Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e39362e302f32332d3233203d3e20323633333537.roa
File:                     3139312e33372e39362e302f32332d3233203d3e20323633333537.roa (raw, json)
Hash identifier:          uVsDRMHtwy0m7p7TRsfq/gkJlWIsYxeHly4lON2IBsQ=
Subject key identifier:   CB:81:82:37:FE:DC:CE:A3:4C:C6:44:F3:90:91:26:DC:45:A1:5C:8E
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       2FA73878B99AAB562BEADA64D233ADBE082A9631
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e39362e302f32332d3233203d3e20323633333537.roa
Signing time:             Thu 01 Oct 2026 12:16:28 +0000
ROA not before:           Thu 01 Oct 2026 12:11:28 +0000
ROA not after:            Thu 30 Sep 2027 12:16:28 +0000
asID:                     263357
IP address blocks:        191.37.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a7:38:78:b9:9a:ab:56:2b:ea:da:64:d2:33:ad:be:08:2a:96:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct  1 12:11:28 2026 GMT
            Not After : Sep 30 12:16:28 2027 GMT
        Subject: CN=CB818237FEDCCEA34CC644F3909126DC45A15C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:79:e9:b5:3b:5b:43:2a:d7:c7:48:44:0f:
                    28:ea:9f:ed:15:fa:a5:57:6b:9a:0b:d1:da:ab:7c:
                    2c:ef:2a:13:b4:b7:8e:8e:f3:e1:d9:f8:27:b3:57:
                    59:63:59:14:84:b5:e0:cd:d0:e9:6e:57:be:b1:fe:
                    2b:dc:b3:50:e7:a9:7b:44:ea:27:51:9a:2f:0c:b7:
                    bb:ca:fb:6a:b4:8e:8a:b3:ac:8d:81:8c:4a:3f:5c:
                    a6:17:d5:5f:e5:49:7c:13:56:ee:85:e5:6b:29:80:
                    f1:fc:ad:95:94:dd:89:6a:59:14:08:1c:da:62:34:
                    8d:0c:f2:f9:19:4d:d1:85:4e:d0:64:0f:28:29:1e:
                    d7:47:3a:ed:13:14:b6:5e:68:57:53:4b:3c:f5:47:
                    26:a0:20:a8:4d:59:2e:36:ef:f0:85:62:3e:8f:ca:
                    94:6d:a3:2a:60:dd:cf:9f:c3:2c:db:6a:bf:74:13:
                    e2:3e:5f:65:e3:35:91:4c:e3:c7:96:fc:4e:ca:3c:
                    2c:ae:76:e0:b2:f2:31:19:f9:0c:7b:fe:2b:3e:b4:
                    64:4d:4c:a5:d9:72:0b:3b:55:2a:51:ed:9e:b1:34:
                    ca:b0:bf:14:2f:28:7b:df:79:e0:f2:34:fa:fa:a9:
                    be:d3:d1:79:1a:11:9d:14:24:34:12:8c:3f:18:9b:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:81:82:37:FE:DC:CE:A3:4C:C6:44:F3:90:91:26:DC:45:A1:5C:8E
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e39362e302f32332d3233203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:df:21:cf:28:68:63:f8:47:8d:ce:05:0a:bb:2a:60:a9:
         65:26:46:fd:df:55:40:7a:c6:ac:96:f0:73:92:e0:ca:f6:d4:
         fd:2e:35:92:f1:04:65:06:03:a2:4f:ce:7f:b4:cc:a3:7e:95:
         9e:98:1b:a8:2d:39:17:d0:7c:15:01:d8:e7:23:f7:15:32:f8:
         a4:d1:73:cf:ac:68:cf:7c:41:ba:71:7d:77:6f:37:bd:bc:d4:
         b5:d4:1a:a0:19:c0:e1:97:bc:65:d9:22:85:31:69:5c:24:e9:
         41:3f:d8:57:f3:cb:c8:13:d4:34:56:5a:aa:72:77:81:cf:ef:
         7f:c2:fa:4e:6d:95:35:5e:c2:63:92:5d:17:f1:18:50:05:c1:
         3e:b1:07:00:65:10:5c:25:e1:58:18:8a:69:68:4a:28:97:f2:
         e3:8f:a4:7e:fb:b8:5a:46:f0:b8:94:ba:4f:39:78:32:a1:6b:
         b0:40:ad:eb:e2:4b:b6:a3:42:cb:10:d1:ee:b3:44:a9:1a:51:
         0c:37:1a:c0:b6:6a:81:01:9d:8c:d2:d0:b5:89:2f:d0:41:de:
         f6:8c:5f:6e:dd:a9:29:5e:bb:37:97:10:be:d3:7b:49:01:bf:
         14:b9:41:54:f6:23:96:eb:4b:4c:d6:7c:fd:88:30:f7:57:c6:
         30:07:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:12:26 2026 by rpki-client