Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36322e302f32342d3234203d3e20323634393334.roa
File:                     3136382e3233322e36322e302f32342d3234203d3e20323634393334.roa (raw, json)
Hash identifier:          kMifq+l7//Y+FFl4/MmBJIzG7YY9PJK6Aswe5/05M70=
Subject key identifier:   B9:FA:32:D1:A0:6B:90:68:C1:03:96:51:B0:1F:CD:AC:35:C5:D0:20
Certificate issuer:       /CN=86DDB7C72F5357A9758F963A9236F982FD87D824
Certificate serial:       0A4BAD1B0A437C01131354D23F6D10E054234273
Authority key identifier: 86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36322e302f32342d3234203d3e20323634393334.roa
Signing time:             Tue 01 Sep 2026 16:03:39 +0000
ROA not before:           Tue 01 Sep 2026 15:58:39 +0000
ROA not after:            Tue 31 Aug 2027 16:03:39 +0000
asID:                     264934
IP address blocks:        168.232.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4b:ad:1b:0a:43:7c:01:13:13:54:d2:3f:6d:10:e0:54:23:42:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86DDB7C72F5357A9758F963A9236F982FD87D824
        Validity
            Not Before: Sep  1 15:58:39 2026 GMT
            Not After : Aug 31 16:03:39 2027 GMT
        Subject: CN=B9FA32D1A06B9068C1039651B01FCDAC35C5D020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:f9:70:b1:c4:8b:bb:56:28:70:7d:a1:b7:
                    8b:11:7d:b5:99:90:6c:7f:38:57:6c:5f:fa:28:aa:
                    d6:b8:2d:e6:11:15:15:de:35:c6:92:86:02:98:93:
                    35:3b:67:a6:74:02:c4:82:37:38:37:3a:90:05:59:
                    c7:01:a0:6c:01:d0:9a:bc:9a:02:96:68:ed:a6:4b:
                    a3:1b:69:b3:58:6e:b3:80:4a:a6:5b:96:27:20:02:
                    52:ea:ca:93:8e:de:8d:ac:5a:f3:b8:e5:a0:21:72:
                    c1:c8:b9:83:90:70:0d:54:d9:d7:14:75:6c:59:65:
                    a1:2d:62:ae:c1:58:b7:7f:5a:2e:45:a4:96:61:b1:
                    72:2e:4c:51:82:21:cc:6b:e3:4a:a7:6a:1b:ce:39:
                    c7:78:bf:62:91:a5:6a:36:76:d0:f2:99:f2:c4:bd:
                    95:be:16:12:e3:22:20:c5:f6:2b:3a:f0:e9:2a:d8:
                    5f:de:10:69:1c:29:ad:9e:06:cb:f2:84:f7:af:94:
                    1d:03:7a:40:37:bb:e6:64:2e:ac:ab:f9:c8:e2:45:
                    66:14:d6:ae:24:8a:6b:e0:30:fe:0f:b6:59:1e:b5:
                    ba:54:f2:7e:f1:0b:7f:63:ce:ca:10:85:79:e6:1a:
                    45:be:65:16:9f:7d:fb:7c:bc:0a:40:9b:be:e0:bc:
                    0d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:32:D1:A0:6B:90:68:C1:03:96:51:B0:1F:CD:AC:35:C5:D0:20
            X509v3 Authority Key Identifier:
                keyid:86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36322e302f32342d3234203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:a2:d5:e2:96:80:81:87:b1:e9:24:83:5f:79:2a:c1:5b:
         19:33:21:99:fb:e8:b4:40:c2:c3:81:05:91:16:da:20:27:12:
         30:72:07:43:5a:a4:26:c7:b7:ba:53:57:e2:32:9f:e1:37:75:
         9a:17:0e:dd:6a:fa:0f:b9:2d:02:75:60:b9:fd:b8:5a:84:0c:
         bb:dc:e8:24:6a:b1:21:ab:71:27:a1:5f:56:4f:c3:b9:7c:04:
         c7:a7:0a:53:b6:45:2f:9b:e0:82:f4:64:7c:44:71:ae:b6:4b:
         d1:26:cc:6c:b2:48:83:6a:b7:59:2a:d5:35:2d:ff:8c:57:63:
         7a:94:5a:ca:69:af:9b:06:58:f0:20:12:c1:51:3f:87:7f:2d:
         6f:1c:2f:e8:e1:53:e0:07:a2:8f:cb:6b:da:07:25:50:f7:63:
         3d:52:0c:ee:7e:c3:6c:a6:8b:b7:6a:19:ce:f1:2c:7e:c5:3d:
         09:5e:e1:12:c4:a2:32:13:79:8b:62:49:a0:d5:f0:2f:f9:cd:
         15:17:e7:ff:5e:6c:f5:8d:f0:d9:0e:4a:41:bb:a9:7f:11:c2:
         fe:9b:68:bf:49:08:33:cc:21:e3:e8:c5:bc:31:10:93:b7:42:
         31:a1:8d:b6:66:1d:4f:87:9a:a7:d4:0a:fc:4d:2e:68:8b:8f:
         00:cd:ab:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:43:53 2026 by rpki-client