Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa
File:                     3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa (raw, json)
Hash identifier:          taCfvvJ6rqu4taBznQcYYK6VXxKONTLJpnEut9spyfw=
Subject key identifier:   B9:E4:15:89:22:0C:21:17:C0:A9:36:95:C8:89:4C:C4:37:CB:8E:1A
Certificate issuer:       /CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
Certificate serial:       2C620C256D766B3EB4E67A1E8CAC836F8AC564A7
Authority key identifier: 36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa
Signing time:             Wed 02 Sep 2026 02:00:00 +0000
ROA not before:           Wed 02 Sep 2026 01:55:00 +0000
ROA not after:            Wed 01 Sep 2027 02:00:00 +0000
asID:                     263635
IP address blocks:        170.254.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl
                          rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:62:0c:25:6d:76:6b:3e:b4:e6:7a:1e:8c:ac:83:6f:8a:c5:64:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368148FC0FF010466206F11D6AC1C58A7CBD3AE9
        Validity
            Not Before: Sep  2 01:55:00 2026 GMT
            Not After : Sep  1 02:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:8c:d7:b8:b2:e9:a8:0a:6b:99:8d:24:aa:
                    8d:1e:f4:2b:b8:0e:b3:1e:5c:d2:74:18:c9:21:80:
                    fa:9c:dd:94:2e:66:6d:a7:65:b0:f7:37:d2:4c:51:
                    1c:26:f6:ad:a7:97:e4:25:22:a1:c3:1b:a3:11:07:
                    1c:a8:cc:aa:85:f6:f8:9a:13:e2:fb:78:21:6d:31:
                    ba:b8:95:f2:0a:44:92:bc:bd:e2:99:8f:08:39:4d:
                    94:77:6b:44:ca:5c:c4:59:ff:9e:83:1c:09:9a:ab:
                    e5:12:50:8b:db:10:7f:ed:3a:dc:1f:cc:cb:85:22:
                    65:d3:f6:01:7e:3e:0f:4a:4f:e3:c2:5b:1f:c8:b2:
                    0e:7d:72:a0:e0:07:10:7b:56:ca:76:a4:cf:28:ba:
                    c8:63:12:21:b5:8d:fa:19:3b:91:1d:42:70:4b:38:
                    6b:3e:f7:9c:de:29:a2:0d:dd:38:9d:c9:78:ad:cb:
                    58:2b:68:f6:6a:31:97:a1:35:8a:99:a2:38:cd:bf:
                    09:f3:af:ad:01:d4:3f:ff:e9:1a:3a:7a:01:56:45:
                    a3:c0:a0:a2:d6:72:bf:0d:61:72:bf:2c:99:78:81:
                    60:8e:b4:69:82:ea:63:56:aa:67:44:88:63:3e:99:
                    e9:65:8c:9f:e5:0d:5e:60:02:de:b7:ca:43:f7:17:
                    c0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E4:15:89:22:0C:21:17:C0:A9:36:95:C8:89:4C:C4:37:CB:8E:1A
            X509v3 Authority Key Identifier:
                keyid:36:81:48:FC:0F:F0:10:46:62:06:F1:1D:6A:C1:C5:8A:7C:BD:3A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/368148FC0FF010466206F11D6AC1C58A7CBD3AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEmztZMCSLLpqkGgErw83oPocQNDd8dNQTatx61ZqhD3/1/3137302e3235342e3138322e302f32342d3234203d3e20323633363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:33:51:73:84:86:73:51:f4:bc:2e:36:b5:96:21:96:d4:
         87:0d:25:83:da:7c:87:2b:aa:5f:42:6f:86:6a:0f:2d:e1:83:
         f6:6b:1d:1b:28:10:f4:7b:2d:4e:bd:d1:b9:5c:a6:be:b2:e8:
         e6:1d:5f:3b:6b:00:f3:cd:22:49:ab:d5:5c:8e:2c:b5:9e:30:
         d1:35:12:28:41:dc:5d:75:60:ef:cb:0e:a1:de:b5:a2:2c:34:
         12:37:ee:60:c4:65:bc:e9:4c:7d:cf:4f:e8:b6:f5:86:3f:a0:
         f0:86:94:6f:5c:4a:23:63:a0:4c:ba:be:a3:06:b4:29:d1:10:
         6b:6d:a6:62:27:65:77:21:84:8e:d7:0f:df:d1:95:85:b2:d1:
         f9:2b:9f:67:dc:39:06:76:a1:51:da:aa:4a:62:9a:e6:b9:78:
         4b:5d:e9:38:c5:a9:34:7e:5a:4d:33:fd:27:a5:3d:f5:3a:c3:
         49:ca:27:ac:db:48:be:06:6c:b2:62:cc:12:52:4b:ac:10:0c:
         d1:ed:da:ad:91:1e:91:13:39:7a:d7:b8:25:f5:8c:64:ac:f5:
         ca:18:4e:d3:3d:db:19:a5:54:16:bc:02:f0:4f:28:26:7e:d5:
         02:21:12:0e:b0:f5:75:20:4f:30:8a:40:a9:ec:f1:46:3d:92:
         c1:b2:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:23:42 2026 by rpki-client