Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa
File:                     3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa (raw, json)
Hash identifier:          rLSiyen8X5LwqdENJl+YTZsknbNyc3UYTts3h7GwUdY=
Subject key identifier:   E6:2D:66:34:3A:3A:F7:00:2C:4F:49:75:A9:C8:A2:32:57:12:37:F3
Certificate issuer:       /CN=86DDB7C72F5357A9758F963A9236F982FD87D824
Certificate serial:       4CD31438AA87EA53E60F215EA1EF63F866F27584
Authority key identifier: 86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa
Signing time:             Tue 01 Sep 2026 16:03:39 +0000
ROA not before:           Tue 01 Sep 2026 15:58:39 +0000
ROA not after:            Tue 31 Aug 2027 16:03:39 +0000
asID:                     264934
IP address blocks:        168.232.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d3:14:38:aa:87:ea:53:e6:0f:21:5e:a1:ef:63:f8:66:f2:75:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86DDB7C72F5357A9758F963A9236F982FD87D824
        Validity
            Not Before: Sep  1 15:58:39 2026 GMT
            Not After : Aug 31 16:03:39 2027 GMT
        Subject: CN=E62D66343A3AF7002C4F4975A9C8A232571237F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:fc:1e:39:ac:53:05:01:99:43:12:7d:c9:
                    ea:24:da:ff:a9:35:3f:f9:1d:e9:27:1a:11:c7:d1:
                    6a:ee:df:33:e5:9e:51:db:aa:0a:04:d1:23:46:6e:
                    dd:c4:3a:07:19:3f:6c:64:45:ee:b0:eb:2c:16:06:
                    56:bd:40:61:27:94:51:6f:44:e5:c1:4d:db:71:93:
                    e5:31:2a:98:72:15:99:ba:00:31:0f:46:16:60:1a:
                    24:c5:f9:04:36:87:44:82:ed:ff:24:b5:29:2e:34:
                    09:97:13:66:e2:46:0f:47:13:3d:8b:62:9c:b9:0e:
                    ea:1a:30:cb:c3:fa:f5:21:99:c6:a6:f6:6b:c7:4c:
                    56:42:96:1b:3e:36:59:33:38:89:70:af:3d:0f:a4:
                    ee:ff:a0:43:3a:8c:05:75:09:c1:2d:b0:fc:47:8c:
                    b4:3e:7c:6a:19:0a:0e:41:ae:60:a9:f5:2d:7c:1f:
                    32:d4:9e:81:13:7f:a8:59:20:c7:de:48:bf:2a:89:
                    00:1d:f0:3c:91:6c:0f:7d:30:3d:a1:26:6a:42:f3:
                    de:f1:04:6b:8a:aa:9c:81:53:03:c9:94:d6:60:11:
                    dc:5b:09:8a:d7:4a:20:11:88:27:9f:c1:f5:32:87:
                    10:36:9a:bb:da:83:42:6d:8a:f2:67:3d:36:85:bb:
                    69:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:66:34:3A:3A:F7:00:2C:4F:49:75:A9:C8:A2:32:57:12:37:F3
            X509v3 Authority Key Identifier:
                keyid:86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36312e302f32342d3234203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:16:e3:a6:8e:c5:73:b7:a3:4e:26:14:ca:7c:d9:55:d7:9a:
         b8:a4:80:7e:ff:00:81:ba:d2:30:2c:b8:31:88:b6:bf:60:a0:
         db:00:1a:0d:1e:c2:66:e5:ad:af:8c:b1:ed:1e:cb:ab:43:97:
         e3:09:73:9b:13:cb:4b:1e:75:05:cb:b7:32:8a:28:16:6c:c0:
         ea:61:4d:cc:f3:20:c8:3a:85:60:b9:06:d4:f8:e6:1d:bd:af:
         bc:a1:7e:a7:e8:3e:da:ad:2a:85:e1:5e:59:b3:b9:5e:e6:27:
         d0:e3:fa:ae:36:84:e4:02:9f:34:d7:96:ab:42:b4:51:ae:3e:
         d0:3c:26:95:13:22:0a:e9:f1:9d:3f:53:59:d8:d8:90:0d:87:
         69:c0:5a:43:97:fe:20:20:0f:c3:ed:b5:eb:98:f5:8a:24:01:
         9b:4f:02:95:8f:be:a0:09:ca:c5:ba:df:26:ca:10:c5:f4:e2:
         63:46:f5:ab:64:5a:1e:0c:9c:27:4f:ca:65:da:7e:07:03:5e:
         d8:3f:9b:d6:eb:2b:1f:94:55:ea:1a:72:4a:95:b0:f0:6e:a3:
         52:82:5c:b3:65:06:c6:69:9c:1c:35:5c:65:c0:19:3b:ec:66:
         ad:5f:e7:bb:cf:52:35:34:17:e5:b3:e5:ec:cd:28:5b:57:20:
         83:67:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:47:51 2026 by rpki-client