Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32332d3233203d3e20323634303039.roa
File:                     3136382e3232372e3133342e302f32332d3233203d3e20323634303039.roa (raw, json)
Hash identifier:          ChkuG9Mif6q+kutwFnyniMX0nP8efjtUArZ6gOQxJcA=
Subject key identifier:   4D:BB:33:BE:5F:3B:52:A9:1C:F8:4E:3C:22:CF:8B:6C:D4:7F:64:EA
Certificate issuer:       /CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
Certificate serial:       781DF0FB8A131E12716C771EFA9CEF8C10C4760C
Authority key identifier: 0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32332d3233203d3e20323634303039.roa
Signing time:             Tue 21 Jul 2026 18:05:43 +0000
ROA not before:           Tue 21 Jul 2026 18:00:43 +0000
ROA not after:            Tue 20 Jul 2027 18:05:43 +0000
asID:                     264009
IP address blocks:        168.227.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1d:f0:fb:8a:13:1e:12:71:6c:77:1e:fa:9c:ef:8c:10:c4:76:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
        Validity
            Not Before: Jul 21 18:00:43 2026 GMT
            Not After : Jul 20 18:05:43 2027 GMT
        Subject: CN=4DBB33BE5F3B52A91CF84E3C22CF8B6CD47F64EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:47:a0:e8:cc:2f:c7:cc:10:65:e4:18:4e:
                    0f:67:be:4f:40:e5:d3:6d:b4:13:76:36:db:63:98:
                    60:47:4c:96:f7:7b:84:da:3a:94:60:61:26:3c:48:
                    69:d1:fd:00:23:c9:32:7a:5b:4d:96:b1:97:0b:e8:
                    58:d1:e0:8a:db:4e:ad:6b:22:bc:0d:66:bc:63:e8:
                    75:af:60:a8:bc:8a:81:32:db:72:bf:c2:57:42:37:
                    d4:44:b4:42:57:5d:bd:57:6f:fb:f6:8e:e0:87:d3:
                    41:54:dc:63:3d:f2:68:53:50:5b:ea:31:4a:1f:a9:
                    29:0f:17:c9:6f:8f:6f:b9:b7:e2:79:66:a6:3c:ca:
                    14:36:0c:48:4a:d4:fa:67:a1:74:d2:5b:1f:af:55:
                    a1:7f:b7:f2:65:b3:52:ed:2b:ff:ef:2f:49:e9:84:
                    5e:32:77:6e:f9:7e:e7:e9:ba:2f:f6:0e:12:52:92:
                    a3:32:f1:60:6d:b8:58:83:51:4d:91:12:e7:57:92:
                    b5:7b:bb:54:b1:1e:70:ee:ef:7c:b3:55:ab:c8:42:
                    6c:9b:7a:07:21:1f:b0:f7:a9:98:ee:f6:f2:3b:2e:
                    05:99:27:c6:30:62:68:a2:cf:e4:8c:dd:80:9f:97:
                    be:73:86:67:47:44:b5:fb:7a:20:d3:b3:ac:bc:b9:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:33:BE:5F:3B:52:A9:1C:F8:4E:3C:22:CF:8B:6C:D4:7F:64:EA
            X509v3 Authority Key Identifier:
                keyid:0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133342e302f32332d3233203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:42:90:25:3d:b8:04:75:fa:1e:2c:4b:d5:50:ad:87:be:85:
         96:9b:1a:e1:b1:1e:31:97:64:7d:2d:67:a6:52:bc:30:5b:4a:
         77:d0:d4:5b:15:ba:83:c5:bf:30:30:54:af:d3:0b:b9:33:be:
         d9:9e:93:14:a5:18:02:f2:37:ea:2b:33:42:4a:8a:a0:b9:84:
         9a:8c:c4:66:e0:4f:d7:a6:6e:5a:3f:6b:c9:04:cb:5f:30:46:
         01:83:ee:ec:5e:a5:ef:13:e5:83:41:f4:29:03:6d:d2:fc:60:
         bd:dc:c4:3a:94:f5:ca:35:80:5d:7d:74:4a:53:28:e2:05:c6:
         88:1d:32:48:11:fd:eb:5b:cd:f0:65:39:37:54:50:96:c4:e8:
         37:c9:cf:ec:bd:7b:6b:48:ba:4f:d4:e6:bb:f7:aa:0b:95:a1:
         26:50:26:59:5f:bb:ce:2f:54:da:8a:2b:14:0f:9c:83:e1:8c:
         7a:e1:2f:38:e6:5a:7c:5a:a9:d7:6a:1f:c8:ea:7f:39:35:7f:
         76:02:7b:0c:60:79:80:14:ca:99:ae:37:30:c0:a7:0a:f8:24:
         72:9a:df:85:68:ac:75:9a:a3:f9:54:2b:cc:5c:b2:2f:b7:05:
         87:db:8b:17:1f:6c:5b:ba:fd:23:e8:78:f2:a9:f0:f8:35:db:
         d4:f2:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:20 2026 by rpki-client