Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa
File:                     3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa (raw, json)
Hash identifier:          aRaPeS21mt0rFMhudwIwYLsrepVWGOexW39r8QM0Njk=
Subject key identifier:   15:4E:FE:6B:C6:65:43:BC:D5:0F:6C:DA:63:D8:5E:0D:55:50:24:43
Certificate issuer:       /CN=F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02
Certificate serial:       4D0D756CB2F0BEED417E9C8836F61C70262A48E7
Authority key identifier: F6:E7:59:B6:43:AB:F7:C2:98:87:E8:DC:CC:7C:2C:35:C3:DB:4E:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa
Signing time:             Wed 29 Oct 2025 21:19:14 +0000
ROA not before:           Wed 29 Oct 2025 21:14:14 +0000
ROA not after:            Wed 28 Oct 2026 21:19:14 +0000
asID:                     273729
IP address blocks:        168.121.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.crl
                          rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:75:6c:b2:f0:be:ed:41:7e:9c:88:36:f6:1c:70:26:2a:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02
        Validity
            Not Before: Oct 29 21:14:14 2025 GMT
            Not After : Oct 28 21:19:14 2026 GMT
        Subject: CN=154EFE6BC66543BCD50F6CDA63D85E0D55502443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:f4:ea:99:05:1d:81:4d:d3:89:25:49:58:
                    14:0e:0d:b1:8b:f2:d2:ed:28:31:ec:b2:c5:38:e6:
                    2b:4d:75:ae:bd:87:db:b1:b3:8c:57:ee:c2:f7:a5:
                    f8:88:aa:aa:c8:34:78:a4:90:1d:36:b1:4e:24:be:
                    d2:60:94:33:ed:53:6f:30:9d:78:6d:65:2a:fb:8a:
                    bb:17:8d:ea:53:f7:86:ff:d4:57:cb:b2:4c:0a:d6:
                    07:33:6c:ff:90:34:85:37:d1:5e:9d:5c:7f:ab:06:
                    7d:5b:5b:8a:95:0d:41:e8:d0:c8:fa:cb:9f:fd:4d:
                    5e:69:13:e1:60:9c:3c:f5:06:8d:1d:35:a5:59:70:
                    50:ac:01:30:c6:bf:23:fe:e4:bb:18:26:c8:cb:2a:
                    ba:e6:7d:a3:a3:f6:37:4c:7d:0f:ab:ee:fa:42:69:
                    72:72:6f:05:2a:8e:c4:6d:fd:bb:68:2e:db:b0:07:
                    aa:96:2e:da:35:3a:d8:22:27:50:5c:57:b1:c7:00:
                    ea:e2:c7:f4:76:f5:5b:13:24:ce:81:d7:94:92:4a:
                    c8:7a:8c:75:42:62:e8:36:d8:0f:ee:54:82:38:32:
                    ff:d4:5b:7e:0c:a8:ec:0c:73:80:f0:48:22:21:6e:
                    07:51:08:f6:98:21:d6:ed:17:7d:ef:23:33:44:f8:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4E:FE:6B:C6:65:43:BC:D5:0F:6C:DA:63:D8:5E:0D:55:50:24:43
            X509v3 Authority Key Identifier:
                keyid:F6:E7:59:B6:43:AB:F7:C2:98:87:E8:DC:CC:7C:2C:35:C3:DB:4E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6E759B643ABF7C29887E8DCCC7C2C35C3DB4E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/3136382e3132312e32302e302f32322d3234203d3e20323733373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:50:b7:28:66:ca:b9:48:9d:53:2c:ae:3b:8f:e4:38:fa:b0:
         2c:e4:b3:3f:08:41:9e:4d:c5:9d:55:d2:2e:38:0d:5e:ca:92:
         ca:04:3f:2d:98:b5:a3:bf:fc:8f:8a:12:f4:a6:9d:7e:59:ce:
         15:51:bc:77:28:a6:06:b3:4d:cb:4b:94:62:b7:49:d2:65:ad:
         87:c9:95:0a:f3:6a:d0:f2:ad:f6:e6:7d:9b:a3:38:b6:8d:16:
         80:34:49:eb:93:e0:ab:58:e0:70:48:f9:25:fd:01:f9:90:5d:
         ca:79:db:a0:90:49:31:36:89:02:b6:2d:a1:be:b4:ee:c0:fc:
         ed:0b:27:31:73:88:ba:f6:69:1f:b7:53:97:67:c8:37:a3:74:
         5f:30:8d:83:e3:5a:cd:37:cc:cc:61:90:45:23:22:53:90:e7:
         cb:34:55:5c:b9:34:1d:05:92:c4:3c:e8:d3:e3:6e:e4:3d:bf:
         e7:fe:92:ef:cb:12:79:61:36:a8:be:0b:66:46:f7:90:d3:b8:
         4e:62:7f:d2:1f:af:c6:9f:04:5a:5f:79:b4:54:3e:f4:83:2c:
         9d:f5:ac:23:77:9c:64:a6:70:4b:ff:4c:2e:6a:82:c3:80:24:
         c7:5a:66:65:a4:68:f5:0b:4e:47:20:0a:49:6a:ba:47:1b:5e:
         06:34:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 19:35:53 2025 by rpki-client