Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa
File:                     3136382e302e33362e302f32322d3234203d3e20323635323434.roa (raw, json)
Hash identifier:          Vlql4BMlywG1aK8doUHlgs0CVJTdvocFOg7WmBMAdig=
Subject key identifier:   C6:92:8C:93:F0:5D:B4:CF:9B:BC:01:1E:70:EB:2E:9C:F5:17:B6:9C
Certificate issuer:       /CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
Certificate serial:       68CD9B13B6D4659F22E6B01AE3FD252B664FCE01
Authority key identifier: CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa
Signing time:             Mon 14 Sep 2026 20:33:25 +0000
ROA not before:           Mon 14 Sep 2026 20:28:25 +0000
ROA not after:            Mon 13 Sep 2027 20:33:25 +0000
asID:                     265244
IP address blocks:        168.0.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl
                          rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cd:9b:13:b6:d4:65:9f:22:e6:b0:1a:e3:fd:25:2b:66:4f:ce:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9
        Validity
            Not Before: Sep 14 20:28:25 2026 GMT
            Not After : Sep 13 20:33:25 2027 GMT
        Subject: CN=C6928C93F05DB4CF9BBC011E70EB2E9CF517B69C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:f7:7f:60:9d:8e:55:4d:11:14:15:5a:89:
                    e9:e6:af:c4:a3:b7:e0:28:ae:ef:48:9f:91:33:a9:
                    4b:35:6f:b6:90:cd:c4:cc:21:d2:b9:fa:63:65:ca:
                    36:2b:0d:a4:89:53:83:11:7f:9f:8e:d5:11:fb:08:
                    c2:b1:1b:a1:47:f6:34:9e:d1:1b:13:0a:2a:c4:aa:
                    93:5c:b1:83:f4:ca:ab:a1:99:78:50:69:a0:b5:c8:
                    e8:65:6a:99:cd:bb:9f:43:23:c0:40:0a:be:6a:0d:
                    2c:2b:d2:58:28:f6:a7:74:63:3b:18:0b:18:f0:72:
                    b8:42:31:93:b4:d4:7c:11:04:23:7f:8a:29:b3:ee:
                    da:23:42:de:96:09:b6:35:09:8a:e2:6e:5d:13:c1:
                    1c:a4:59:17:2d:d8:5c:61:54:8f:7c:26:5b:4a:94:
                    ee:cf:3e:a2:d9:c6:9e:35:73:0f:ba:e6:91:ef:28:
                    c0:3e:31:28:b9:1a:b9:42:05:a7:6d:51:87:6b:6a:
                    7d:dc:45:3f:b9:3b:8e:96:7f:b8:04:1b:2d:63:85:
                    8a:38:f9:db:7d:aa:f4:63:0c:da:a3:71:65:a3:7a:
                    74:8b:bd:e3:31:95:7f:f0:1e:05:c2:ae:3d:bb:c3:
                    c7:1d:25:13:62:1a:ff:e5:f7:f6:a1:99:cd:77:5a:
                    b1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:92:8C:93:F0:5D:B4:CF:9B:BC:01:1E:70:EB:2E:9C:F5:17:B6:9C
            X509v3 Authority Key Identifier:
                keyid:CA:33:6E:A2:A2:16:5C:EC:AC:40:EB:5F:29:E1:4B:F0:A1:DD:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA336EA2A2165CECAC40EB5F29E14BF0A1DDF0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJindbE6S8b1HgmWqWqK93r1Twc6U8GbwPQSXykxdPSP/0/3136382e302e33362e302f32322d3234203d3e20323635323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:4d:ee:42:a5:dc:35:1b:65:ba:71:d4:a2:d6:71:c5:a9:
         d9:a8:48:d3:33:10:e4:c4:90:b7:7e:31:fd:d1:cb:db:5f:73:
         1f:6d:aa:ec:c2:a8:73:76:c1:1a:3b:59:63:af:9b:9a:de:3a:
         ed:e8:4e:6b:3e:00:05:9c:01:f2:b1:3f:1f:49:5a:60:36:0a:
         59:51:6c:a4:49:93:f9:20:b8:b5:12:3f:49:8f:68:87:14:2b:
         8d:28:5a:d1:0d:e3:40:d3:1c:5f:a4:80:51:3b:d0:b2:a4:f4:
         0d:85:3d:42:28:0c:82:e9:b5:c0:88:05:39:87:2d:7c:62:c8:
         1e:90:af:c4:fb:fa:2c:aa:56:74:08:3f:09:86:22:f2:43:89:
         ab:f6:a6:ca:c8:3d:de:fb:15:27:c7:66:50:17:67:95:5f:fa:
         7c:aa:ce:e6:39:37:73:ed:f0:b6:ef:b6:a1:17:02:ee:ed:24:
         f5:c1:28:93:0e:c9:83:c5:44:76:87:88:ab:29:d5:75:47:f9:
         d0:83:d0:bf:20:15:de:0a:f7:5d:d1:c7:b1:0c:75:51:be:84:
         5b:33:d8:a8:eb:58:71:29:73:a9:27:a7:06:e6:eb:96:c3:0b:
         c4:f4:dc:86:dc:aa:c1:f2:63:b7:c5:7b:4a:7e:47:c6:c8:33:
         89:25:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:00:57 2026 by rpki-client