Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
File:                     3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa (raw, json)
Hash identifier:          JR4xW8/jqE4qHpgrLJCYQdS9Gj44GVGARfYgfd1Ncj8=
Subject key identifier:   D7:A6:E3:82:6E:35:E5:60:F3:57:20:5A:81:58:D7:FB:F9:EF:01:E8
Certificate issuer:       /CN=F89015ACAD83687DD07E72AE4660DC92145645EC
Certificate serial:       618238932AF7D40346EBEE049372A406B471B2C6
Authority key identifier: F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa
Signing time:             Mon 05 Oct 2026 13:08:06 +0000
ROA not before:           Mon 05 Oct 2026 13:03:06 +0000
ROA not after:            Mon 04 Oct 2027 13:08:06 +0000
asID:                     263360
IP address blocks:        191.37.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 23:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:82:38:93:2a:f7:d4:03:46:eb:ee:04:93:72:a4:06:b4:71:b2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89015ACAD83687DD07E72AE4660DC92145645EC
        Validity
            Not Before: Oct  5 13:03:06 2026 GMT
            Not After : Oct  4 13:08:06 2027 GMT
        Subject: CN=D7A6E3826E35E560F357205A8158D7FBF9EF01E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:22:6c:b3:d2:b5:58:d5:8b:30:be:8e:46:db:
                    8f:94:bf:84:c8:14:bd:ba:62:0f:e3:71:1c:c2:62:
                    4f:a2:b4:11:40:2b:39:9d:35:fc:68:2c:c3:6e:bc:
                    5d:f5:6f:f4:0e:29:f5:95:69:32:4d:3b:ad:49:0e:
                    12:2f:98:d9:70:3f:96:89:fb:51:f3:f0:98:e9:f2:
                    85:02:10:1c:5a:1e:a8:05:33:f9:ba:05:85:1c:76:
                    95:1f:84:1a:fd:16:f3:34:b7:89:ff:2e:00:dd:28:
                    9e:02:64:42:f4:03:10:ba:dd:a7:9d:29:6e:c2:5c:
                    4f:28:72:0b:4b:48:d2:25:25:74:31:1b:d0:9b:26:
                    db:6a:8d:8e:60:dc:b7:b8:fd:f3:9a:5a:99:83:63:
                    e3:d0:8b:64:45:c5:d6:fd:36:03:9a:55:c7:cb:11:
                    ba:54:60:b6:c3:d0:76:8b:8c:20:32:3d:9d:ff:4c:
                    cf:5a:66:31:ea:61:85:99:9a:bc:9b:3b:0b:8b:b2:
                    8f:34:b5:bc:20:2d:91:99:7e:b6:ca:34:fb:9f:67:
                    ec:c5:7b:68:7d:bd:01:f3:51:52:f7:e8:89:5f:9c:
                    b4:97:c2:8b:f7:e9:9e:0d:63:82:8a:ca:17:14:99:
                    67:d5:1b:16:b5:6b:55:a9:fa:d1:46:8c:9a:dc:35:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:E3:82:6E:35:E5:60:F3:57:20:5A:81:58:D7:FB:F9:EF:01:E8
            X509v3 Authority Key Identifier:
                keyid:F8:90:15:AC:AD:83:68:7D:D0:7E:72:AE:46:60:DC:92:14:56:45:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/F89015ACAD83687DD07E72AE4660DC92145645EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F89015ACAD83687DD07E72AE4660DC92145645EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/3139312e33372e3133362e302f32332d3233203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:78:44:20:06:64:42:db:fa:ab:b4:d4:f4:7c:b5:4c:6b:02:
         88:93:62:65:46:33:c7:94:bf:27:b6:46:40:78:10:14:79:ab:
         68:c0:7c:d6:0e:1c:89:94:7a:2e:f0:a6:98:cd:52:29:f1:25:
         87:b9:1f:06:8f:63:e5:62:c8:f1:e4:7c:b8:33:18:59:bb:e5:
         26:0b:ba:4c:2a:3f:b4:35:23:92:4e:6a:21:37:95:29:34:ab:
         4f:c7:a1:ed:d0:ff:3e:6d:4d:18:76:4d:b5:85:56:7b:6b:e4:
         c5:d9:2a:10:e1:c9:92:62:a7:9c:10:e3:8d:dd:82:3b:29:a6:
         ec:03:14:c4:da:87:96:79:b2:1e:1a:cf:1d:75:d7:65:9f:da:
         c4:22:bc:36:2f:09:12:33:55:a0:f9:04:63:c3:08:8c:64:29:
         2f:e9:12:ae:43:ba:b5:22:fe:60:59:01:46:eb:1f:b7:31:cb:
         8d:03:0e:26:31:fd:d7:da:03:2e:b5:50:e9:83:76:f3:65:1b:
         9a:58:10:a4:0b:fa:b5:ac:2a:dc:e6:61:c8:84:ac:26:ae:f9:
         55:8f:d3:a4:4a:11:2d:80:c9:97:65:b3:28:60:54:05:33:f4:
         11:32:ed:68:80:23:20:78:41:91:80:15:b1:3a:5d:c4:4f:e6:
         4a:4a:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:44:52 2026 by rpki-client