Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3232302e302f32322d3232203d3e20323633333430.roa
File:                     3139312e33362e3232302e302f32322d3232203d3e20323633333430.roa (raw, json)
Hash identifier:          uHe4g2x26WsObMqlvrTqKN49lysEul6eTxQDDt4323o=
Subject key identifier:   D0:97:34:D1:32:59:A7:D0:44:42:EB:03:D6:97:74:07:16:69:2A:70
Certificate issuer:       /CN=36500E1FB4E214E103051D00FF4050AF888628A1
Certificate serial:       12B22A561ED474335642C9BD1DB55CBD46E8BC46
Authority key identifier: 36:50:0E:1F:B4:E2:14:E1:03:05:1D:00:FF:40:50:AF:88:86:28:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3232302e302f32322d3232203d3e20323633333430.roa
Signing time:             Thu 16 Jul 2026 15:23:39 +0000
ROA not before:           Thu 16 Jul 2026 15:18:39 +0000
ROA not after:            Thu 15 Jul 2027 15:23:39 +0000
asID:                     263340
IP address blocks:        191.36.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.crl
                          rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 26 Jul 2026 02:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b2:2a:56:1e:d4:74:33:56:42:c9:bd:1d:b5:5c:bd:46:e8:bc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36500E1FB4E214E103051D00FF4050AF888628A1
        Validity
            Not Before: Jul 16 15:18:39 2026 GMT
            Not After : Jul 15 15:23:39 2027 GMT
        Subject: CN=D09734D13259A7D04442EB03D697740716692A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:a9:ca:1b:b0:e6:6e:28:6e:6d:54:db:87:
                    db:61:4e:bf:d2:25:87:fe:61:03:b6:d8:7b:5d:2e:
                    ee:8e:18:b4:5d:10:b9:32:d7:d7:ca:3e:36:ee:a9:
                    aa:47:70:35:94:79:96:3d:7f:48:cd:83:63:54:17:
                    39:03:c8:59:40:8c:90:c3:e1:23:c7:d0:4c:0e:65:
                    8e:d2:d8:5f:62:15:9e:34:90:c7:51:99:c3:e8:ea:
                    09:84:5a:48:aa:42:f7:6e:41:d7:b1:cc:1f:db:fd:
                    3d:f2:79:f8:ab:29:cb:f3:c3:e4:3e:48:0e:e3:36:
                    9d:20:64:6d:a5:18:52:26:6b:f5:a0:2a:99:51:d7:
                    eb:e2:77:55:15:60:69:e9:43:13:28:32:5b:a8:1a:
                    e4:86:f2:90:2c:fe:9f:dd:d8:e1:24:8d:4d:46:47:
                    ec:3c:0f:ac:2d:d6:30:5c:92:37:55:a8:42:0a:15:
                    01:eb:64:b9:25:ff:29:3b:0f:f0:a6:7d:e6:fa:2c:
                    07:1a:ad:f0:dd:cf:94:44:ad:0e:fb:e6:f7:4f:31:
                    4e:09:45:92:b9:34:68:26:36:45:1e:e4:bd:83:b3:
                    43:1f:db:24:e9:fa:cd:e3:5d:0a:35:0c:79:98:bb:
                    3f:8a:22:aa:53:01:19:72:e3:5d:9c:42:c7:ac:06:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:97:34:D1:32:59:A7:D0:44:42:EB:03:D6:97:74:07:16:69:2A:70
            X509v3 Authority Key Identifier:
                keyid:36:50:0E:1F:B4:E2:14:E1:03:05:1D:00:FF:40:50:AF:88:86:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3232302e302f32322d3232203d3e20323633333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:80:8d:f8:04:98:be:05:4f:7c:e0:4a:f9:54:97:85:8c:1d:
         d1:5b:82:83:cf:9b:5e:85:a9:88:da:0d:69:2c:de:a0:34:38:
         9c:7a:af:78:d2:c3:65:1d:e8:f4:98:f4:21:f7:74:53:7a:48:
         e9:80:5b:a3:9a:19:bc:a5:16:ed:62:08:c0:07:2d:85:87:05:
         71:af:08:c8:6d:7c:a7:90:81:f4:d1:af:20:8c:6e:99:a7:c6:
         b5:cd:96:48:51:de:d6:03:b7:e7:1f:ed:51:6f:46:a3:20:5c:
         13:6c:f3:a9:f4:91:31:fa:36:66:50:9f:d7:84:70:b0:45:f2:
         98:b1:2f:81:e3:77:a2:c7:93:34:73:a8:0d:ad:d9:90:3a:d8:
         23:c6:5c:7c:48:53:4d:5d:f0:0c:6c:da:13:01:ec:3b:46:71:
         06:7c:a9:00:48:fb:21:4c:38:5b:f3:e3:52:26:19:9d:57:5d:
         e1:3f:ec:fd:bc:27:1e:48:0d:c0:12:08:53:83:7c:a5:9a:60:
         c2:d3:d5:82:bf:83:2c:12:05:06:42:ab:e9:d4:89:d4:20:25:
         8e:90:09:2f:28:e4:f8:5f:17:06:81:00:18:59:e2:20:66:90:
         d1:54:0e:15:4c:63:12:28:2e:52:bb:65:3e:ec:f0:7e:1a:c9:
         2c:cd:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:40:01 2026 by rpki-client