Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          fDphbiVUWv/0jX404dR+wir4+CZVslWdhB1LKdnc1dc=
Subject key identifier:   04:1D:03:64:57:A5:26:64:94:05:D3:3D:77:F3:73:B7:C5:C4:C3:35
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       4746350A3C659A412E6F1889D0327D2BCB96ADD2
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:33 +0000
ROA not before:           Tue 27 Oct 2026 15:41:33 +0000
ROA not after:            Tue 26 Oct 2027 15:46:33 +0000
asID:                     267513
IP address blocks:        186.251.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:46:35:0a:3c:65:9a:41:2e:6f:18:89:d0:32:7d:2b:cb:96:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:33 2026 GMT
            Not After : Oct 26 15:46:33 2027 GMT
        Subject: CN=041D036457A526649405D33D77F373B7C5C4C335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:b2:c1:c8:41:c7:19:57:a7:fb:c1:3b:ce:
                    c9:68:32:f5:59:47:e4:b6:dd:c6:dc:26:66:77:9e:
                    34:30:f1:ca:3d:dd:10:14:30:3c:8d:af:d9:74:0e:
                    06:5a:71:4b:48:52:d5:d6:0f:c8:13:d3:35:d5:f9:
                    23:a9:22:58:55:1a:97:5e:32:6e:b2:d5:cd:00:a3:
                    01:7b:4c:d8:f0:e4:5b:81:ff:39:ad:0b:18:9b:1d:
                    af:f6:97:6c:2b:cd:41:ca:03:b2:8f:7e:5e:82:ba:
                    be:1a:99:9e:0d:0d:5b:e9:da:22:46:ea:9f:09:83:
                    ac:0f:15:ec:57:f5:5e:e9:26:77:3a:5a:d7:fa:f8:
                    d7:49:64:dd:64:5a:94:b2:0d:4e:d1:11:c2:d3:19:
                    f3:6b:68:6b:95:85:e0:5e:ca:dd:ae:0f:81:49:e8:
                    0b:97:13:6e:e0:cd:90:9e:cf:01:ba:d1:7a:62:8f:
                    1f:d6:dd:d1:35:ac:37:9e:d2:cf:86:27:6b:b1:57:
                    8f:74:11:d2:23:c5:b6:ac:91:65:85:d9:71:ba:de:
                    76:81:d6:82:63:1e:14:e5:ef:65:fd:e4:ea:13:1a:
                    b8:1f:39:26:e6:ce:97:b7:58:66:bf:f1:a3:83:fa:
                    cf:de:f0:12:be:9d:b4:fe:c3:93:0c:4f:de:45:c9:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1D:03:64:57:A5:26:64:94:05:D3:3D:77:F3:73:B7:C5:C4:C3:35
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235342e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:23:54:fc:d5:7d:c4:06:99:36:a7:01:2f:2c:72:8d:75:44:
         3c:ae:27:da:2a:ec:9f:e3:68:b8:d3:42:36:84:81:6c:41:af:
         09:ef:d9:d3:58:9d:03:31:e5:4a:a4:cd:d7:bc:82:7f:bc:91:
         fa:7e:8f:68:24:43:4b:f9:01:2b:58:aa:c0:9e:6e:95:a2:67:
         9e:f3:e8:b5:f8:80:39:99:42:01:a6:4a:bb:3a:37:a5:16:f9:
         dd:0b:0f:f2:a3:86:3f:65:4a:20:56:78:fc:7f:68:98:65:c7:
         f4:4c:32:9b:42:df:c5:0e:49:61:87:6a:c1:02:da:91:a8:c3:
         7d:df:c2:81:d3:d2:7d:d3:fe:c5:ba:7c:ab:c5:96:11:ce:dd:
         9d:3b:fb:b0:d0:38:fe:09:f4:87:99:41:ba:d1:60:f7:d5:19:
         df:fe:6d:ca:ac:8c:17:5e:d0:da:46:9a:8e:cc:96:a1:e4:01:
         02:9b:54:91:17:9d:e0:dc:8b:c1:be:07:25:9a:ff:ba:ce:68:
         c6:97:3e:ee:00:67:45:bd:fd:1c:0b:6c:cf:43:89:79:64:42:
         fa:2b:02:e6:c0:fd:54:55:80:0c:2a:e2:88:45:1b:9d:1d:fa:
         9a:18:65:1b:56:7b:5a:b6:33:b1:36:47:4c:0e:96:4c:6c:46:
         45:fe:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 02:04:07 2026 by rpki-client