Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa
File:                     3136382e302e35322e302f32322d3234203d3e20323635323239.roa (raw, json)
Hash identifier:          kIstQjw7FFN5hHrGUk5oFYf2BZJqTqTdBH0McpkBNZ0=
Subject key identifier:   9B:38:DE:AB:F7:7E:2F:D5:C2:C6:85:3D:C2:24:49:03:65:49:46:F7
Certificate issuer:       /CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
Certificate serial:       0B98013E058D66BB3B1CCE5DA4B39E2C51D59A2E
Authority key identifier: 62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa
Signing time:             Fri 01 May 2026 22:34:56 +0000
ROA not before:           Fri 01 May 2026 22:29:56 +0000
ROA not after:            Fri 30 Apr 2027 22:34:56 +0000
asID:                     265229
IP address blocks:        168.0.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl
                          rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 04:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:98:01:3e:05:8d:66:bb:3b:1c:ce:5d:a4:b3:9e:2c:51:d5:9a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A
        Validity
            Not Before: May  1 22:29:56 2026 GMT
            Not After : Apr 30 22:34:56 2027 GMT
        Subject: CN=9B38DEABF77E2FD5C2C6853DC2244903654946F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:de:14:33:96:7e:66:7d:ae:c7:65:c2:31:
                    ce:32:33:ad:fc:ba:eb:85:79:c8:3f:0c:e8:bf:63:
                    44:28:6d:e2:24:ac:8e:d5:b1:2f:42:7f:3d:9b:3c:
                    0a:84:df:60:78:a9:f2:cc:e2:28:e4:48:27:eb:de:
                    80:df:25:c4:ea:35:30:ed:8d:1c:da:1e:97:6c:5d:
                    4c:ee:17:5b:04:78:02:b7:ca:74:79:48:fe:c3:79:
                    f2:79:22:09:13:3b:5e:6f:92:f6:b6:54:a6:8a:69:
                    0a:21:b7:92:39:f1:9c:c3:f3:92:23:4a:29:54:d3:
                    ed:3c:f9:1a:3b:7a:01:e3:a4:04:00:b5:a1:8b:7c:
                    38:7a:ee:93:a5:34:10:75:42:9d:60:93:30:3f:16:
                    ee:62:6f:86:4f:6d:a6:85:23:28:77:72:4b:cb:ea:
                    91:85:cd:8c:b0:a7:7f:10:1a:db:a9:d4:ec:be:e0:
                    ef:d8:8f:f5:64:24:2b:85:ad:36:ac:06:bb:e5:ba:
                    97:f1:88:1a:e0:78:f0:68:4c:cd:59:04:77:6a:4c:
                    f7:62:5c:eb:95:dd:12:e5:bf:83:af:4a:f1:75:8a:
                    37:3c:84:15:f1:af:cb:ca:79:c3:e9:f2:49:40:91:
                    f4:aa:81:c3:fc:9c:7a:6f:c4:f4:0c:6e:ba:9c:bf:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:38:DE:AB:F7:7E:2F:D5:C2:C6:85:3D:C2:24:49:03:65:49:46:F7
            X509v3 Authority Key Identifier:
                keyid:62:E3:DA:F2:BA:0A:F8:8F:13:E6:D8:B8:A6:B4:6A:31:82:26:65:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62E3DAF2BA0AF88F13E6D8B8A6B46A318226656A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/3136382e302e35322e302f32322d3234203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:10:37:29:a8:48:31:44:1a:e2:19:42:c1:30:a7:eb:e6:
         36:11:b4:87:78:74:a2:07:34:bc:af:45:fe:91:8e:e7:d3:69:
         df:21:af:9e:86:df:87:dc:93:5c:ba:f4:7b:bd:fb:bc:a3:74:
         7a:3a:38:59:08:26:be:25:e8:9a:c5:6d:a1:6f:13:1d:d9:49:
         0b:cc:c1:7b:8c:ba:df:34:23:a5:7c:fc:75:96:60:45:58:8c:
         e1:ce:7e:00:eb:24:e2:c1:f3:58:a3:51:7e:10:ee:80:86:bc:
         00:c7:70:03:b4:68:00:c5:4f:41:04:4d:af:69:51:59:06:6c:
         24:67:5c:61:a3:f1:1c:a9:ae:04:41:2f:8b:5f:67:06:fb:35:
         bc:44:3f:89:fd:bb:15:96:86:af:29:25:37:5e:1a:ca:10:3f:
         fe:a3:83:64:e0:f9:29:40:6e:7b:a9:96:98:77:5c:93:40:08:
         9f:73:92:c4:fa:18:49:08:8a:c7:06:af:d2:d4:57:fa:3a:f1:
         bb:85:0a:84:c8:3b:f0:d0:f6:ff:c2:3a:ca:02:0d:f4:30:5d:
         6e:92:37:ae:e0:29:a4:b0:f0:75:d8:3a:6c:d8:a8:06:01:f1:
         2f:01:37:98:9a:92:d8:c2:92:d2:da:ab:a0:a2:2b:78:ef:a0:
         eb:45:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:00:29 2026 by rpki-client