Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (raw, json)
Hash identifier:          6ICcPOuA2IGishFZg4i8fYNy7r8fywdjwZm3GFrbbcs=
Subject key identifier:   9C:ED:52:08:A3:93:60:0B:6B:92:E1:11:09:96:4D:B8:74:EE:13:7E
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       089AEE9C79F485095AC578CCD246B103A9293445
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa
Signing time:             Mon 07 Sep 2026 18:21:45 +0000
ROA not before:           Mon 07 Sep 2026 18:16:45 +0000
ROA not after:            Mon 06 Sep 2027 18:21:45 +0000
asID:                     263483
IP address blocks:        168.0.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 12:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9a:ee:9c:79:f4:85:09:5a:c5:78:cc:d2:46:b1:03:a9:29:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Sep  7 18:16:45 2026 GMT
            Not After : Sep  6 18:21:45 2027 GMT
        Subject: CN=9CED5208A393600B6B92E11109964DB874EE137E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:71:88:af:d8:37:4e:01:0c:ee:9b:f8:8e:
                    bd:48:ea:66:0a:a3:58:c4:4f:5b:22:2a:c5:6d:54:
                    80:a8:e4:40:69:c1:34:a8:df:72:d1:eb:b6:47:dd:
                    57:af:bc:7c:e4:a5:51:7f:a7:27:ac:ab:d8:a9:df:
                    30:83:49:9f:f1:88:eb:46:2c:7f:e6:72:8a:97:c7:
                    ce:0c:0d:7e:f3:27:46:2e:0c:33:2f:26:52:16:38:
                    cf:d2:c2:1a:50:47:7a:66:7e:c3:28:b4:33:b4:1c:
                    10:d2:67:59:29:d3:54:a7:c0:9b:3f:4a:85:a5:1b:
                    ce:34:32:02:0d:5a:be:49:a2:10:7f:dd:d5:1e:bd:
                    ab:aa:ab:0a:c9:37:d4:41:12:dc:85:2b:88:22:bb:
                    a2:c7:86:6d:ae:b7:dc:16:a0:4f:f5:98:16:01:95:
                    76:9c:0f:61:3e:9b:a1:44:2c:5e:05:1b:b3:39:fd:
                    41:a2:4b:a7:26:0e:45:ca:e8:fe:f8:e6:b9:a1:4d:
                    35:90:02:8e:aa:40:7a:38:06:15:64:63:5f:8b:ba:
                    46:9d:77:e5:07:01:46:f0:84:a6:38:4c:47:de:bd:
                    80:36:fb:e4:6d:c1:68:8f:2d:41:f4:83:34:d4:69:
                    d2:27:88:a1:a1:de:19:f6:c5:d4:44:e9:15:a5:4d:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:ED:52:08:A3:93:60:0B:6B:92:E1:11:09:96:4D:B8:74:EE:13:7E
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:79:d8:58:60:0d:1a:ce:89:a1:38:3a:6b:7c:2b:46:70:
         05:0a:4d:12:fa:4d:54:75:51:8c:dc:4e:c8:7c:ea:fe:fb:63:
         09:01:d8:0b:d3:f9:bf:b0:96:67:06:0a:56:22:a6:57:0e:fc:
         5c:42:a0:6f:67:0c:e8:dd:7f:69:23:5a:99:bb:34:c3:25:f7:
         30:40:4e:3e:4a:54:7e:9c:90:56:f5:5d:5c:c6:40:0b:07:dd:
         30:ff:dd:a0:77:b8:1e:5d:c6:75:88:de:14:be:52:f8:85:ca:
         84:3c:d0:6f:4b:1a:a9:7c:84:f8:4f:bd:f9:5d:6e:b2:ab:5e:
         6c:77:73:c2:85:5f:db:6e:d2:a5:86:99:5a:e5:71:a5:47:cf:
         af:bf:fd:f8:16:ff:c9:ac:bd:ab:5e:ec:64:fe:21:4d:87:72:
         10:7a:e0:8b:6c:13:5b:d5:8c:29:a0:d0:cb:bf:9e:5e:ca:90:
         46:2d:87:1b:c8:df:a3:de:27:de:14:05:59:d7:f4:02:8e:e9:
         22:91:3c:00:8e:72:e1:be:46:60:27:99:dc:df:81:94:29:71:
         cb:85:2f:fa:87:05:a5:52:36:3c:c4:a9:a2:ba:1c:30:60:9e:
         a8:31:c7:53:91:f4:b6:b9:38:a0:fd:25:42:e6:97:3c:0c:c9:
         3c:97:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:21:58 2026 by rpki-client