Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e3139352e3138302e302f32322d3234203d3e20323633323736.roa
File:                     3136382e3139352e3138302e302f32322d3234203d3e20323633323736.roa (raw, json)
Hash identifier:          mTKEO2c4qsW3uNWJeXVUxGK/POgf64ZobTvBnY4Zegc=
Subject key identifier:   44:DE:79:AC:77:8E:F9:1B:6B:38:D9:7A:D4:EE:67:5A:EA:10:7C:17
Certificate issuer:       /CN=8B402B544C026F193D073E5EB48316BF70232F73
Certificate serial:       626A9BFD4415ED70B5BAB62CF554383171DBFA16
Authority key identifier: 8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e3139352e3138302e302f32322d3234203d3e20323633323736.roa
Signing time:             Wed 07 Oct 2026 19:02:59 +0000
ROA not before:           Wed 07 Oct 2026 18:57:59 +0000
ROA not after:            Wed 06 Oct 2027 19:02:59 +0000
asID:                     263276
IP address blocks:        168.195.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 07:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6a:9b:fd:44:15:ed:70:b5:ba:b6:2c:f5:54:38:31:71:db:fa:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B402B544C026F193D073E5EB48316BF70232F73
        Validity
            Not Before: Oct  7 18:57:59 2026 GMT
            Not After : Oct  6 19:02:59 2027 GMT
        Subject: CN=44DE79AC778EF91B6B38D97AD4EE675AEA107C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:2b:a0:06:73:db:1f:f1:9b:e3:de:0b:85:
                    ab:15:da:ac:6d:44:d9:b9:84:7b:e6:41:1d:e0:a1:
                    8f:d1:66:09:2c:c2:c4:17:04:40:b7:52:2e:e3:7a:
                    40:c6:fa:8c:78:9f:b3:eb:16:3d:e0:02:a5:b8:b0:
                    ab:1e:3f:57:f0:cf:83:3a:5e:59:7e:cf:66:f3:04:
                    eb:0f:41:b4:c7:9c:85:a1:60:6f:ce:52:a5:61:e3:
                    6f:8f:6f:e9:2a:27:c8:10:ee:ab:47:5c:f2:c8:3c:
                    a1:df:8d:8a:28:4a:dd:1f:55:d1:62:d0:56:92:e5:
                    a9:05:12:45:c1:e6:94:f1:a2:ba:cc:d8:57:d5:e8:
                    96:af:93:46:d9:23:cd:1e:e1:a6:2c:6c:87:3b:88:
                    69:1c:fd:6e:62:d0:9b:3d:66:6d:86:af:15:72:1b:
                    d1:95:ee:91:fa:f5:74:12:22:a0:7e:c9:4a:74:e1:
                    88:7a:0e:99:83:32:6e:1d:36:ff:94:a2:14:f1:90:
                    dc:a0:38:cc:9a:d8:de:8a:36:da:a3:66:35:ea:06:
                    6b:1c:02:31:a7:a4:64:e2:a8:e1:ee:d6:b4:de:67:
                    00:ce:3f:36:a3:dd:91:03:37:1c:f9:33:20:48:e8:
                    5f:95:60:e8:59:ee:65:51:86:53:f2:b5:87:41:97:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DE:79:AC:77:8E:F9:1B:6B:38:D9:7A:D4:EE:67:5A:EA:10:7C:17
            X509v3 Authority Key Identifier:
                keyid:8B:40:2B:54:4C:02:6F:19:3D:07:3E:5E:B4:83:16:BF:70:23:2F:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/8B402B544C026F193D073E5EB48316BF70232F73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B402B544C026F193D073E5EB48316BF70232F73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/3136382e3139352e3138302e302f32322d3234203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:8a:08:f8:2a:8b:82:86:1e:5d:eb:4c:63:8d:27:e2:3c:
         c2:86:16:1d:2b:7b:c0:b2:16:1d:93:8d:fc:1b:5e:f6:0d:dd:
         a5:59:af:8f:05:19:da:e7:a0:a8:c3:e9:58:de:0a:9e:34:b7:
         23:49:5d:73:2f:1a:05:3c:de:9b:01:76:5d:4d:bd:9b:4a:9e:
         ca:78:71:17:c9:66:b0:fe:c7:8d:78:3b:a6:78:96:13:15:54:
         a3:1d:6f:d6:bb:38:df:ee:58:a9:ad:5d:ca:1c:36:bc:0e:f5:
         95:7c:02:65:6d:c1:ab:6a:a7:8e:64:2c:67:99:f4:9c:39:03:
         da:5c:1f:b9:39:98:9a:ce:1c:64:ca:bd:98:21:3d:e1:47:8c:
         08:48:38:92:42:e3:53:d9:b7:68:3a:75:cc:10:e7:2d:21:55:
         1c:4f:4a:28:a8:4b:7c:50:20:b0:49:ad:36:fd:73:fd:fe:4f:
         27:a0:7f:d1:82:20:94:a3:0f:50:6d:1d:a9:36:f8:b5:6b:4b:
         95:18:38:cc:30:9c:23:9c:a9:86:dd:16:52:cd:4e:e0:3f:02:
         1d:77:8d:ab:72:41:e5:7e:dd:0f:55:08:a1:50:f7:88:2e:8a:
         cb:bf:44:66:0e:a8:7e:38:0e:d7:07:28:27:0f:9b:fa:31:ad:
         a4:26:ba:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----