Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
File:                     3136382e39302e3136382e302f32322d3234203d3e203533303632.roa (raw, json)
Hash identifier:          N7wRUO+oLEJuKxi0ymYTMT7mjKKUIRo8YaPrFchsi3E=
Subject key identifier:   56:16:31:24:20:A9:24:8E:ED:56:EC:68:11:9A:AE:36:26:0E:01:A8
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       5DA4176A97BC804A6EA79E51A9B284F4EEB64626
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa
Signing time:             Thu 17 Sep 2026 00:23:10 +0000
ROA not before:           Thu 17 Sep 2026 00:18:10 +0000
ROA not after:            Thu 16 Sep 2027 00:23:10 +0000
asID:                     53062
IP address blocks:        168.90.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 07:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a4:17:6a:97:bc:80:4a:6e:a7:9e:51:a9:b2:84:f4:ee:b6:46:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Sep 17 00:18:10 2026 GMT
            Not After : Sep 16 00:23:10 2027 GMT
        Subject: CN=5616312420A9248EED56EC68119AAE36260E01A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:0e:2c:da:51:d0:f7:08:81:a0:cb:bb:23:
                    5a:c0:ee:e7:e7:91:27:b3:77:68:f1:9d:1b:a4:97:
                    62:c5:fd:15:12:09:d1:3e:30:21:9d:13:24:2f:03:
                    bb:d0:cf:1f:ae:41:c2:5b:fa:07:4e:51:80:dc:f8:
                    a7:94:fa:10:b8:43:62:42:81:ce:bd:a9:97:f3:82:
                    3f:69:c7:58:35:f6:3c:8a:af:fb:dc:77:48:1a:6d:
                    2f:b4:41:c4:71:4b:6c:13:58:fc:5e:62:cb:92:05:
                    8f:7f:9a:8f:99:49:9e:c7:b4:98:1c:2b:36:1b:f8:
                    78:0c:f9:4a:2f:15:ed:79:be:a0:7c:88:49:d6:de:
                    22:1b:2b:90:c2:7f:0e:5a:ba:a8:24:a2:eb:a1:95:
                    d1:38:0f:2a:47:42:eb:07:8a:d3:c4:72:96:5d:75:
                    c5:5f:c5:0c:5b:7f:b1:61:cd:2e:bc:2d:12:d7:33:
                    4c:ac:5f:55:9d:f1:c6:47:ab:df:e6:3b:16:6e:6d:
                    08:01:a3:f1:91:d7:63:0b:8f:8e:2c:64:29:8d:62:
                    e7:83:bd:25:f4:f7:1a:fa:d6:ba:fb:e1:97:f6:78:
                    25:37:c8:44:72:9b:69:4a:a6:72:00:33:1e:57:0b:
                    c6:04:2d:23:69:b0:95:74:46:15:a4:f6:ea:08:42:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:31:24:20:A9:24:8E:ED:56:EC:68:11:9A:AE:36:26:0E:01:A8
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e39302e3136382e302f32322d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:79:34:e4:7d:6d:5a:e0:dd:23:55:a5:1f:ee:00:c7:a4:39:
         b0:19:c1:f3:18:a8:2f:1e:89:41:3d:b8:c3:08:11:01:35:96:
         4a:9f:6e:6d:c7:ce:06:04:1a:dd:5a:4b:6e:ed:22:c7:ee:51:
         8f:02:23:2e:b2:0e:59:bb:2a:7e:90:24:2a:bf:31:45:b6:7e:
         4c:4b:d2:16:a0:83:39:4b:df:71:71:05:4e:f0:04:7e:d4:ed:
         a9:86:4c:f9:c7:11:ae:95:04:be:ca:e5:d8:8c:7e:24:98:62:
         60:b7:cb:6f:18:87:47:ae:eb:94:4f:dd:a9:8d:d5:84:05:28:
         00:e8:e4:8a:c2:e0:ab:9c:f1:af:49:16:f0:5a:36:54:9f:77:
         07:af:c1:6d:b6:81:15:4e:2a:f3:a3:92:2a:ec:4c:94:01:02:
         c6:6c:2e:9b:7c:02:1b:ca:8b:4e:5f:a4:23:7d:84:d4:63:13:
         b2:fb:7a:cd:32:85:c6:73:9f:26:3d:14:4f:2f:c3:4b:95:db:
         f2:1a:fa:72:77:22:e0:4e:77:79:6a:a1:cf:23:dc:0c:94:fb:
         c4:b9:99:86:fe:de:fd:26:3c:81:4c:be:c2:2f:76:77:34:ac:
         3a:b8:14:98:42:7f:02:dd:ff:c9:61:d6:0b:42:05:dc:8f:3e:
         61:f4:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:58:08 2026 by rpki-client