Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3332203d3e20323636363330.roa
File:                     3132382e3230312e3133362e302f32322d3332203d3e20323636363330.roa (raw, json)
Hash identifier:          gK2VYx+JnVXnsIbYZ8boihIfvO5yofwqlEP7RnopBTU=
Subject key identifier:   4C:76:D3:85:CD:5F:BE:BD:EA:E0:A6:89:11:89:D1:48:A9:BE:9A:A2
Certificate issuer:       /CN=8F3D2BF4E549E29840DBC444D30F59D9A4C0A827
Certificate serial:       7124108218BF4A4B1EF0128EDDEFAD0D579CC700
Authority key identifier: 8F:3D:2B:F4:E5:49:E2:98:40:DB:C4:44:D3:0F:59:D9:A4:C0:A8:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3332203d3e20323636363330.roa
Signing time:             Wed 09 Sep 2026 02:59:51 +0000
ROA not before:           Wed 09 Sep 2026 02:54:51 +0000
ROA not after:            Wed 08 Sep 2027 02:59:51 +0000
asID:                     266630
IP address blocks:        128.201.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.crl
                          rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:24:10:82:18:bf:4a:4b:1e:f0:12:8e:dd:ef:ad:0d:57:9c:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F3D2BF4E549E29840DBC444D30F59D9A4C0A827
        Validity
            Not Before: Sep  9 02:54:51 2026 GMT
            Not After : Sep  8 02:59:51 2027 GMT
        Subject: CN=4C76D385CD5FBEBDEAE0A6891189D148A9BE9AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:98:5a:b3:96:52:0e:fd:ce:cd:ae:d5:11:
                    97:13:ea:3b:f8:2b:ba:5a:8f:39:be:5e:69:96:25:
                    bf:8d:be:bf:ea:33:a1:3f:35:23:c0:d5:51:6a:50:
                    8e:dc:c1:20:39:80:c4:d6:8d:10:1f:5e:a9:9c:7b:
                    5a:97:b2:0e:5d:d1:57:8b:69:6d:ec:8d:b1:b9:35:
                    51:a2:40:8c:50:0d:f5:f8:15:0c:11:ac:ff:cd:e4:
                    02:eb:66:4c:fd:44:0f:81:c3:6f:0d:0b:82:5b:ae:
                    35:00:fd:1e:f9:6e:ee:c7:e1:e6:ec:e6:5e:06:82:
                    19:a3:f4:de:45:b7:f6:52:10:23:1d:22:74:f8:18:
                    32:7f:77:86:2e:8d:54:8a:4a:40:03:2b:11:f1:9b:
                    79:04:14:48:fb:08:82:e8:bf:cc:80:0f:65:86:c5:
                    f6:59:1f:4f:6e:ec:a6:14:90:7f:ba:c1:19:1f:18:
                    db:f1:68:e5:6a:ec:6b:e5:d6:43:29:76:5d:6b:f4:
                    4c:1b:5a:a8:fc:36:45:6d:f4:7c:52:46:32:a1:55:
                    20:3e:47:17:44:3e:2e:92:90:28:f5:03:d5:8d:87:
                    56:f8:bc:e8:fb:f7:cf:23:f0:e9:cd:2c:e4:a5:62:
                    51:1f:d9:64:5c:ca:ee:11:8d:43:18:15:5a:75:46:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:76:D3:85:CD:5F:BE:BD:EA:E0:A6:89:11:89:D1:48:A9:BE:9A:A2
            X509v3 Authority Key Identifier:
                keyid:8F:3D:2B:F4:E5:49:E2:98:40:DB:C4:44:D3:0F:59:D9:A4:C0:A8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F3D2BF4E549E29840DBC444D30F59D9A4C0A827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wQZDhePMo15xSSUHtvhgP7P5d1Rc5NopbszNmu4xZ3E/0/3132382e3230312e3133362e302f32322d3332203d3e20323636363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:44:dd:7b:72:04:f3:42:d5:8c:6a:e9:52:08:9c:f8:ce:e0:
         b9:c7:ab:78:a1:d8:e8:b0:93:e8:28:9b:61:16:b0:1f:24:fb:
         0e:5f:e9:29:fc:87:7b:07:d9:e6:b3:98:4b:e7:c0:b1:2c:17:
         96:f1:95:3f:1c:d0:91:cc:3e:1d:67:cb:18:aa:4e:1e:4b:a9:
         ae:2e:9c:19:89:5b:e2:bb:31:02:56:ac:eb:fa:94:38:69:cd:
         b2:33:f1:90:e1:d7:06:9e:f9:8d:d6:6c:be:ab:69:7a:29:0c:
         96:4b:4e:61:40:66:90:a7:f7:0f:9e:1c:1e:f9:d4:08:1b:76:
         a2:66:9c:6b:d9:3d:cf:e6:09:d0:44:d7:dc:bc:39:65:3f:d0:
         9c:ea:69:bd:15:fe:ff:dc:eb:c2:ce:2d:97:ad:a4:b6:f9:a5:
         00:fb:11:1b:92:e5:1a:d1:ef:f4:53:a7:ef:3b:19:8e:a9:c0:
         2f:71:83:ef:eb:41:78:e4:30:0e:d6:e4:ee:3b:16:35:3e:ad:
         03:b4:d3:21:0c:0b:d9:30:23:53:3d:dc:6e:67:f8:61:a9:71:
         5d:86:de:b6:2a:e3:c2:c6:2a:48:e4:03:5c:b0:ad:0a:23:1c:
         31:a2:5e:b3:2c:33:2e:59:3f:e3:25:d3:0d:4d:58:75:61:84:
         0a:71:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:45:09 2026 by rpki-client