Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e20323734363732.roa
File:                     3138392e38392e3234352e302f32342d3234203d3e20323734363732.roa (raw, json)
Hash identifier:          gQn1j7xlD7QjhJnkA7LSvQukWmfVeaXU/7bNiL7n4QI=
Subject key identifier:   4A:18:57:82:BF:68:D1:4A:06:38:93:90:C9:EB:98:02:80:64:13:AA
Certificate issuer:       /CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
Certificate serial:       3086642F7A6231B71E527AD60DDC9E0CD6E9783D
Authority key identifier: 26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e20323734363732.roa
Signing time:             Fri 09 Oct 2026 14:34:13 +0000
ROA not before:           Fri 09 Oct 2026 14:29:13 +0000
ROA not after:            Fri 08 Oct 2027 14:34:13 +0000
asID:                     274672
IP address blocks:        189.89.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl
                          rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 01:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:86:64:2f:7a:62:31:b7:1e:52:7a:d6:0d:dc:9e:0c:d6:e9:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F5B1E04ADF1D8B1298C9E56337C196C3C8034F
        Validity
            Not Before: Oct  9 14:29:13 2026 GMT
            Not After : Oct  8 14:34:13 2027 GMT
        Subject: CN=4A185782BF68D14A06389390C9EB9802806413AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:08:04:a3:f5:ff:d5:95:a5:ec:17:4e:10:89:
                    30:d4:3f:3d:d8:89:10:09:de:50:ef:d5:27:d9:c1:
                    c0:6a:17:eb:f5:c1:d9:c4:24:eb:2b:6e:e1:9f:ea:
                    c6:fb:58:c1:03:aa:0e:3d:86:d9:8b:45:c2:da:b9:
                    98:43:32:9c:e0:eb:22:4f:6a:91:4f:98:b3:6e:64:
                    41:2b:29:00:45:51:39:e7:38:78:ac:4d:e8:13:8f:
                    9a:3a:01:c0:a1:b9:ae:3d:87:28:29:e0:08:3b:f0:
                    b1:be:91:63:90:65:69:16:29:7c:a8:2d:a8:73:a2:
                    63:41:84:93:99:e4:cd:ac:b4:61:00:b2:5b:02:10:
                    e6:f3:6b:ea:44:0a:8d:8a:94:a1:43:f8:c3:a2:56:
                    30:fb:61:91:f0:26:0e:72:96:b0:12:7c:37:da:37:
                    55:40:79:bc:be:51:c7:62:10:c1:25:a7:4e:7a:31:
                    7a:c3:6d:82:f7:d8:9b:47:c3:57:50:7b:1d:e5:70:
                    4c:4a:09:99:9a:15:e4:a3:e2:80:e1:d7:99:c8:dd:
                    4b:30:b9:d3:dd:11:bd:14:76:49:2c:d7:0a:31:a7:
                    02:bd:04:59:52:44:5a:05:ed:98:af:d9:77:45:18:
                    45:5a:25:09:32:49:68:91:17:d9:23:c1:8e:64:47:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:57:82:BF:68:D1:4A:06:38:93:90:C9:EB:98:02:80:64:13:AA
            X509v3 Authority Key Identifier:
                keyid:26:F5:B1:E0:4A:DF:1D:8B:12:98:C9:E5:63:37:C1:96:C3:C8:03:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26F5B1E04ADF1D8B1298C9E56337C196C3C8034F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FxiXg9mcf2zBgHQtjriEbLeewaiuHh2Uw65r4SdUpaB7/0/3138392e38392e3234352e302f32342d3234203d3e20323734363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:e9:bc:26:d1:1e:33:fb:aa:6c:56:67:94:69:c0:29:86:
         3e:ec:22:64:cc:6c:2b:7f:f1:15:43:85:0e:d0:b8:f7:dd:81:
         2b:9c:90:eb:4f:3e:52:41:8e:fa:0c:87:52:f5:ab:be:36:ea:
         af:71:1a:7c:ad:df:9e:72:62:f8:19:81:d9:a1:84:18:06:d6:
         38:19:4d:a2:42:bb:f9:fd:cf:6c:0c:61:34:7a:75:f1:f9:c3:
         18:9d:9f:61:7e:5d:81:1d:c0:8f:09:1a:63:40:44:28:27:9f:
         8c:0e:d5:9c:6a:d6:36:d0:9a:b5:3d:ef:f7:56:9a:ba:54:0a:
         32:d6:5f:8f:19:f7:98:6a:28:47:55:f1:a4:12:23:b8:0e:14:
         2a:6e:44:42:33:11:f1:85:d0:cd:a6:c8:bd:06:86:5a:fb:21:
         89:20:eb:07:03:97:72:4b:4f:24:d1:c1:95:38:55:2d:7b:f9:
         78:d6:74:50:85:a1:a3:60:68:ee:c5:4e:79:3f:67:cc:eb:57:
         70:e1:e4:61:20:57:f9:3d:01:ec:dd:4b:7f:0f:d9:f6:99:ea:
         92:1d:a4:fe:a7:78:a8:f9:34:92:6f:69:86:01:74:20:97:5d:
         94:1d:78:8d:4f:23:8e:a2:17:b4:3b:a9:e5:6b:08:b8:bf:b1:
         d2:1b:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:27 2026 by rpki-client