Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36352e302f32342d3234203d3e20323635333238.roa
File:                     3136382e3138312e36352e302f32342d3234203d3e20323635333238.roa (raw, json)
Hash identifier:          gXqvW5kG7lQfELifcZW5xHjbVngsEMNX8NRBvwv90OU=
Subject key identifier:   2E:26:E1:C6:75:31:B2:41:6A:B1:05:32:4C:E0:A2:3D:1A:6D:A3:11
Certificate issuer:       /CN=E052629FE592DB1F943C5FDDB47444A83C43817D
Certificate serial:       3B77BD9574A3A2B33F8A6C4A407D1172F968754D
Authority key identifier: E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36352e302f32342d3234203d3e20323635333238.roa
Signing time:             Thu 16 Jul 2026 20:46:12 +0000
ROA not before:           Thu 16 Jul 2026 20:41:12 +0000
ROA not after:            Thu 15 Jul 2027 20:46:12 +0000
asID:                     265328
IP address blocks:        168.181.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl
                          rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:bd:95:74:a3:a2:b3:3f:8a:6c:4a:40:7d:11:72:f9:68:75:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E052629FE592DB1F943C5FDDB47444A83C43817D
        Validity
            Not Before: Jul 16 20:41:12 2026 GMT
            Not After : Jul 15 20:46:12 2027 GMT
        Subject: CN=2E26E1C67531B2416AB105324CE0A23D1A6DA311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:dc:fb:87:e1:5e:bd:94:71:a3:a3:e6:ad:
                    48:14:4e:12:56:b6:dc:58:e2:0e:1e:6a:2b:8e:03:
                    d8:9a:16:21:9b:8b:ba:f8:6b:38:83:57:25:16:ca:
                    57:3e:f2:1d:4d:20:de:b4:e8:bf:0d:57:e0:30:96:
                    78:21:e2:e1:26:9e:7f:dc:ee:40:7e:a2:79:40:3f:
                    8d:bc:12:20:e7:81:dd:92:56:c1:b8:1d:a6:54:59:
                    f8:66:d0:28:4f:7e:37:82:7d:a1:06:48:d7:0e:7a:
                    55:d6:25:3d:27:d7:14:4c:4a:d3:32:b2:2b:94:b8:
                    f2:fb:18:ae:91:03:de:48:22:f5:ae:ac:a7:d8:d6:
                    4c:14:e5:7c:10:59:d0:8f:54:db:2f:73:ea:26:2d:
                    86:40:87:d1:2f:5b:f7:9a:52:1c:61:c6:e4:d1:b6:
                    58:12:d2:d1:ea:da:28:65:58:60:71:11:da:2c:ad:
                    8d:47:78:02:7c:44:cf:e3:5a:26:91:e0:1f:d3:65:
                    d4:e2:b7:1c:c3:90:eb:d0:d9:50:60:97:35:a8:1d:
                    d9:0a:a5:7d:0f:6a:70:0f:2f:17:17:d2:31:f1:ca:
                    45:0f:4c:73:5f:f6:5a:a0:01:97:75:2b:60:fc:f6:
                    cc:88:5f:6a:49:e5:22:ac:cb:4f:08:59:7a:21:e2:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:26:E1:C6:75:31:B2:41:6A:B1:05:32:4C:E0:A2:3D:1A:6D:A3:11
            X509v3 Authority Key Identifier:
                keyid:E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36352e302f32342d3234203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:07:57:dc:e2:6e:a5:16:93:74:ae:40:b6:67:45:81:38:b5:
         4c:ee:2e:27:e8:c6:ef:cd:0c:b3:32:60:08:89:59:b1:30:0f:
         04:83:32:1d:e4:13:71:32:62:92:00:27:0f:c2:af:1e:00:12:
         b8:c6:f7:52:12:97:d1:b4:c1:3f:63:b9:f7:49:a8:80:fc:00:
         e0:54:87:79:0f:c6:4e:75:de:05:51:76:2f:16:f4:55:5f:2c:
         ff:61:a8:f6:2e:2b:fe:37:61:17:28:a6:7a:92:52:f7:f4:e3:
         dd:d6:60:b5:94:4f:f9:9c:ae:e3:e3:94:b3:f6:a3:4a:1c:7e:
         09:35:f3:71:23:6d:00:bf:9d:9a:54:5b:43:fa:93:11:64:4a:
         28:f5:3f:d5:34:e8:14:47:eb:4d:8b:bf:e4:ab:4e:23:c5:1f:
         d0:5a:31:c8:5a:d1:58:50:8b:5f:ff:98:4d:3d:e4:70:44:1e:
         40:1a:93:0c:8e:3a:d6:dd:7a:c4:7a:be:47:90:d8:03:86:0e:
         70:34:ff:9f:21:88:40:20:7f:91:a1:e7:bd:af:c7:e7:75:bd:
         19:7f:95:44:6f:87:75:bc:96:66:a0:8c:f2:b3:fc:ca:78:94:
         3b:63:bb:dc:ea:49:05:5b:d9:c6:6a:7d:1c:8e:b4:44:50:2e:
         03:ae:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:22 2026 by rpki-client