Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa
File:                     3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa (raw, json)
Hash identifier:          mjkK64TPDQVQZq2MM7TvCBHBMrdxp3rm4mzSKvPGMHM=
Subject key identifier:   89:7A:43:0C:28:CA:9D:AB:E3:26:B4:FD:0A:09:E9:36:DF:3E:8E:48
Certificate issuer:       /CN=E218C01DA973A8B3E7216095AB8855E6A9D21676
Certificate serial:       35D0F710A214043C83BE509A992D1473ABF31E18
Authority key identifier: E2:18:C0:1D:A9:73:A8:B3:E7:21:60:95:AB:88:55:E6:A9:D2:16:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa
Signing time:             Thu 20 Aug 2026 23:20:30 +0000
ROA not before:           Thu 20 Aug 2026 23:15:30 +0000
ROA not after:            Thu 19 Aug 2027 23:20:30 +0000
asID:                     264934
IP address blocks:        168.232.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:f7:10:a2:14:04:3c:83:be:50:9a:99:2d:14:73:ab:f3:1e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E218C01DA973A8B3E7216095AB8855E6A9D21676
        Validity
            Not Before: Aug 20 23:15:30 2026 GMT
            Not After : Aug 19 23:20:30 2027 GMT
        Subject: CN=897A430C28CA9DABE326B4FD0A09E936DF3E8E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:52:70:aa:3c:ca:92:20:91:66:49:46:49:
                    de:99:f5:fa:3f:31:25:80:88:d6:63:87:92:b0:ef:
                    c4:86:98:8f:30:d6:4d:09:37:2a:e4:0c:da:72:44:
                    ff:f1:05:2a:5e:c5:02:59:9e:dd:73:92:10:5f:fe:
                    61:71:22:c4:d6:7d:02:e3:18:b0:d1:8f:ee:c9:13:
                    5f:cd:0a:c4:6a:bf:39:d7:4b:2c:a4:ea:9a:2f:0c:
                    cf:21:97:bd:8e:71:5d:cb:a7:e7:5f:63:eb:c5:ae:
                    12:36:7d:0a:5c:05:f4:aa:1a:cb:90:b7:22:99:9b:
                    92:01:34:8a:0b:23:27:9e:27:7b:b8:d1:20:01:cb:
                    a8:62:e7:3a:dc:03:9f:30:62:3e:05:75:58:0e:b7:
                    1c:42:0e:d9:15:05:2e:9c:c0:c0:48:ce:7e:7d:ec:
                    b3:b1:33:81:4b:43:61:ab:af:7c:a0:01:53:67:f8:
                    e8:33:86:44:d1:41:76:89:e2:d7:49:81:cd:ae:cc:
                    ab:d6:d0:ba:cb:68:d9:fa:d4:cb:4f:5a:cc:20:5f:
                    aa:13:62:38:d7:d7:03:f0:b8:77:3c:0a:a6:7b:e6:
                    e9:21:c5:0c:ab:39:19:10:51:5b:97:4d:e0:9e:e6:
                    34:d5:f6:47:8e:d8:2c:64:d7:80:fa:7c:bf:77:a8:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7A:43:0C:28:CA:9D:AB:E3:26:B4:FD:0A:09:E9:36:DF:3E:8E:48
            X509v3 Authority Key Identifier:
                keyid:E2:18:C0:1D:A9:73:A8:B3:E7:21:60:95:AB:88:55:E6:A9:D2:16:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/E218C01DA973A8B3E7216095AB8855E6A9D21676.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E218C01DA973A8B3E7216095AB8855E6A9D21676.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:cc:ff:87:e1:b5:ac:80:04:91:0d:be:02:c6:d8:d6:31:
         ce:48:7b:27:6f:ec:ab:d0:6c:df:78:c0:12:a9:b5:93:0a:7d:
         2c:b6:4f:9a:27:5c:2f:51:b3:54:47:98:65:07:1e:da:d9:a4:
         7d:a2:11:e6:53:7c:73:7f:86:70:29:09:83:21:ae:34:8d:c1:
         f6:4d:01:e5:08:63:8e:c2:88:da:9a:a3:e9:8b:90:2f:fc:c0:
         a5:00:e2:b4:d2:43:54:5b:bd:ae:27:12:e9:79:2a:49:af:1e:
         73:45:f2:26:a2:dd:c4:77:a4:23:48:a3:de:99:16:1e:fe:4a:
         da:60:28:e2:58:65:ed:ed:76:a0:3a:96:31:b0:04:65:ec:f0:
         b6:80:9e:b6:43:94:93:9b:57:f8:6f:dc:2d:53:cd:ac:7e:89:
         76:96:3a:d5:0d:69:04:9f:95:fa:36:94:1e:8e:ff:d4:e4:fb:
         15:34:c6:39:26:46:c2:5b:ef:df:43:ad:ad:5c:3e:6d:3b:62:
         8f:cb:98:3b:cd:7a:64:00:65:4d:48:ff:46:d7:77:88:c4:a8:
         f8:15:78:09:d1:f9:d7:29:de:09:fd:67:9b:0b:11:24:4b:3e:
         d1:7e:a4:0a:86:9d:f2:12:50:8d:1d:94:35:f4:27:94:cb:58:
         cf:1a:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:15:40 2026 by rpki-client