Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134362e302f32342d3234203d3e20323733343433.roa
File:                     3138362e3139382e3134362e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          qbJ0jp6AmqzWRehCQZaFSlnZj8UBWEQmW9gW9XJh1HA=
Subject key identifier:   A5:21:E8:7C:82:8A:14:17:5D:D5:61:07:D2:FE:2A:DB:84:5C:22:E6
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       533E0DA3CD88ABB8B7C43E41BEBE5C7D6EBB8DD4
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134362e302f32342d3234203d3e20323733343433.roa
Signing time:             Sun 25 Oct 2026 23:59:23 +0000
ROA not before:           Sun 25 Oct 2026 23:54:23 +0000
ROA not after:            Sun 24 Oct 2027 23:59:23 +0000
asID:                     273443
IP address blocks:        186.198.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 09:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3e:0d:a3:cd:88:ab:b8:b7:c4:3e:41:be:be:5c:7d:6e:bb:8d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 25 23:54:23 2026 GMT
            Not After : Oct 24 23:59:23 2027 GMT
        Subject: CN=A521E87C828A14175DD56107D2FE2ADB845C22E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:56:b2:1c:2a:f6:9b:15:58:be:12:72:10:
                    ef:e5:85:5e:a1:06:ac:69:63:2b:35:a8:c2:d0:31:
                    85:10:d0:ba:49:e3:a5:b6:fd:c4:5d:76:89:6a:9b:
                    c4:9e:3e:91:5a:5e:ab:a0:d2:4a:42:47:e2:39:14:
                    91:84:6e:f1:fd:32:55:a3:32:d1:34:0f:74:b2:67:
                    dd:40:75:fa:9d:40:4f:13:2c:97:ba:70:1b:bd:08:
                    ae:05:c4:67:6e:d9:8b:f5:e7:8f:5d:be:d1:ae:ae:
                    a9:5e:f2:b5:be:10:51:57:d7:0f:b4:89:4a:2e:b8:
                    24:e2:80:0e:d6:a4:a2:2a:da:36:97:61:b9:f6:3b:
                    cb:f4:f3:59:2f:e1:4f:0e:b6:4f:e6:81:a6:9c:bc:
                    ae:fb:8e:60:6c:85:b8:dd:93:74:27:5e:a6:b2:d7:
                    ae:d1:bc:ca:64:58:f0:6c:d2:da:f2:dd:46:10:1b:
                    36:b1:c3:63:a8:f6:94:f1:1e:88:cd:af:14:c2:87:
                    5c:c4:1f:26:80:69:f5:28:2d:c1:8b:c5:15:73:76:
                    de:96:40:4a:02:38:3b:6a:7a:f8:0f:79:11:42:b2:
                    3e:34:bb:f6:dd:1e:88:0a:7f:3e:c7:64:8a:02:71:
                    ac:a5:42:a9:e8:67:47:9a:ef:5e:28:00:1a:37:2d:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:21:E8:7C:82:8A:14:17:5D:D5:61:07:D2:FE:2A:DB:84:5C:22:E6
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139382e3134362e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.198.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:cf:5a:63:34:00:18:35:f2:7f:f6:f6:e6:f4:ea:a9:0a:
         a6:1b:97:3d:bb:88:c3:1c:84:66:7e:5b:bd:f4:8c:30:db:b6:
         9a:76:4e:5d:7f:91:0f:9b:9f:9d:66:62:f2:e8:10:54:29:30:
         bc:c4:84:7b:da:8e:7b:a4:bb:13:b4:e8:a2:6f:f1:1c:df:9f:
         9e:45:4e:10:0e:5e:98:b9:ca:26:12:fc:7f:d1:14:0e:65:77:
         6f:77:f3:c9:82:1e:22:84:d9:bb:a5:0d:4e:af:38:01:7f:8f:
         3a:20:a1:1b:c1:97:62:84:34:bf:64:dc:b8:57:7b:0e:31:e2:
         5c:c1:9c:26:2c:df:85:51:2c:9b:78:a7:3f:9c:91:40:d1:af:
         4b:44:71:7b:30:86:01:2a:95:01:ef:6c:55:77:d8:5a:3a:3c:
         f1:65:e0:1a:78:9e:6a:c6:96:c6:9d:11:ca:f2:12:1a:62:ba:
         65:d7:23:38:b4:3f:ec:63:0c:6f:d2:24:9f:7b:87:7d:57:18:
         b6:6c:b0:fb:2c:2a:71:b3:6a:fe:7c:6e:48:15:fe:2b:71:01:
         09:b6:e0:8b:5e:65:a7:14:2e:bb:af:e4:11:d3:cf:e4:17:0e:
         f8:39:c6:c3:89:67:b1:bf:be:27:0c:8d:dc:34:ce:d1:5b:5d:
         54:c3:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 22:33:08 2026 by rpki-client