Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3330203d3e20323634393236.roa
File:                     3136382e3232382e3137362e302f32322d3330203d3e20323634393236.roa (raw, json)
Hash identifier:          AL64Z48lETm7Zd5y+hjS8i+X+hvQ66sVirIIh6HVbZU=
Subject key identifier:   29:56:D8:52:84:7B:1C:7D:CA:61:AA:DE:06:EC:75:73:46:00:5D:25
Certificate issuer:       /CN=CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289
Certificate serial:       56E593185156AABDC62934AE63D9D26069277D70
Authority key identifier: CA:9C:6D:74:B3:E7:A7:08:FD:26:BE:4A:3F:B9:FF:95:E4:33:02:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3330203d3e20323634393236.roa
Signing time:             Fri 11 Sep 2026 19:44:29 +0000
ROA not before:           Fri 11 Sep 2026 19:39:29 +0000
ROA not after:            Fri 10 Sep 2027 19:44:29 +0000
asID:                     264926
IP address blocks:        168.228.176.0/22 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.crl
                          rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e5:93:18:51:56:aa:bd:c6:29:34:ae:63:d9:d2:60:69:27:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289
        Validity
            Not Before: Sep 11 19:39:29 2026 GMT
            Not After : Sep 10 19:44:29 2027 GMT
        Subject: CN=2956D852847B1C7DCA61AADE06EC757346005D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:30:60:1d:56:c5:93:a2:b1:7e:14:82:4b:
                    12:47:e4:b7:64:85:a5:78:f6:26:e3:ff:2f:d6:c8:
                    b9:6d:53:cb:61:7e:ee:0c:75:f8:02:be:f3:df:1b:
                    1e:70:46:0d:10:27:f1:a9:d5:04:bd:d6:45:d6:10:
                    b2:b0:ae:a5:d2:35:12:ce:42:b3:10:55:31:fb:e0:
                    4c:0b:ba:cd:aa:24:61:64:12:02:9f:eb:77:f8:2d:
                    22:cb:44:ff:37:92:8b:34:62:7e:da:86:8e:01:66:
                    a2:aa:5c:3e:c5:e8:f4:66:87:fb:6f:90:89:db:44:
                    fb:6c:57:01:16:36:6b:16:6e:05:f0:ac:23:ed:b3:
                    0f:a7:28:5c:47:bb:d4:ed:6f:b9:a1:6a:96:1c:eb:
                    ab:cc:f9:a3:d8:ca:44:44:80:10:fb:42:4f:58:21:
                    a0:ee:d0:e2:c5:86:d0:3a:4a:71:56:f8:90:49:6c:
                    d5:2e:d4:40:d9:f0:a6:3b:e1:cc:16:a5:64:d9:50:
                    81:e7:a8:06:be:fb:08:ce:c5:25:89:c1:7e:25:d7:
                    32:82:82:39:33:02:e7:0d:7b:b9:db:16:61:9d:ec:
                    36:d7:7a:23:b8:1d:d1:0c:de:ae:30:e9:87:84:ea:
                    61:04:8d:6f:73:27:53:ed:1c:9b:ea:4f:65:a7:eb:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:D8:52:84:7B:1C:7D:CA:61:AA:DE:06:EC:75:73:46:00:5D:25
            X509v3 Authority Key Identifier:
                keyid:CA:9C:6D:74:B3:E7:A7:08:FD:26:BE:4A:3F:B9:FF:95:E4:33:02:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9C6D74B3E7A708FD26BE4A3FB9FF95E4330289.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/3136382e3232382e3137362e302f32322d3330203d3e20323634393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:f3:67:14:76:b3:9b:43:d3:a4:9a:a1:9c:f1:41:6a:13:
         e6:7a:57:e0:0a:09:62:8c:e6:b8:d7:c9:81:ad:1b:cb:97:5c:
         76:c1:ce:8c:dd:29:ce:1c:22:f3:0c:b2:f6:f4:e7:a9:83:80:
         17:ba:f5:98:98:33:a6:06:aa:2d:01:a2:8c:45:d0:d5:ab:15:
         b1:01:3d:9d:30:57:f7:0f:09:a9:d4:d0:ac:e5:08:c4:b9:15:
         73:c2:cd:5f:9d:6b:3a:7c:d3:9d:c0:30:bf:2a:3a:de:06:5c:
         db:46:cb:26:6a:de:8d:20:0b:b0:f5:6f:fa:19:45:16:11:f4:
         ab:ac:62:e7:3e:f5:ab:82:2a:61:fc:2d:cc:52:b6:73:65:84:
         ac:2f:e2:4b:01:4c:33:9e:f6:ba:ba:02:29:13:ad:b1:1a:3e:
         63:e4:f2:1c:38:71:ba:20:03:7c:b7:07:03:60:8b:ee:a5:a8:
         b0:4e:4d:28:ed:85:33:05:92:df:35:46:85:b3:0b:79:30:bb:
         2a:c1:c3:51:b3:7c:a2:bd:f2:1b:f8:9d:d3:35:e4:41:57:48:
         51:a0:c8:78:e6:74:99:71:52:88:85:d0:b8:fd:cc:14:c6:af:
         6e:39:68:39:16:9d:60:ad:1f:1d:72:f2:c9:b2:16:98:71:7a:
         14:5d:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:55:24 2026 by rpki-client