Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3138362e3233332e3136382e302f32322d3234203d3e20323633303738.roa
File:                     3138362e3233332e3136382e302f32322d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          4gUV/5s2osd4V+Qj7+XQ9YUkvbSKTeqOMRyJLbisibY=
Subject key identifier:   90:D5:F5:D4:1F:5D:AF:1B:7E:36:27:C5:ED:62:61:E1:EF:FD:92:B5
Certificate issuer:       /CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
Certificate serial:       74D81727AFFE9F322958661435D99E0C9E28369A
Authority key identifier: D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3138362e3233332e3136382e302f32322d3234203d3e20323633303738.roa
Signing time:             Fri 28 Aug 2026 13:32:42 +0000
ROA not before:           Fri 28 Aug 2026 13:27:42 +0000
ROA not after:            Fri 27 Aug 2027 13:32:42 +0000
asID:                     263078
IP address blocks:        186.233.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d8:17:27:af:fe:9f:32:29:58:66:14:35:d9:9e:0c:9e:28:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
        Validity
            Not Before: Aug 28 13:27:42 2026 GMT
            Not After : Aug 27 13:32:42 2027 GMT
        Subject: CN=90D5F5D41F5DAF1B7E3627C5ED6261E1EFFD92B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:cc:af:63:da:06:17:37:72:b2:a4:0b:60:
                    3a:d9:fc:4c:85:9f:94:8c:ba:0b:af:4f:ca:44:70:
                    5b:bf:99:e8:94:2c:d6:29:ff:b3:d2:41:31:cd:d2:
                    5e:7a:f8:ff:04:fb:c4:ed:fb:cd:f4:a3:f8:5c:a5:
                    b7:72:4f:4a:0a:2f:74:d1:37:f2:5a:90:d8:bb:db:
                    e7:cb:20:2f:53:85:e0:62:e5:f9:77:de:7a:c7:a6:
                    f8:ec:fc:58:a3:dc:ee:12:66:ec:e8:d0:5c:df:75:
                    d9:e7:ed:2c:f8:4b:2c:aa:20:03:91:52:38:91:b9:
                    8c:14:5e:72:79:a0:19:b2:e8:66:8c:cd:6e:86:40:
                    5c:67:6c:43:98:fb:24:85:05:40:a0:58:39:fd:e3:
                    c1:15:12:c0:4a:f6:f3:85:f4:11:3b:fb:3b:5f:fc:
                    91:ac:c9:90:e4:42:54:3c:b8:f3:7f:bc:b3:9a:24:
                    20:b5:66:ae:58:57:1e:93:b4:9f:78:83:52:e1:97:
                    c3:db:20:65:b2:32:8b:fb:a9:e6:18:64:e3:84:0d:
                    0b:10:ad:e8:1d:24:14:a8:7f:a1:3f:dc:5a:de:7c:
                    3d:b3:fa:2b:9b:e5:5e:88:cf:dc:ec:09:1f:f4:82:
                    7a:41:00:93:d7:21:95:63:7a:c6:2e:81:73:d8:1c:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D5:F5:D4:1F:5D:AF:1B:7E:36:27:C5:ED:62:61:E1:EF:FD:92:B5
            X509v3 Authority Key Identifier:
                keyid:D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3138362e3233332e3136382e302f32322d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:4f:75:ac:eb:93:8e:45:1a:4f:6a:ac:19:16:3f:26:08:6f:
         fc:1f:08:9b:0c:c2:76:2e:39:98:38:a2:88:15:f5:c7:4c:c8:
         f4:30:77:42:e3:91:47:0f:3e:65:2b:cd:35:e5:3c:5e:d2:d5:
         54:ca:b7:2d:0f:72:ce:00:d5:0f:31:41:92:f0:32:2e:09:88:
         b5:65:39:97:cc:69:db:a1:20:d1:82:a6:06:8f:4d:00:75:70:
         40:61:3c:37:b8:6f:0b:a3:7d:bd:78:56:74:d9:cd:03:c9:7f:
         56:9b:85:4b:b3:04:6d:75:0a:57:58:c2:c9:75:3e:bf:ed:c4:
         02:8a:34:4e:6c:b8:79:76:ba:96:1f:67:b5:12:f9:b1:ca:3f:
         1e:38:24:73:1d:99:a4:ad:3c:17:13:2a:21:15:5c:a7:5f:ae:
         02:49:fa:e0:4e:44:82:d2:13:4d:ff:0e:0c:f1:cb:58:f2:55:
         de:7c:61:b6:ff:2a:d6:41:bd:60:de:69:1b:fe:b2:b1:8d:1b:
         5a:8e:6d:fb:f5:cd:b9:d6:e6:0d:0a:eb:3b:8d:82:6a:1e:29:
         b8:45:83:36:74:55:79:3b:92:34:30:e3:69:69:d8:63:d6:77:
         15:6a:9f:76:b1:10:51:db:6e:b9:9c:5b:73:f0:8b:80:f9:bb:
         d8:46:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:59:07 2026 by rpki-client