Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          dXnkmRZaFyl5aYQVbwNSkMxbjwwMNvOut0JmN9Ljp3E=
Subject key identifier:   1B:C5:5C:A2:22:CE:D8:F0:28:F2:07:EB:15:AA:82:61:DB:86:00:D3
Certificate issuer:       /CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
Certificate serial:       52ABFBE7CDB5A15C9810331F92F9745F8E9503D4
Authority key identifier: B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa
Signing time:             Mon 28 Sep 2026 14:46:25 +0000
ROA not before:           Mon 28 Sep 2026 14:41:25 +0000
ROA not after:            Mon 27 Sep 2027 14:46:25 +0000
asID:                     265287
IP address blocks:        168.90.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 20:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:fb:e7:cd:b5:a1:5c:98:10:33:1f:92:f9:74:5f:8e:95:03:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
        Validity
            Not Before: Sep 28 14:41:25 2026 GMT
            Not After : Sep 27 14:46:25 2027 GMT
        Subject: CN=1BC55CA222CED8F028F207EB15AA8261DB8600D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ce:9d:c3:01:ae:f6:9f:b4:f7:f9:8e:88:9a:
                    66:2b:5f:88:97:e0:01:47:ff:cc:c8:93:90:58:fd:
                    91:c3:11:e8:3e:9c:e5:51:6a:6c:3b:9e:f1:26:3d:
                    69:c3:fa:e5:de:08:1f:ce:95:63:ee:01:1e:1e:3f:
                    83:0e:bd:b2:03:0c:b3:a1:55:e3:7a:d4:ec:70:a3:
                    e5:05:99:86:89:80:b0:56:04:1b:8e:08:60:11:a5:
                    d9:78:51:65:84:44:47:31:81:b0:d5:a9:7c:8b:0a:
                    45:ff:0d:0d:fc:07:42:a9:92:58:e2:ae:f7:c4:cd:
                    af:02:76:29:70:52:66:74:62:fd:2b:5b:dc:2e:09:
                    4c:5d:aa:c2:58:e6:82:bd:c9:55:b9:1c:a1:af:ec:
                    ae:c3:7b:52:b8:f4:bd:ac:6d:ea:f2:33:3b:29:99:
                    7b:df:8a:ab:89:b2:82:bb:a1:17:80:d8:5d:5d:52:
                    c2:9d:26:a7:2d:f6:5b:57:01:00:7a:26:09:cd:2f:
                    35:cd:d2:fa:fc:1b:da:ec:fa:4e:6a:fd:5c:e0:a9:
                    58:64:73:7a:3b:12:03:86:93:18:c6:4c:fc:c5:28:
                    a6:2b:5a:75:8a:01:e4:13:3d:54:0d:ea:d7:f8:21:
                    99:95:b4:29:1f:14:69:aa:ba:0f:9b:b0:ea:4a:18:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C5:5C:A2:22:CE:D8:F0:28:F2:07:EB:15:AA:82:61:DB:86:00:D3
            X509v3 Authority Key Identifier:
                keyid:B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133352e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:89:ee:a8:38:70:a2:c3:45:40:70:eb:14:be:6d:01:e3:bc:
         4d:e6:5c:6e:da:23:0c:41:85:db:71:46:e8:b7:dc:61:54:89:
         95:d0:54:30:be:82:68:fb:76:5e:e7:14:f0:55:c1:13:b7:b9:
         7c:3e:9a:f1:51:6a:6f:c9:0a:53:ae:7c:80:05:85:94:4c:51:
         78:24:a1:9b:74:a1:8f:79:6e:f0:c3:8d:f1:43:f5:9a:76:b4:
         a8:c2:b5:fb:5a:af:6b:13:d5:03:f4:30:a9:4a:53:17:4c:07:
         1b:be:fb:9d:e0:6c:ce:1b:0a:a2:96:8b:8b:02:fb:6c:7b:cb:
         45:a7:7d:a8:55:ad:46:74:a7:49:24:5f:87:76:23:8f:70:c8:
         8a:c4:24:1f:1d:45:90:41:99:c8:ab:9e:3c:d3:44:b7:e4:c5:
         cc:37:42:4f:b5:9c:b7:f2:6d:86:aa:af:b0:1c:df:cb:56:7d:
         db:94:2b:0d:f3:99:64:86:4f:1c:c9:8d:e4:0c:09:29:7b:0b:
         f3:40:30:07:6d:0f:78:4f:a6:93:b1:12:73:e9:e8:63:f6:ed:
         4a:89:67:bb:a4:99:ff:1e:88:ec:94:61:c0:5e:a5:31:1a:06:
         9e:68:18:fe:04:1d:8d:36:3f:8d:8e:79:c5:01:35:a3:ba:3a:
         20:71:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:17:57 2026 by rpki-client