Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa (raw, json)
Hash identifier:          iq1tn7Sxyse3ptVDmOL/V2Wr9otjyiJwZOPfoRiYjVw=
Subject key identifier:   95:24:E1:FC:CA:2D:30:EE:20:8D:1A:46:D6:F7:28:19:43:02:45:D2
Certificate issuer:       /CN=E052629FE592DB1F943C5FDDB47444A83C43817D
Certificate serial:       15F24C9424A203F9024963DC3CEAF237C82BB78E
Authority key identifier: E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa
Signing time:             Thu 16 Jul 2026 20:46:13 +0000
ROA not before:           Thu 16 Jul 2026 20:41:13 +0000
ROA not after:            Thu 15 Jul 2027 20:46:13 +0000
asID:                     265328
IP address blocks:        168.181.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl
                          rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f2:4c:94:24:a2:03:f9:02:49:63:dc:3c:ea:f2:37:c8:2b:b7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E052629FE592DB1F943C5FDDB47444A83C43817D
        Validity
            Not Before: Jul 16 20:41:13 2026 GMT
            Not After : Jul 15 20:46:13 2027 GMT
        Subject: CN=9524E1FCCA2D30EE208D1A46D6F72819430245D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:70:46:58:c9:f5:ee:79:7d:39:20:6b:22:
                    4f:2b:2a:f6:f4:1f:5c:bf:df:78:10:ab:d3:6b:0a:
                    67:0d:73:20:ac:35:05:87:e7:a5:d0:83:3c:79:c5:
                    69:4d:7b:a0:b7:14:86:47:ab:ea:83:c8:9d:7f:8b:
                    cd:bb:46:e8:6f:21:7f:19:63:c6:95:b5:d2:80:1f:
                    cf:ea:88:5b:58:3f:af:37:7e:6a:1d:5a:6a:32:41:
                    0d:db:3f:22:95:90:1f:58:bd:e4:98:72:c0:f5:b2:
                    4d:07:e8:8c:7f:37:b1:b6:8e:82:8b:a7:41:9b:8a:
                    ed:d6:fe:80:74:57:f0:d0:7a:41:a9:65:78:73:ec:
                    f1:43:3d:1c:c4:ee:65:19:60:4d:d6:74:ba:d4:93:
                    b6:5f:04:c0:7a:30:72:0f:1f:92:2c:a7:61:68:2c:
                    7d:39:da:e2:be:ec:e4:88:b3:2d:c5:59:c8:7f:af:
                    de:6f:d1:89:fa:3f:a9:00:4e:28:98:33:7d:90:cc:
                    8e:ff:08:bd:3c:61:5c:c1:96:a6:07:bc:a0:92:a0:
                    94:43:86:79:ad:ac:4f:a0:e1:72:5a:f9:66:1c:2d:
                    6b:24:6e:03:54:b8:2c:77:4e:11:02:97:ba:b3:2d:
                    0e:68:80:cc:79:2e:eb:92:16:1c:51:e1:5c:cb:0a:
                    d6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:24:E1:FC:CA:2D:30:EE:20:8D:1A:46:D6:F7:28:19:43:02:45:D2
            X509v3 Authority Key Identifier:
                keyid:E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32332d3233203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:0a:99:79:06:e6:d8:27:c8:66:01:e1:1f:b8:0f:22:09:fd:
         93:f9:5a:ec:11:10:bb:9b:f1:8b:ec:71:f8:67:4b:06:8c:6a:
         10:57:60:7a:92:67:d4:2f:96:92:2c:6b:c7:bd:7c:ef:1a:c1:
         a4:89:2a:2a:dd:87:21:80:1e:59:34:b5:33:93:d0:9c:8f:10:
         c4:8f:ac:dd:8c:9d:0d:48:fd:9e:5e:37:48:1a:a8:b4:07:7e:
         b1:c2:89:2e:11:07:3d:8b:d4:55:ec:6d:13:0c:5d:31:81:13:
         25:b6:e5:87:ba:14:df:e4:ac:60:f8:f3:27:69:1b:27:99:5d:
         40:f8:3c:a6:88:aa:7f:f2:ad:a0:7d:40:53:ba:28:bc:ee:38:
         f6:e4:73:2c:55:25:dd:80:b2:6d:e3:ed:ea:6e:58:85:ff:69:
         47:e6:12:ed:cb:42:cb:3f:1c:93:34:ff:1b:fd:3f:55:eb:15:
         2c:f3:31:80:33:a5:58:73:b7:21:41:1b:a9:29:3d:de:b9:5a:
         49:b0:6e:db:06:47:0f:24:7d:47:bb:58:8e:b2:5d:f6:bb:0f:
         9b:00:ff:2d:4f:f9:44:2e:60:80:28:2b:e4:96:86:eb:89:9e:
         4b:96:2a:3a:b8:7e:02:75:e2:2e:15:ce:3c:6f:cb:e6:f4:c9:
         2a:a7:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:02 2026 by rpki-client