Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa
File:                     3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          hEbFs0X7pMnRpWG5PFkvBCAVkOC5Bq7ofReUDNOfWhs=
Subject key identifier:   F8:44:AA:80:63:1C:B3:6B:DC:A5:31:C3:9A:A1:B7:DA:0E:3C:0B:26
Certificate issuer:       /CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
Certificate serial:       016CF3B876390DAB21816BA5DEF88F6FADF72BF1
Authority key identifier: E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa
Signing time:             Wed 29 Jul 2026 15:48:40 +0000
ROA not before:           Wed 29 Jul 2026 15:43:40 +0000
ROA not after:            Wed 28 Jul 2027 15:48:40 +0000
asID:                     198949
IP address blocks:        168.195.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl
                          rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6c:f3:b8:76:39:0d:ab:21:81:6b:a5:de:f8:8f:6f:ad:f7:2b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E648F8D55C21E34319A7C414ECB0155EED5E0B31
        Validity
            Not Before: Jul 29 15:43:40 2026 GMT
            Not After : Jul 28 15:48:40 2027 GMT
        Subject: CN=F844AA80631CB36BDCA531C39AA1B7DA0E3C0B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:69:b7:84:b4:dc:42:e1:9f:b3:60:a0:db:
                    33:b1:fc:87:1d:d4:21:19:03:02:d3:2b:32:84:e6:
                    6a:77:9d:75:ff:11:1e:00:3f:2d:19:ec:f7:85:cf:
                    28:87:61:36:a9:57:f9:96:d7:f6:d2:d6:73:15:53:
                    3d:a9:c4:68:a0:32:87:06:01:c3:8d:f9:d8:d0:2a:
                    66:0d:a0:6e:b9:79:e1:1f:02:51:54:fe:76:08:ff:
                    db:d3:66:db:f5:e1:e7:e3:05:f9:82:92:48:b3:a7:
                    5f:98:91:ba:1d:bf:8c:be:75:ef:4e:ae:46:fb:61:
                    ad:e6:4b:46:4a:90:23:72:35:83:e6:db:31:9d:88:
                    69:7e:2c:d7:fa:cf:4c:0b:b7:e4:37:f4:49:be:9b:
                    55:e4:0e:2a:4b:39:09:71:48:66:4f:6e:8b:b1:88:
                    9f:4c:07:e7:c8:b9:96:a6:80:08:01:bf:1a:51:6a:
                    23:76:2d:2c:9e:b9:84:53:05:d8:be:de:33:f1:2a:
                    6c:73:44:48:cf:20:50:c9:cf:2f:31:48:3f:61:29:
                    8a:87:70:79:8b:ad:42:7e:21:94:08:40:51:e2:70:
                    d3:99:41:a6:7d:4b:ac:d2:3d:f9:c4:13:05:7b:e1:
                    8f:db:ca:da:8a:27:f1:55:8c:10:06:e3:6b:ef:89:
                    18:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:44:AA:80:63:1C:B3:6B:DC:A5:31:C3:9A:A1:B7:DA:0E:3C:0B:26
            X509v3 Authority Key Identifier:
                keyid:E6:48:F8:D5:5C:21:E3:43:19:A7:C4:14:EC:B0:15:5E:ED:5E:0B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/E648F8D55C21E34319A7C414ECB0155EED5E0B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E648F8D55C21E34319A7C414ECB0155EED5E0B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6X1NNYU28c13ohAYpAnmfcNPPPKPeo7nDqGqrikn5cDa/0/3136382e3139352e3234302e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e9:7f:a9:7f:41:3c:eb:ec:0d:af:35:a1:d3:2c:8a:01:14:
         c4:55:83:2d:0e:b6:d7:fe:0d:be:e5:30:ac:5b:24:5e:9d:64:
         e8:35:53:4e:02:97:e1:59:fe:77:eb:d7:a1:c5:00:a9:e1:9f:
         8a:9f:08:9f:d0:15:e1:b3:eb:54:93:de:ff:a4:ca:bb:df:11:
         60:18:92:c2:ad:f8:24:5c:a9:c3:d7:11:19:c3:f5:6a:a2:30:
         8a:46:92:7a:c6:6d:de:1f:c4:35:79:09:c7:f2:20:0b:c0:87:
         f3:77:1b:72:5f:e7:fb:45:a2:64:37:99:c2:e0:21:12:5f:26:
         1d:1b:28:f5:93:9a:53:d0:b6:6c:64:5d:4b:3b:6d:58:a3:04:
         f3:f5:d2:96:73:1d:7b:7f:95:06:f2:5b:1b:4c:7b:e6:69:a2:
         e5:7e:0f:c0:d2:65:4f:c5:93:cf:e1:0f:e6:45:2d:ea:ff:d5:
         41:0a:f4:2b:9e:92:87:73:6b:ee:ee:88:9a:60:4b:02:1e:56:
         3f:c3:8c:c9:5a:cc:4f:04:49:26:f3:7f:a1:14:5c:85:20:15:
         29:99:aa:d0:33:a5:8c:cd:b5:01:f2:2d:b2:a4:8f:0f:ee:8a:
         7a:40:64:99:c8:27:55:d3:89:33:11:ff:17:90:6e:9c:27:8c:
         f6:91:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:11:26 2026 by rpki-client