Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3234203d3e20323633343833.roa
File:                     3136382e302e3136362e302f32332d3234203d3e20323633343833.roa (raw, json)
Hash identifier:          eeJGPiWYP2HHMIn6VCqL5f447gZnxKSqPdf/0kKSeFA=
Subject key identifier:   31:C5:53:41:C0:39:CD:22:4F:C2:96:CE:0C:29:4D:4A:A2:9C:4A:61
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       7313184114E66A975FF6F16921F9A63C46A55663
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3234203d3e20323633343833.roa
Signing time:             Tue 08 Sep 2026 16:10:22 +0000
ROA not before:           Tue 08 Sep 2026 16:05:22 +0000
ROA not after:            Tue 07 Sep 2027 16:10:22 +0000
asID:                     263483
IP address blocks:        168.0.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 12:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:13:18:41:14:e6:6a:97:5f:f6:f1:69:21:f9:a6:3c:46:a5:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Sep  8 16:05:22 2026 GMT
            Not After : Sep  7 16:10:22 2027 GMT
        Subject: CN=31C55341C039CD224FC296CE0C294D4AA29C4A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:05:20:86:f7:91:c9:3b:87:fe:eb:ac:2b:
                    7e:b2:b6:9e:bd:2b:c0:8c:ec:cd:b4:1e:66:bc:92:
                    d5:34:45:8e:35:de:ec:53:ba:26:79:26:66:c7:7e:
                    47:6a:df:1c:e4:e6:db:9e:1a:5e:6b:19:31:8d:62:
                    0d:fc:f1:90:31:f7:59:12:7b:ae:d9:5e:20:51:a0:
                    92:2e:c8:b9:c0:eb:95:55:71:0f:15:f7:fc:e6:52:
                    46:b7:47:9e:14:9c:b8:81:1d:96:ac:a5:c1:58:21:
                    d8:cd:db:e8:ad:b9:23:0a:a8:e9:bc:9e:7c:7e:3b:
                    5e:7c:1a:41:73:aa:85:83:29:5a:bb:70:df:7c:2e:
                    e8:c4:03:63:d1:1a:c7:49:2f:16:97:85:86:56:e3:
                    d1:9d:44:42:9d:61:ca:3a:87:69:9b:d4:95:1c:58:
                    92:f4:c5:4e:7a:47:60:23:75:b4:26:a5:8e:2a:53:
                    dd:67:8b:3c:aa:99:b7:bc:e7:7f:02:a2:2a:50:c8:
                    00:27:ef:14:2e:45:b1:9b:05:91:4f:35:74:19:24:
                    f0:5d:85:ca:90:2b:93:1a:fb:ed:e8:92:b2:0c:94:
                    7f:f9:f8:97:78:0c:01:e7:ea:19:3f:e2:2d:dd:e0:
                    19:eb:e5:49:17:43:57:f0:d1:7b:e8:0d:6e:dc:24:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C5:53:41:C0:39:CD:22:4F:C2:96:CE:0C:29:4D:4A:A2:9C:4A:61
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136362e302f32332d3234203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:2f:20:17:c9:d3:12:4b:c3:34:26:ba:6f:91:d6:82:5c:82:
         c7:ef:21:20:34:6f:11:87:f1:18:96:9e:90:b8:dc:4e:17:76:
         9d:dd:4a:fd:15:d4:59:34:df:4c:c5:f2:92:f1:54:79:0e:1a:
         da:22:f8:cc:50:6d:7b:f7:6f:e5:26:02:59:fd:43:fa:97:6c:
         5d:8f:10:11:69:1a:43:5a:18:d7:6a:f1:23:bf:a3:08:53:b2:
         ef:0e:80:d7:0f:56:5d:50:a7:75:7b:fa:57:1b:49:69:37:b9:
         c1:06:1e:90:9c:57:ac:4c:45:31:77:10:56:e8:83:d7:b9:01:
         b0:38:73:26:85:0c:dd:46:07:83:f1:de:e8:d4:21:4b:72:35:
         b5:83:cf:7c:5a:b8:52:39:9e:85:0e:1c:b7:53:9d:4c:42:c3:
         9b:db:9d:92:a5:8d:99:da:c1:f5:0c:3e:b0:65:70:29:2c:5c:
         44:53:de:fc:be:35:99:50:0f:3c:dd:a6:87:b0:a5:08:b3:19:
         9d:ac:23:ad:37:49:0a:96:d9:32:f8:f4:6e:41:76:ee:79:24:
         fc:56:d7:a9:b8:2c:8f:01:62:38:3e:9c:ad:dd:24:d1:b1:33:
         35:aa:5c:63:6b:74:0e:e9:60:20:63:db:63:f2:3c:93:cd:b1:
         4b:ad:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:49 2026 by rpki-client