Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa
File:                     3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa (raw, json)
Hash identifier:          Zb+6SZl1NBq2PF2WKuuDs/C7Vn9CmHfdEjtAL51STQ0=
Subject key identifier:   F6:06:5F:46:FD:00:98:57:61:D4:3F:CD:9C:C9:9B:F7:0D:67:8D:69
Certificate issuer:       /CN=019F0E7129937B53EAC899F4F52C36DEC63D22ED
Certificate serial:       35A282AB6F254916800F923A63803730E13F0C34
Authority key identifier: 01:9F:0E:71:29:93:7B:53:EA:C8:99:F4:F5:2C:36:DE:C6:3D:22:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019F0E7129937B53EAC899F4F52C36DEC63D22ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa
Signing time:             Thu 03 Sep 2026 14:48:41 +0000
ROA not before:           Thu 03 Sep 2026 14:43:41 +0000
ROA not after:            Thu 02 Sep 2027 14:48:41 +0000
asID:                     265463
IP address blocks:        168.197.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/019F0E7129937B53EAC899F4F52C36DEC63D22ED.crl
                          rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/019F0E7129937B53EAC899F4F52C36DEC63D22ED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019F0E7129937B53EAC899F4F52C36DEC63D22ED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 05:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:82:ab:6f:25:49:16:80:0f:92:3a:63:80:37:30:e1:3f:0c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019F0E7129937B53EAC899F4F52C36DEC63D22ED
        Validity
            Not Before: Sep  3 14:43:41 2026 GMT
            Not After : Sep  2 14:48:41 2027 GMT
        Subject: CN=F6065F46FD00985761D43FCD9CC99BF70D678D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:f3:ee:22:ca:7c:50:f3:84:4e:dc:ab:79:
                    69:86:9d:b8:61:3e:50:09:a0:3c:79:1d:7f:aa:7b:
                    3b:70:3d:41:cb:f3:c4:c8:c4:d7:df:41:d1:82:b7:
                    ed:3a:54:d6:aa:56:b6:cc:73:0c:83:82:fa:9f:82:
                    ba:4d:5f:08:92:f5:2c:27:5d:bf:29:41:fc:34:5c:
                    6d:fa:dd:a6:be:38:e7:12:f4:6d:fa:10:32:a4:fc:
                    02:1d:39:bc:39:b4:11:a7:dd:c7:5a:e7:b3:a7:c8:
                    9c:b1:ab:00:22:93:a2:d4:e3:0d:c0:c4:ab:74:3a:
                    2c:f6:76:04:3f:15:b6:b1:69:2c:5f:b0:8c:d2:89:
                    db:a0:63:aa:54:51:94:95:12:5f:b4:2f:06:ed:00:
                    70:3a:7a:0c:64:1b:8e:4c:1c:46:a3:db:5e:b8:42:
                    35:5c:c6:15:d1:dc:2e:07:b9:17:07:4b:fb:5a:ed:
                    86:5b:94:8f:93:3a:78:38:65:2e:be:88:52:66:9b:
                    52:ce:a7:6d:d1:cf:91:af:15:bb:3c:ee:1a:9f:cd:
                    01:42:91:1a:ff:1c:3e:d0:ce:60:01:03:59:96:ba:
                    91:f3:d1:10:d5:cf:7b:53:45:8f:76:00:08:cf:ee:
                    2e:ce:2c:04:94:e9:c5:bc:1e:6b:c4:5a:0c:36:a8:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:06:5F:46:FD:00:98:57:61:D4:3F:CD:9C:C9:9B:F7:0D:67:8D:69
            X509v3 Authority Key Identifier:
                keyid:01:9F:0E:71:29:93:7B:53:EA:C8:99:F4:F5:2C:36:DE:C6:3D:22:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/019F0E7129937B53EAC899F4F52C36DEC63D22ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019F0E7129937B53EAC899F4F52C36DEC63D22ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43f46SnqFL3KgVzUTFtPSrbcW8LPqd9UdPJQaTRR7tup/0/3136382e3139372e31322e302f32322d3332203d3e20323635343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:ac:95:1f:30:09:35:01:d8:60:68:c9:ce:d7:77:ff:df:
         1d:0d:c0:6f:15:fb:13:85:01:ee:01:c7:3a:6f:c5:07:a8:9e:
         e5:55:ba:c2:f4:28:92:0d:54:ef:9f:06:e2:83:10:13:85:16:
         d3:c1:50:a3:95:2a:77:38:93:8b:78:84:9f:07:0a:44:82:33:
         ef:f0:24:e6:ad:48:75:28:c5:e4:53:40:bb:87:56:60:36:b9:
         ff:ca:92:ae:35:64:02:de:0d:11:06:8f:08:bd:80:34:a0:d4:
         fd:96:6f:fe:43:81:ac:39:70:8b:0d:3d:c3:99:29:1f:21:2d:
         29:24:87:a1:55:26:a3:41:c5:e0:24:68:5c:3d:e3:66:3f:50:
         78:be:9b:c8:61:c5:a3:54:d6:33:e8:fa:25:3a:f7:e4:be:5d:
         33:2d:2b:7d:66:12:a7:c8:bc:ef:3d:93:f6:c1:fc:53:71:ba:
         9e:d5:4e:7b:77:05:0a:4a:8e:3c:73:ac:db:7e:4b:b1:cd:21:
         43:d7:58:6c:5c:4c:e0:77:12:27:5b:25:fa:3e:f1:5d:c5:98:
         cf:7c:80:52:6e:ee:3b:4e:51:a3:e4:c2:ab:e9:1c:8c:f5:64:
         10:b9:f6:14:db:b9:56:1a:0f:72:64:48:de:cd:81:0e:3b:86:
         7b:1b:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:06:53 2026 by rpki-client