Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32332d3233203d3e20323634303039.roa
File:                     3136382e3232372e3133322e302f32332d3233203d3e20323634303039.roa (raw, json)
Hash identifier:          ohNtZ4zc2RlJDzbkcNBXRc+S/diZ4hk12lwqB1cb/w4=
Subject key identifier:   2B:88:A8:41:DE:C2:24:4B:F5:8F:F8:7F:51:8E:CB:3C:37:9D:95:16
Certificate issuer:       /CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
Certificate serial:       7923B1186315AD40A947FCE14F39430B2F30A266
Authority key identifier: 0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32332d3233203d3e20323634303039.roa
Signing time:             Tue 21 Jul 2026 18:05:26 +0000
ROA not before:           Tue 21 Jul 2026 18:00:26 +0000
ROA not after:            Tue 20 Jul 2027 18:05:26 +0000
asID:                     264009
IP address blocks:        168.227.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:23:b1:18:63:15:ad:40:a9:47:fc:e1:4f:39:43:0b:2f:30:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
        Validity
            Not Before: Jul 21 18:00:26 2026 GMT
            Not After : Jul 20 18:05:26 2027 GMT
        Subject: CN=2B88A841DEC2244BF58FF87F518ECB3C379D9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:6c:6b:32:d3:d2:6a:11:f8:93:45:32:9a:
                    0c:e6:c3:83:b1:f4:09:94:62:c6:7e:5a:7c:99:8c:
                    16:68:87:95:3c:50:b9:65:95:88:4d:3c:a2:cb:b6:
                    d9:07:c7:fd:32:93:b0:53:3a:53:02:a4:fe:7e:17:
                    cc:a1:05:fe:5c:bd:b0:79:77:9a:75:e7:72:50:2a:
                    64:0a:1e:02:a3:97:a1:98:84:95:53:b2:7c:d7:91:
                    6b:11:91:30:d4:1a:e9:08:22:c5:5d:1b:15:c5:4f:
                    4a:cd:93:1e:95:45:26:2d:f0:fd:f9:48:72:36:24:
                    24:9d:45:ea:b6:8c:b2:2d:cd:cc:85:05:fc:2e:2e:
                    0b:f9:1f:04:9d:f6:77:f5:42:4d:18:c4:6f:c5:89:
                    9d:28:13:f5:3f:e4:b0:18:64:d1:47:61:66:f3:b0:
                    a7:0c:1b:ac:07:29:fe:42:f4:f5:d9:70:64:d2:a7:
                    37:7c:ec:fc:11:09:fd:c9:75:a6:b6:f6:71:3b:34:
                    d2:5e:8a:21:60:bc:7a:cd:f8:75:29:0f:5b:5b:b8:
                    69:4e:a1:bb:97:08:4c:55:4f:01:44:82:fe:27:61:
                    0a:34:54:7a:0f:84:e6:a3:47:a0:3a:fb:58:a3:f5:
                    17:b9:0b:6a:e6:ea:c6:d6:e6:1f:be:c8:ca:de:58:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:A8:41:DE:C2:24:4B:F5:8F:F8:7F:51:8E:CB:3C:37:9D:95:16
            X509v3 Authority Key Identifier:
                keyid:0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32332d3233203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:49:79:72:4a:ac:61:0c:05:3d:e6:01:21:da:fd:50:e5:77:
         c9:1e:a7:83:49:04:01:e5:b6:76:40:aa:25:2f:70:47:81:b4:
         a7:4d:6b:a5:18:32:49:75:1c:fd:8d:7b:17:58:bd:54:a6:5b:
         da:4f:66:b8:1a:7c:c1:9c:9a:6c:11:79:c3:aa:0b:35:8f:15:
         73:27:b4:8d:ce:9e:a5:e6:8c:bb:36:7e:42:63:e3:a0:70:36:
         8c:f5:4a:2e:bf:0a:6e:b7:e7:43:db:a9:bf:7c:59:0d:24:56:
         fe:44:8e:c2:8c:6c:5a:7d:ac:55:4b:06:00:57:e6:94:52:48:
         1c:51:86:a5:54:8f:38:33:8c:aa:75:58:ea:53:8e:6a:40:95:
         dd:2f:9b:d7:b8:44:ec:04:3a:6a:88:23:33:f5:d6:08:5c:75:
         17:9c:61:ab:27:09:f0:68:44:da:fd:f8:2b:31:9b:54:58:fa:
         85:e6:f3:d7:ef:c8:d3:1a:4d:ec:08:3a:00:6d:3f:85:3f:49:
         3c:bc:ad:e9:2c:ea:ea:e5:a1:b8:1c:ff:a1:5c:9f:ba:a8:a0:
         e1:23:b6:26:e4:45:9f:a4:49:25:a2:15:5a:cc:5f:d4:37:53:
         57:65:24:ba:e8:3a:d1:b4:04:e7:47:5d:51:38:8b:34:ce:79:
         7e:ba:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:11:27 2026 by rpki-client