Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
File:                     3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa (raw, json)
Hash identifier:          X+bLZfesta2MLR7Ey2fIEgA/yCxFu3Dd1T3r72GTbP4=
Subject key identifier:   D6:F8:FB:35:F4:37:EB:79:08:2F:91:8D:06:CB:31:5E:5A:92:F0:C0
Certificate issuer:       /CN=44C4E7EA427432C8AF052B0213629A818E595AF0
Certificate serial:       5E2E9299FCB1B76C85361B5048D8DBD02C0176B5
Authority key identifier: 44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa
Signing time:             Mon 26 Oct 2026 17:25:26 +0000
ROA not before:           Mon 26 Oct 2026 17:20:26 +0000
ROA not after:            Mon 25 Oct 2027 17:25:26 +0000
asID:                     263336
IP address blocks:        191.36.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 08:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:2e:92:99:fc:b1:b7:6c:85:36:1b:50:48:d8:db:d0:2c:01:76:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4E7EA427432C8AF052B0213629A818E595AF0
        Validity
            Not Before: Oct 26 17:20:26 2026 GMT
            Not After : Oct 25 17:25:26 2027 GMT
        Subject: CN=D6F8FB35F437EB79082F918D06CB315E5A92F0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:a7:16:00:13:a5:e4:bf:2b:15:dc:2f:ef:
                    be:c5:89:8e:01:6e:68:5e:ef:fc:4e:33:45:ac:13:
                    1c:f4:4f:09:c9:ee:d4:5a:27:ec:0d:03:b7:e4:1b:
                    96:51:06:e1:33:2b:14:9a:df:bd:74:ed:70:67:1a:
                    99:60:14:6e:31:55:c8:b4:4a:7b:88:e2:0f:4f:8b:
                    a9:c2:82:ff:a6:48:0e:7c:bc:8b:32:05:a8:9e:2b:
                    2c:ec:98:12:d7:37:04:8b:eb:cf:88:5b:f1:fc:a4:
                    52:9e:32:31:96:37:15:f2:07:56:6b:2d:39:50:7e:
                    3e:28:4c:3c:b3:f6:67:63:e3:5c:90:7c:7a:32:a4:
                    cd:e1:d2:c5:3d:95:fa:9b:64:71:e5:18:19:ff:88:
                    64:39:48:89:28:ed:f2:ee:16:ed:9b:49:25:56:c4:
                    d7:c1:51:9f:52:f4:31:24:e9:06:a7:3f:18:8a:71:
                    bc:ca:8d:e9:46:b5:64:4f:3f:36:ea:c6:93:bf:36:
                    32:55:61:cc:fe:af:6b:80:76:d5:5f:3c:98:d7:10:
                    58:a9:ae:67:7e:d1:83:79:33:6c:b8:42:f8:98:00:
                    54:66:a6:a7:5d:49:49:af:12:05:c9:86:03:c6:61:
                    13:a4:1f:63:76:90:d4:e4:01:a3:32:75:70:72:8d:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F8:FB:35:F4:37:EB:79:08:2F:91:8D:06:CB:31:5E:5A:92:F0:C0
            X509v3 Authority Key Identifier:
                keyid:44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/3139312e33362e3136382e302f32312d3234203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:fd:e7:fe:13:b8:32:10:81:20:c5:05:c0:ea:10:00:84:1d:
         f4:e5:e5:1d:ec:d2:cb:0d:60:ff:ca:bc:db:85:81:37:00:72:
         23:a2:db:4c:cb:28:d1:4e:3c:0d:47:97:0e:70:f3:9a:fa:f0:
         7a:f6:63:7c:d0:47:c9:eb:66:a2:ac:c9:f3:be:82:8c:52:7b:
         fe:7c:03:d1:fa:35:c2:d8:ad:18:f8:fc:96:0c:d4:46:78:3d:
         5d:0e:64:38:e9:4d:da:2d:8f:e7:81:51:98:e9:44:bf:f9:13:
         37:6e:e5:e8:9b:23:9c:37:8e:83:30:93:5b:1d:5d:ab:95:e0:
         8e:9e:43:31:d8:88:53:90:c7:69:e6:6f:69:45:4c:9b:6d:5a:
         f2:f4:3e:95:3f:6f:f2:6a:c1:03:58:04:28:e5:cd:b4:0c:bc:
         e7:8d:e4:37:b7:d3:78:50:2f:1d:0f:b0:15:e6:0b:0b:eb:c8:
         e0:d3:b1:78:00:ca:cf:bc:e8:db:56:f1:46:2c:87:85:ed:10:
         79:65:90:69:07:0f:d0:55:98:81:36:89:8a:54:77:9d:0d:b6:
         cd:a4:d3:2f:e0:c3:e6:7b:73:b3:d1:60:eb:72:fc:cd:b1:4a:
         65:38:ef:e0:f6:3d:cb:7a:4b:1f:e6:2e:c6:94:ea:e8:48:df:
         00:a9:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:41:29 2026 by rpki-client