Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa
File:                     3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          4lknGE9V+/VbjTHyLA8NfmPYpvmoSo19EZlVziNud8k=
Subject key identifier:   9F:09:24:47:2B:37:1C:D9:F9:13:E5:3A:44:EC:45:AE:46:A4:A8:75
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       4BD92A4E6F7D88B134D70A63909800F728B10982
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:50 +0000
ROA not before:           Mon 21 Sep 2026 19:43:50 +0000
ROA not after:            Mon 20 Sep 2027 19:48:50 +0000
asID:                     263880
IP address blocks:        168.205.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 19:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:2a:4e:6f:7d:88:b1:34:d7:0a:63:90:98:00:f7:28:b1:09:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:50 2026 GMT
            Not After : Sep 20 19:48:50 2027 GMT
        Subject: CN=9F0924472B371CD9F913E53A44EC45AE46A4A875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4e:1d:dc:41:69:b7:c5:23:24:25:58:79:66:
                    e9:3e:6d:35:65:b6:6c:4a:7c:f5:79:7d:a5:79:67:
                    41:c3:a6:25:d6:9e:b0:e1:e6:c3:03:ba:f8:b3:9b:
                    47:b3:ab:1d:30:96:87:3c:fb:4a:ac:e2:ec:22:0f:
                    67:10:35:f1:9a:69:f7:03:51:6d:7b:6d:26:4c:dd:
                    df:5a:a0:8f:43:ec:ab:7a:35:ad:6e:74:d4:9d:82:
                    76:95:10:e4:a2:0c:55:3d:b7:20:db:4a:e4:cf:e8:
                    9d:4d:8e:db:53:60:3a:a3:2e:cd:34:bc:4d:2e:84:
                    58:a5:74:4a:ab:3d:d7:a5:2b:f6:cb:1b:b9:68:6b:
                    87:28:f7:29:79:3e:95:30:b7:a5:08:61:40:9d:06:
                    fd:2b:ad:40:f1:61:ca:3e:a1:17:a9:2b:c2:e0:d9:
                    76:d5:86:00:e0:fd:f7:4b:26:4d:2d:2d:a3:de:24:
                    ce:05:25:34:aa:0b:d3:76:69:b4:4d:b6:e4:4d:89:
                    df:db:5a:1b:0c:64:d4:54:24:b9:8a:dc:17:f9:1d:
                    60:c7:a8:94:40:d3:3e:79:cb:1c:81:9b:1e:95:d2:
                    c6:b0:50:54:a5:df:4a:67:46:13:b1:f1:4a:a2:11:
                    56:d4:5a:0e:68:b6:8a:df:63:d6:d4:98:a1:b4:25:
                    ab:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:09:24:47:2B:37:1C:D9:F9:13:E5:3A:44:EC:45:AE:46:A4:A8:75
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3230352e33362e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:66:26:49:db:24:c7:52:3e:f6:97:42:a3:8c:5e:72:31:
         e1:7c:7e:14:33:24:1f:5f:6e:b1:94:ca:f2:a3:8a:22:6b:94:
         e7:82:2b:2f:55:d1:12:a1:97:c8:ba:b1:ed:30:ca:bc:ed:09:
         3b:47:33:e0:0d:d1:e2:85:5f:62:9e:ed:b7:8d:39:04:84:d0:
         6a:aa:34:a9:2a:a6:ea:be:b5:dc:8e:1b:e6:18:73:7d:92:31:
         29:a4:07:f2:51:f0:b0:e5:27:71:04:61:b6:13:32:e8:79:87:
         e1:fc:6d:27:21:10:72:63:92:82:2a:ce:08:bb:7c:64:50:63:
         0f:2f:ef:32:fe:a0:1f:35:a0:e2:d4:c2:62:9a:8e:06:7d:b8:
         d0:4a:c6:81:7d:58:dc:95:32:89:fe:d1:c4:6a:bc:17:b6:cc:
         e7:05:13:d7:73:9f:a7:99:57:bb:b5:ab:07:da:c8:b7:a7:d5:
         82:4b:36:44:94:ea:87:72:c7:47:f8:37:c9:2e:4d:eb:36:88:
         1c:c3:c2:80:0d:11:3f:a4:c3:c5:fb:79:22:c4:9f:90:48:18:
         df:b2:e1:91:79:c6:83:66:0e:43:27:f1:4a:5f:5f:0e:2d:0d:
         8e:82:3e:37:09:e5:45:ce:bb:04:ec:d7:ca:01:34:a1:33:4e:
         f5:2d:ba:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----