Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32332d3233203d3e20323634393330.roa
File:                     3136382e3232382e3231322e302f32332d3233203d3e20323634393330.roa (raw, json)
Hash identifier:          05pB9J1DS4Z+wdxoBaSzBKlUyioQepYN6MdAY59Po9A=
Subject key identifier:   49:07:CB:B9:F3:94:24:B5:D9:F6:5F:15:25:B3:99:71:34:E7:28:35
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       752247997C24505569DE80B6056D82AE55672D4F
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32332d3233203d3e20323634393330.roa
Signing time:             Thu 17 Sep 2026 23:10:21 +0000
ROA not before:           Thu 17 Sep 2026 23:05:21 +0000
ROA not after:            Thu 16 Sep 2027 23:10:21 +0000
asID:                     264930
IP address blocks:        168.228.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 09:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:22:47:99:7c:24:50:55:69:de:80:b6:05:6d:82:ae:55:67:2d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Sep 17 23:05:21 2026 GMT
            Not After : Sep 16 23:10:21 2027 GMT
        Subject: CN=4907CBB9F39424B5D9F65F1525B3997134E72835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:89:06:df:ea:21:07:4d:ca:b9:a5:59:4a:
                    01:48:29:9c:bb:e8:8f:94:63:27:be:6b:19:ed:88:
                    3b:aa:3b:f9:9b:a6:f5:f1:16:0a:5d:8c:5b:ad:f1:
                    2f:52:21:28:1f:e9:ae:a7:f5:dc:92:e7:14:75:29:
                    21:92:bb:e7:43:9a:ca:45:84:fd:f2:96:e8:14:d3:
                    12:fe:6f:33:d1:f0:e9:22:8e:c8:28:20:81:5d:0a:
                    d8:ec:37:cb:51:56:bc:c7:8f:61:2a:e0:bd:b7:f8:
                    ee:3b:4b:76:3c:26:e6:f3:fd:3c:ba:c9:db:b2:08:
                    04:b5:75:7f:d2:8c:ff:25:c1:c3:6f:e9:d5:ad:43:
                    c4:87:21:60:bb:7d:a4:c6:c2:dc:86:f4:f3:64:f6:
                    00:4e:b2:08:03:1f:6a:81:3a:ce:ca:8a:f6:e2:11:
                    b4:9f:f2:09:54:b4:a4:35:18:f4:42:49:5a:cb:a6:
                    81:92:6a:db:42:f3:75:b2:94:aa:81:3c:71:0d:32:
                    72:00:b5:40:53:ce:9f:1d:28:f2:8b:4f:b1:5e:1b:
                    22:86:06:34:5c:45:56:23:26:41:85:39:99:b6:85:
                    65:85:39:c0:6a:6c:88:fb:8b:10:ac:c5:99:8f:af:
                    2f:3a:63:f7:49:ab:3c:17:f5:89:d2:ba:3b:5f:9a:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:07:CB:B9:F3:94:24:B5:D9:F6:5F:15:25:B3:99:71:34:E7:28:35
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32332d3233203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:dd:08:c5:b7:3c:5b:a6:7f:34:49:e2:1d:29:d3:45:29:
         90:84:25:ae:fb:11:64:4c:fc:08:37:cd:43:6f:0d:d0:5a:89:
         b2:c9:74:70:af:19:af:cb:de:58:da:c3:18:33:91:27:52:0b:
         64:76:cb:a8:68:4d:e7:ad:91:16:c0:d1:64:78:1a:5f:e1:0e:
         0e:52:19:6a:18:0d:15:7f:04:87:d6:6d:81:5a:94:47:02:32:
         fd:90:c6:a6:39:a4:20:91:b0:83:74:f1:25:4f:11:7c:68:29:
         13:76:8e:95:4a:9c:2f:cf:67:a1:2a:af:8d:9e:52:b7:f0:75:
         0c:1f:d6:e1:85:47:b2:60:a0:51:2c:f9:f8:95:2c:c6:ed:63:
         08:a9:e5:69:cb:1a:03:00:45:4c:79:36:69:a4:21:b8:68:6a:
         4e:43:df:34:c3:99:9e:6a:57:f5:44:61:67:35:c6:32:ed:b9:
         f0:de:bf:7f:98:09:9b:ff:e4:da:bd:a2:00:29:86:6e:06:cc:
         e2:31:87:05:6a:df:72:ca:00:c0:62:d6:79:2c:9c:8c:c3:31:
         95:07:10:8d:d2:e9:99:d9:a0:57:8b:01:8c:27:bb:a4:cb:d6:
         bd:3b:c5:d3:96:52:fb:a9:60:49:bd:f5:6d:e0:58:94:b2:73:
         85:87:3e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:12:01 2026 by rpki-client