Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa
File:                     3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          6kMTTsJr6OPOLB8eU5IuF9N41M1RQjRoNOKam87i8+8=
Subject key identifier:   33:7D:2B:56:AE:1D:09:6D:41:B0:A3:43:A0:1A:63:0C:2F:E6:75:46
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       525C47BC9738D0F13E0DFD5696F5ABCB488E5F30
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:04 +0000
ROA not before:           Fri 28 Aug 2026 17:01:04 +0000
ROA not after:            Fri 27 Aug 2027 17:06:04 +0000
asID:                     262642
IP address blocks:        168.205.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 01:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5c:47:bc:97:38:d0:f1:3e:0d:fd:56:96:f5:ab:cb:48:8e:5f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:04 2026 GMT
            Not After : Aug 27 17:06:04 2027 GMT
        Subject: CN=337D2B56AE1D096D41B0A343A01A630C2FE67546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:af:82:99:9c:a9:af:ca:4b:c4:4e:3d:27:
                    9c:88:3c:c4:8f:0f:39:e9:05:31:93:e3:dc:14:42:
                    72:be:3e:18:05:1c:ac:b7:70:a3:1f:26:97:0a:c7:
                    46:3e:26:ee:91:b0:e9:5a:81:ca:df:26:6d:23:bb:
                    e6:5e:58:b8:fe:c6:bf:d3:08:41:dc:68:e5:42:81:
                    dd:8a:25:41:5a:c8:98:cf:60:f7:3d:7b:11:da:11:
                    04:8f:bc:56:fc:e1:6c:65:1e:90:73:30:c8:7c:08:
                    eb:11:95:f6:68:d1:67:c0:f9:19:ab:c6:21:7d:4f:
                    48:91:ae:8e:17:26:79:7b:51:d1:fb:c7:3a:17:9b:
                    92:14:c2:0b:d9:0c:f4:79:db:82:4f:8a:9a:54:d4:
                    f7:38:b1:86:1c:15:49:d7:c9:04:46:84:66:42:83:
                    a7:ff:cd:92:ed:60:2e:15:2f:54:68:95:aa:4b:e5:
                    1f:ea:ef:51:a4:f9:3b:10:4c:2b:9c:aa:cf:67:fc:
                    ca:92:fd:2b:a5:8f:a3:c7:d5:be:da:35:af:11:5b:
                    c1:42:67:21:ba:d1:6c:d3:4d:e4:6b:c0:96:21:32:
                    01:b6:65:0c:6f:5d:c9:46:68:84:7e:d9:f8:e5:ca:
                    e4:1a:03:0e:18:51:3b:cb:36:a7:f8:de:27:56:61:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:2B:56:AE:1D:09:6D:41:B0:A3:43:A0:1A:63:0C:2F:E6:75:46
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:d3:49:a7:7d:eb:5c:b1:3f:35:01:a2:f8:b9:48:8b:14:a1:
         40:9c:ff:33:69:57:6c:2a:99:f3:5a:0a:d1:0f:42:c6:2b:8d:
         c5:f7:33:1f:5f:9a:0f:fd:11:96:be:c1:ff:28:df:f2:96:3c:
         84:c8:8b:75:ad:27:97:50:16:88:ad:4c:73:85:6b:c8:1a:43:
         73:d8:7a:37:d4:53:4d:8f:f1:58:ae:ac:dd:8f:d1:bf:8e:f0:
         48:5d:3b:d0:39:94:eb:4d:8e:f9:73:db:99:73:05:b6:6c:57:
         e2:78:ee:64:cb:20:0a:95:4c:6c:72:be:38:b7:e0:6a:98:ea:
         0f:cc:c6:a9:d8:ec:f6:62:39:80:99:89:90:78:0f:f2:d6:bc:
         7d:d3:e1:a3:e8:42:f0:48:54:f1:16:df:6b:5c:3c:d6:5c:ab:
         d4:eb:3c:8e:22:0a:41:0d:73:2c:90:65:6e:3e:56:f4:6c:29:
         af:65:90:38:63:35:3d:7a:09:81:58:ca:b8:29:52:86:76:9e:
         96:ea:4f:69:14:ec:34:9f:2f:50:32:d8:29:6f:86:b1:75:8b:
         04:ff:f5:ee:89:5f:1c:5f:3c:23:c6:6f:c6:ee:bc:17:78:93:
         0c:42:17:20:88:67:71:dc:f4:1d:1c:fe:88:75:04:b3:db:e8:
         4f:6c:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:04:31 2026 by rpki-client