Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/3136382e3139352e302e302f32322d3234203d3e20323636363234.roa
File:                     3136382e3139352e302e302f32322d3234203d3e20323636363234.roa (raw, json)
Hash identifier:          ZWbs36Rntx9yyhA09POPKvYrUsJ2xY13XVGRm/VHCoU=
Subject key identifier:   73:BA:EC:A6:D2:9D:30:A5:DF:F6:1F:71:25:C7:E2:7C:3A:1D:03:5B
Certificate issuer:       /CN=B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C
Certificate serial:       7F8F22B471483BB5E145AC52D8FCA5F0C6E52BE7
Authority key identifier: B4:A1:60:F1:27:85:8F:F4:87:63:EF:D6:C2:C1:CA:1A:36:D8:AA:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/3136382e3139352e302e302f32322d3234203d3e20323636363234.roa
Signing time:             Thu 01 Oct 2026 14:24:25 +0000
ROA not before:           Thu 01 Oct 2026 14:19:25 +0000
ROA not after:            Thu 30 Sep 2027 14:24:25 +0000
asID:                     266624
IP address blocks:        168.195.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.crl
                          rsync://rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8f:22:b4:71:48:3b:b5:e1:45:ac:52:d8:fc:a5:f0:c6:e5:2b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C
        Validity
            Not Before: Oct  1 14:19:25 2026 GMT
            Not After : Sep 30 14:24:25 2027 GMT
        Subject: CN=73BAECA6D29D30A5DFF61F7125C7E27C3A1D035B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:a8:24:4f:e9:17:b5:fe:e1:11:1d:44:b1:
                    8c:5c:7c:68:1d:f8:2e:86:ea:0b:3f:d7:89:f3:5f:
                    f8:40:7a:e2:d4:06:bc:5d:50:f1:a7:ac:ea:41:dd:
                    e6:62:bd:95:9a:a9:90:e6:ea:2e:fe:2c:d4:7b:b7:
                    83:f5:cb:bc:f5:c3:02:b6:03:a3:78:d3:6e:12:83:
                    41:34:0d:4c:0d:4f:d1:23:08:70:19:7e:9b:49:38:
                    62:38:1d:82:33:44:14:66:6a:a7:c3:a2:c9:03:2d:
                    42:5d:ba:9d:94:ee:eb:88:e4:0e:c8:e9:8b:9f:0a:
                    83:85:38:95:dd:46:a7:6b:c8:f7:f1:7f:be:80:84:
                    fd:14:d5:94:ee:49:98:8a:2f:37:b9:b4:20:52:45:
                    01:ab:7f:ab:42:47:ff:c7:ea:7d:56:7c:ac:61:81:
                    87:17:e2:34:ef:6a:dc:9c:b2:5b:a1:92:00:b9:a9:
                    b6:1d:17:b6:06:3b:aa:3a:06:76:48:09:3b:1c:0c:
                    3e:61:5f:e5:ca:b1:73:e9:ef:bd:98:50:2f:70:34:
                    f7:e7:e4:7f:97:9f:90:22:2e:d9:7d:26:45:d2:6e:
                    41:93:37:b2:c9:d5:81:c4:b5:40:a3:49:d0:65:59:
                    e5:2e:a7:f2:72:1d:48:9e:32:4e:76:0e:98:22:96:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:EC:A6:D2:9D:30:A5:DF:F6:1F:71:25:C7:E2:7C:3A:1D:03:5B
            X509v3 Authority Key Identifier:
                keyid:B4:A1:60:F1:27:85:8F:F4:87:63:EF:D6:C2:C1:CA:1A:36:D8:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A160F127858FF48763EFD6C2C1CA1A36D8AA4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vP5jwxTWmbTahLLMTmRxkyXwUUusnjc637dGhChfFyu/0/3136382e3139352e302e302f32322d3234203d3e20323636363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:06:5f:df:d3:b8:cc:d4:56:b0:af:b1:90:cd:c9:68:f1:
         33:84:74:f4:28:9c:26:25:80:6f:27:6a:2b:85:27:6e:8f:53:
         86:85:4a:74:df:2c:40:05:d9:cb:ea:20:7e:46:e5:61:4c:11:
         63:21:ff:c6:1f:5f:3b:cb:74:a1:d9:48:c0:ca:c2:fa:14:8a:
         f7:a9:b3:c0:89:38:78:e7:6f:69:39:53:40:a6:c4:91:4c:d0:
         de:35:ce:ae:8b:cd:61:1a:1c:18:7a:4b:39:6b:63:94:59:80:
         da:46:b4:e9:9d:03:d5:c2:e5:a0:99:8e:d2:96:04:94:37:fc:
         05:70:a6:59:56:f6:5d:60:fb:f7:7b:b4:4d:5c:23:17:15:28:
         eb:a9:07:95:1e:8b:2b:03:49:98:0f:56:61:59:f0:db:19:07:
         37:f9:89:a5:6a:47:94:08:71:43:8c:20:94:3c:7c:96:c9:23:
         72:98:1b:13:18:2b:01:c3:f8:a9:b9:66:54:70:ce:9a:a0:37:
         f9:bd:c4:47:f3:b8:65:4c:15:74:a0:48:27:50:bf:fe:6f:b3:
         60:24:99:3f:f0:ea:4b:d9:e9:7d:af:f5:0c:2f:24:64:24:92:
         71:4b:c9:2a:63:ec:03:5a:64:7b:08:9a:40:4f:8a:55:a9:c0:
         b0:83:35:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:11:11 2026 by rpki-client