Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa
File:                     3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          wE3fNGv+8HElU7FnriRQRB462slVwnhtERZjbCdbOO0=
Subject key identifier:   30:E1:36:EC:06:C0:78:96:25:CC:E1:25:7C:52:16:29:69:D3:DD:67
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       6BFCF0AC21DF72FB7177451F0182F8E603C70A1E
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:05 +0000
ROA not before:           Fri 28 Aug 2026 17:01:05 +0000
ROA not after:            Fri 27 Aug 2027 17:06:05 +0000
asID:                     262642
IP address blocks:        168.205.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 21:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fc:f0:ac:21:df:72:fb:71:77:45:1f:01:82:f8:e6:03:c7:0a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:05 2026 GMT
            Not After : Aug 27 17:06:05 2027 GMT
        Subject: CN=30E136EC06C0789625CCE1257C52162969D3DD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:f6:a5:a7:71:9b:a4:7b:8d:a1:b1:85:72:
                    df:76:db:eb:ec:f3:1f:ec:41:a5:c3:61:6e:a1:d7:
                    ca:1e:21:27:0e:30:44:3a:0b:2e:61:59:25:c8:8d:
                    ae:d3:3c:44:9d:fa:97:88:a1:fc:da:38:f8:99:7f:
                    18:1f:44:68:96:79:c7:1f:11:6a:65:2c:0a:69:c4:
                    27:a3:2b:52:ab:cd:90:f9:df:f5:cf:d8:4a:49:f4:
                    d4:2e:a8:76:2d:12:0c:27:3c:62:8f:55:63:b3:ab:
                    cb:19:9c:6f:65:cc:69:fb:d3:49:7e:31:85:22:f8:
                    e1:c1:55:42:fd:98:8b:45:a1:fb:69:a3:ca:74:a0:
                    ef:65:c7:9b:17:9b:58:50:6b:5d:b0:14:24:3d:45:
                    99:d4:23:06:06:86:c8:19:16:1e:9f:ab:83:e3:5d:
                    31:ea:b8:0c:42:cb:97:3d:75:c7:31:d7:03:1b:b2:
                    b6:9d:8c:8c:de:b7:59:94:20:f2:bf:5b:50:1d:16:
                    ab:28:0a:db:c9:d2:b9:70:9a:f1:60:b6:20:57:67:
                    40:d4:45:a3:f7:0e:df:c2:ba:ca:cd:21:52:26:3c:
                    08:73:da:3b:76:49:21:e4:37:92:f3:50:1f:46:0b:
                    a5:78:e6:dd:f0:9b:1b:11:d0:00:7e:5a:bf:b0:91:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E1:36:EC:06:C0:78:96:25:CC:E1:25:7C:52:16:29:69:D3:DD:67
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:34:16:29:96:f9:c3:83:fb:00:9e:42:be:be:6a:8e:e6:7b:
         7d:21:ea:88:33:20:c8:3e:a7:e7:35:9a:7e:62:b4:ce:ec:b1:
         82:d8:fb:7b:c0:d6:c6:ef:60:0c:dd:e1:d4:47:58:0a:b2:84:
         1c:d9:94:f3:a0:9c:45:4e:32:da:6e:1d:b5:43:b1:c6:54:95:
         2a:63:d1:eb:b2:3d:cb:77:25:6c:63:d1:b7:7c:23:76:7e:0f:
         ef:1e:8d:8c:5f:32:7c:4d:c2:96:7c:14:c9:0e:eb:82:fa:6b:
         88:f2:8d:51:1c:36:3f:12:fe:81:b1:e4:50:50:f4:5c:90:e1:
         06:d4:89:4a:6a:a9:31:7e:dd:5c:2e:ca:e2:28:59:b2:09:33:
         a3:9d:48:30:17:0b:28:bf:64:4e:ee:b9:b7:e1:24:58:cc:90:
         c5:86:18:c4:ac:eb:fd:11:3e:55:49:d0:4c:bc:5d:c5:ea:47:
         fd:06:a3:c4:86:bb:2a:6c:e2:08:d1:89:c3:c4:3e:26:ac:27:
         e2:2f:34:0e:3a:2d:f7:ec:25:2d:19:e7:e8:28:1f:aa:ed:93:
         9b:a8:7e:bf:ce:20:a2:89:07:f0:17:f3:55:49:78:a9:75:20:
         b2:e6:e7:7b:e9:66:43:36:8a:2d:89:37:59:b4:2d:d1:0d:e2:
         32:de:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:01:13 2026 by rpki-client