c:8c:6b:02:c6:
         81:26:f3:47:30:61:1c:59:5e:c8:04:27:70:14:74:f4:70:18:
         87:ad:0f:43:81:f9:37:12:f2:b6:a3:5b:77:f8:77:eb:92:fe:
         06:08:92:72:fb:4e:8d:55:a4:b9:a7:27:24:65:a5:ed:e8:3a:
         be:56:9d:6c:45:bb:cf:65:5d:32:ea:eb:b8:34:d2:ba:16:95:
         11:b2:03:cc:d6:df:e3:09:6b:94:a6:d5:0f:1e:af:7c:f7:1d:
         46:5d:aa:05:3c:7b:23:11:59:9e:f8:fb:e1:e5:40:91:37:d0:
         82:d5:7d:e9:e8:f3:41:50:a4:4e:fd:06:5d:7e:16:05:3d:3f:
         44:44:15:d9:76:01:17:4c:b6:c2:d1:19:19:2b:03:cb:2d:9e:
         63:4c:48:af:15:4b:79:44:74:fc:c7:5a:1a:96:08:a7:39:78:
         25:1d:d2:ea:ff:cf:d9:73:69:9f:26:f0:2d:d1:fc:7b:9e:45:
         7c:9e:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:26:56 2026 by rpki-client