Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32342d3234203d3e20323632363432.roa
File:                     3136382e3230352e3134322e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          noS6VhacYFBCybqjDFSmNhPJyFu4nBVIjJYdfmv6WrA=
Subject key identifier:   AE:18:97:50:C4:DC:F6:C4:84:D6:D2:AE:65:6C:2F:54:E7:73:4C:DE
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       41E0F176D8AD2C5A1476FC5B03325EAF8AC827D9
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:03 +0000
ROA not before:           Fri 28 Aug 2026 17:01:03 +0000
ROA not after:            Fri 27 Aug 2027 17:06:03 +0000
asID:                     262642
IP address blocks:        168.205.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 01:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e0:f1:76:d8:ad:2c:5a:14:76:fc:5b:03:32:5e:af:8a:c8:27:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:03 2026 GMT
            Not After : Aug 27 17:06:03 2027 GMT
        Subject: CN=AE189750C4DCF6C484D6D2AE656C2F54E7734CDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:a9:6d:7e:4c:42:56:fc:63:2f:13:36:3f:
                    28:02:44:dd:8b:35:0f:bf:09:1b:fe:65:77:42:b2:
                    81:af:16:e1:f6:15:44:0b:70:6a:17:53:0d:13:32:
                    73:d4:e4:a5:55:a6:c2:ae:6b:12:52:9f:6c:aa:71:
                    cc:ab:11:62:94:60:7b:6c:ea:09:7f:fa:49:5d:ea:
                    86:25:4b:f9:07:71:61:42:9f:28:cd:d8:c9:f2:23:
                    78:47:38:c8:38:45:08:93:c3:5c:91:46:3d:a7:fb:
                    b6:71:c9:a9:b4:c3:38:27:ca:62:df:1c:5b:d4:36:
                    94:c0:6f:5c:7e:c6:5f:28:09:95:ca:9e:fd:5c:21:
                    da:c8:c5:3f:4a:2c:68:19:4a:54:9a:fb:c7:14:20:
                    e1:7f:5e:0e:03:4e:60:82:6f:e4:d1:68:89:45:0f:
                    36:e6:17:b3:47:b0:6a:d5:3f:32:52:89:84:7d:25:
                    1e:03:d3:30:b1:31:e1:5e:93:bc:55:b0:5a:2d:a8:
                    63:7b:41:6e:6d:41:ad:6e:73:b9:c3:aa:20:14:dc:
                    f7:d7:5c:2f:23:9d:3b:a2:0c:98:c3:ec:a3:ed:ac:
                    e7:35:65:2e:6d:28:fb:cf:59:fa:ea:bf:27:3a:76:
                    22:27:c7:fe:e0:7e:d1:cd:b7:e0:1b:08:e5:ed:ae:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:18:97:50:C4:DC:F6:C4:84:D6:D2:AE:65:6C:2F:54:E7:73:4C:DE
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:37:ed:78:38:6a:2f:03:5e:ed:b7:ec:c4:b9:9a:f1:97:fa:
         ee:6d:23:cc:e9:d9:9e:02:7e:ff:aa:85:a3:7f:9f:8b:a2:da:
         fc:70:29:11:27:f1:7e:a0:d6:b5:51:dc:9a:07:9b:2d:29:d6:
         ef:de:53:61:8a:c4:aa:c6:9a:58:03:8c:19:5b:16:0a:bc:55:
         f3:e6:8b:3b:8f:3d:a1:30:00:5f:2b:83:8b:12:37:0b:e7:08:
         eb:e8:d1:64:d3:f9:c5:a3:98:dc:65:ef:fa:3e:2e:da:c3:28:
         be:3b:bf:f1:1f:39:9f:6d:f6:52:9f:17:0d:6b:83:37:91:69:
         00:e6:f7:d1:cf:97:e1:aa:79:76:5c:53:6f:d4:10:50:3d:b9:
         7a:44:52:34:f5:03:e6:a3:8d:57:3b:f6:5a:ab:6a:a4:8f:a3:
         a7:f5:e0:ba:81:69:ad:23:d5:16:11:64:1a:e2:02:8e:13:d3:
         d8:36:2a:ac:ad:3b:91:fd:23:35:e3:a7:b6:d3:1d:64:0e:60:
         85:6f:99:0b:4b:ca:b9:72:57:aa:58:af:e5:12:3f:10:1f:ac:
         8a:cb:7e:69:d2:fa:14:2a:eb:0c:5f:82:fc:cc:c3:1b:58:41:
         be:b4:60:ac:d1:25:36:12:6c:38:e9:cb:b8:e4:ae:cf:dd:ba:
         67:7c:77:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:26:21 2026 by rpki-client