Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa
File:                     3136382e3138312e38302e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          zZ7QHrASOoubs9aVyAughx3jrBODIJDCF6L9FO+Xu2w=
Subject key identifier:   2B:CB:7F:70:58:00:AF:D3:6B:F5:69:3F:18:FE:0E:0E:31:70:5A:B9
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       56A3B06FF11C8CE9F21E0C4E9AE4E45773E4B95E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:58 +0000
ROA not before:           Sat 04 Jul 2026 13:38:58 +0000
ROA not after:            Sat 03 Jul 2027 13:43:58 +0000
asID:                     28201
IP address blocks:        168.181.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a3:b0:6f:f1:1c:8c:e9:f2:1e:0c:4e:9a:e4:e4:57:73:e4:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:58 2026 GMT
            Not After : Jul  3 13:43:58 2027 GMT
        Subject: CN=2BCB7F705800AFD36BF5693F18FE0E0E31705AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:22:26:cf:f4:f6:65:b9:a9:2b:23:94:3f:
                    1e:12:5f:eb:3a:eb:9b:61:12:f7:fa:35:71:89:45:
                    4e:a5:cc:66:c9:ed:ff:ad:9a:ad:28:1b:fb:04:72:
                    50:54:5c:54:78:2f:e8:e6:dd:f1:95:53:98:59:75:
                    41:21:32:5f:9f:d0:57:af:fe:74:ed:42:93:7a:ea:
                    36:a2:1e:f4:39:3f:c9:65:18:eb:a7:b1:c3:5b:d2:
                    70:30:b4:7f:74:de:a8:0f:c5:2c:54:45:4f:bd:d1:
                    05:c7:95:0c:85:5b:10:20:82:5b:6c:83:d4:7e:91:
                    3a:33:26:f8:9e:07:92:12:11:f1:d5:5a:15:46:18:
                    14:78:34:b4:9c:48:d8:4e:27:e3:75:9a:df:94:84:
                    6f:b4:c6:e8:22:1c:07:f3:cc:20:c4:c4:58:04:b8:
                    96:8a:b2:9f:cd:9e:4c:52:7a:4d:a2:44:50:e0:7d:
                    41:ba:fd:d4:c8:09:b9:5c:49:ae:ae:a0:c4:9b:34:
                    6d:b6:28:62:21:d1:2e:e0:c5:ab:ec:ea:c5:87:c6:
                    b7:8d:11:ad:47:98:a5:16:ed:85:9e:fb:21:13:8b:
                    d9:1c:97:dc:74:ab:e5:0e:55:3c:99:08:2c:70:08:
                    aa:44:74:2a:ee:61:15:6b:4e:30:06:48:18:ce:ae:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CB:7F:70:58:00:AF:D3:6B:F5:69:3F:18:FE:0E:0E:31:70:5A:B9
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3138312e38302e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:f0:d4:82:b1:5c:2c:9c:db:eb:a4:ce:0f:7b:5c:3f:b1:
         dc:e5:03:43:bd:0d:a2:21:a5:6c:ac:83:df:20:9c:07:a6:2c:
         7f:f9:ff:9d:ac:28:ce:43:d6:2c:16:df:da:4f:a6:fc:26:75:
         91:e1:7e:d7:06:ab:34:f0:00:25:f5:15:24:f6:ab:5d:27:9a:
         05:f8:bb:52:21:43:a7:5b:61:c8:8f:6b:66:01:6c:77:4a:b8:
         64:b2:8a:d4:0c:e8:91:35:a2:8f:f9:33:10:54:e6:03:82:6e:
         9c:9f:0d:bb:4a:73:e1:2b:7e:d2:94:12:5b:08:d7:1d:2d:79:
         13:cf:b9:a8:98:d8:0c:b4:c8:cf:50:75:60:63:55:18:66:94:
         c6:3e:7b:e7:89:cf:eb:7a:b0:2c:a0:b7:fc:0f:0e:5a:a7:57:
         27:f8:30:ff:73:92:43:f6:71:c2:5e:ff:6f:33:7d:ed:3f:80:
         18:42:75:b0:12:1f:9b:73:42:55:87:15:f5:2c:f0:90:89:3a:
         f6:eb:07:7b:55:ec:4c:af:10:ea:10:56:7e:79:44:5a:9d:43:
         6f:91:c3:bc:69:45:1d:23:83:56:89:d9:1c:b8:b5:f1:7b:ba:
         7e:17:91:cf:fc:ce:d5:4d:8d:22:25:61:2a:6a:b0:92:1c:b5:
         c6:5c:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:48:31 2026 by rpki-client