Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32332d3233203d3e20323634393330.roa
File:                     3136382e3232382e3231342e302f32332d3233203d3e20323634393330.roa (raw, json)
Hash identifier:          z3Obb4pd3nj++IqqRszi9qyRhdneNXefKe6AuCByexU=
Subject key identifier:   B3:6F:7D:84:B9:1C:22:11:7B:A6:0E:8A:9F:90:00:A4:4F:2C:FD:6D
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       273CA2466BDFE3444A22D53B003D9DC7546F42F7
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32332d3233203d3e20323634393330.roa
Signing time:             Thu 17 Sep 2026 22:54:03 +0000
ROA not before:           Thu 17 Sep 2026 22:49:03 +0000
ROA not after:            Thu 16 Sep 2027 22:54:03 +0000
asID:                     264930
IP address blocks:        168.228.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 09:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3c:a2:46:6b:df:e3:44:4a:22:d5:3b:00:3d:9d:c7:54:6f:42:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Sep 17 22:49:03 2026 GMT
            Not After : Sep 16 22:54:03 2027 GMT
        Subject: CN=B36F7D84B91C22117BA60E8A9F9000A44F2CFD6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:14:e3:9f:a4:e4:8f:75:5a:30:63:dc:50:b3:
                    32:0d:3f:dc:a7:76:cb:d9:49:e6:76:75:a6:8e:a4:
                    a6:a3:f2:bd:de:c6:90:54:b9:f2:e2:5a:ce:ef:29:
                    f1:3f:a8:a8:ad:be:74:95:08:9b:37:4f:c4:35:b1:
                    62:90:57:43:49:5f:f6:6d:31:2a:f9:82:93:c0:02:
                    e7:12:cd:9e:df:95:e0:36:5b:07:fc:ce:b8:d1:08:
                    ee:10:c1:bd:56:dc:ad:e9:45:9a:f1:96:4a:a1:e5:
                    a3:24:34:e2:47:e4:e6:3e:d4:31:57:e4:e7:4f:e7:
                    b5:3c:ca:3a:76:82:96:eb:50:87:6c:96:d6:47:47:
                    1d:d8:c6:29:17:d0:ed:4c:0c:b4:ba:75:ec:a1:2e:
                    55:7d:e5:ab:05:f4:b9:44:99:40:be:db:14:5a:f7:
                    15:fe:a6:33:f1:37:6f:e1:28:a6:0d:12:bf:02:7c:
                    10:9e:fa:8e:37:c6:13:3f:4c:13:e0:5a:20:07:c7:
                    2e:40:0e:23:8a:a4:e4:02:54:0b:04:dd:24:61:26:
                    6a:78:d3:b6:54:78:db:04:ee:c5:23:c2:cb:b1:e5:
                    ff:20:70:4b:6b:06:f7:a2:a3:ba:e8:45:69:dd:c7:
                    98:51:43:7c:e2:68:e1:95:65:04:82:64:69:ba:98:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6F:7D:84:B9:1C:22:11:7B:A6:0E:8A:9F:90:00:A4:4F:2C:FD:6D
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32332d3233203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:cd:ff:94:df:09:a3:2e:50:7b:e3:5b:a8:b6:82:66:ee:
         3d:45:4b:94:73:e0:8b:e9:a2:d6:99:c4:66:6e:91:17:c5:17:
         36:9f:8c:2b:6d:96:49:d2:c1:61:38:4d:74:02:6b:50:03:8c:
         aa:ad:3b:fa:71:10:df:9d:97:f5:29:c5:57:87:da:72:cc:57:
         97:b2:49:b5:24:25:a6:1d:ae:e8:25:16:41:f7:7c:fa:a4:96:
         46:3e:67:75:4e:05:c5:e8:f7:26:60:81:e5:ed:2e:51:b6:35:
         8b:a3:53:ae:4a:09:c7:cd:1d:5c:03:69:d7:93:01:22:40:8f:
         c0:ac:cd:de:d6:fd:49:4b:16:45:94:c3:70:b6:03:53:1c:12:
         01:37:9a:23:1f:bd:45:b8:1c:9a:a9:9d:67:e3:52:ea:ba:11:
         46:6c:ef:88:b5:75:28:9d:a2:95:32:24:6c:0c:35:44:0d:0a:
         15:73:43:57:01:c2:5d:0c:9b:37:69:04:f9:52:c0:b2:a3:43:
         21:1d:0f:5a:a0:bc:62:fc:65:95:44:f3:da:20:b7:08:36:48:
         8b:9a:3f:da:ed:49:07:6f:69:55:d7:0c:77:a7:7c:d7:a5:27:
         73:a1:ce:06:f0:8a:f0:12:a1:ba:5f:34:04:4b:f0:55:7c:53:
         31:bf:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:16:54 2026 by rpki-client