Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36332e302f32342d3234203d3e20323634393334.roa
File:                     3136382e3233322e36332e302f32342d3234203d3e20323634393334.roa (raw, json)
Hash identifier:          ruJf/FrM9NQbdKwPigkavqUNYWGbf5l0Gm4UeWfkovY=
Subject key identifier:   33:31:F9:08:65:01:5D:01:05:34:4C:BE:E7:87:A5:6E:DF:55:6B:CC
Certificate issuer:       /CN=86DDB7C72F5357A9758F963A9236F982FD87D824
Certificate serial:       627BEC31B4A7E80F0B0D3F6D9E05FF8E83611794
Authority key identifier: 86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36332e302f32342d3234203d3e20323634393334.roa
Signing time:             Tue 01 Sep 2026 16:03:40 +0000
ROA not before:           Tue 01 Sep 2026 15:58:40 +0000
ROA not after:            Tue 31 Aug 2027 16:03:40 +0000
asID:                     264934
IP address blocks:        168.232.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl
                          rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7b:ec:31:b4:a7:e8:0f:0b:0d:3f:6d:9e:05:ff:8e:83:61:17:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86DDB7C72F5357A9758F963A9236F982FD87D824
        Validity
            Not Before: Sep  1 15:58:40 2026 GMT
            Not After : Aug 31 16:03:40 2027 GMT
        Subject: CN=3331F90865015D0105344CBEE787A56EDF556BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:19:bf:6d:6e:73:2c:23:d4:20:e0:67:20:b6:
                    47:7e:1d:d1:65:06:a0:3a:43:24:99:3a:db:fd:bc:
                    7f:4c:d7:59:d4:4e:6e:49:bc:8e:50:33:ca:81:d2:
                    a1:d5:71:a4:ef:d4:3c:07:83:68:15:9e:2b:c8:4c:
                    ba:90:65:5d:5c:3d:46:10:d3:4a:4a:a8:71:e1:b2:
                    ba:05:a6:60:57:cc:63:d0:4f:d7:34:55:f6:ec:ba:
                    25:5a:e4:c4:7d:9a:83:5d:b7:93:d3:8b:b2:5c:ef:
                    63:7b:88:8c:86:70:af:d1:b7:00:88:b1:6b:9d:65:
                    3b:fe:29:41:2f:2f:90:7c:98:40:3d:bb:36:89:60:
                    dd:f5:d4:28:17:61:3e:80:b4:9c:96:29:7b:d1:1d:
                    cb:f8:56:1e:9f:60:ed:e3:ee:08:17:4d:26:7b:2e:
                    18:0d:63:5f:39:c8:55:ad:db:f6:7c:3f:73:2c:96:
                    c9:71:32:75:84:e3:85:f9:0c:5c:f9:3d:91:ab:4a:
                    24:9e:11:0d:95:85:1f:6d:73:03:6d:41:99:26:dc:
                    4c:14:93:1e:f7:15:55:28:ae:17:bd:41:ce:cb:d3:
                    58:4e:29:5a:33:26:1c:de:d0:1f:ee:7c:fc:07:5a:
                    48:17:d1:f4:55:ec:f1:ce:86:7d:74:53:80:ae:d7:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:F9:08:65:01:5D:01:05:34:4C:BE:E7:87:A5:6E:DF:55:6B:CC
            X509v3 Authority Key Identifier:
                keyid:86:DD:B7:C7:2F:53:57:A9:75:8F:96:3A:92:36:F9:82:FD:87:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/86DDB7C72F5357A9758F963A9236F982FD87D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86DDB7C72F5357A9758F963A9236F982FD87D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HXqmo1GaQonyG786h5jXwg8YBGLsx3DhcQytcXLdfxY/0/3136382e3233322e36332e302f32342d3234203d3e20323634393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:f6:b8:98:51:ff:e6:55:36:91:c2:74:a2:e3:73:f2:16:
         0e:95:76:58:3d:1b:c0:7f:1e:fa:5e:9c:a6:7b:f3:b0:b8:fd:
         12:86:5e:08:b9:ab:42:96:3f:6f:c3:53:6f:4e:30:5f:b2:85:
         89:be:cf:c9:51:ef:f4:2c:ad:bc:a0:e5:66:3f:90:20:b0:8e:
         21:5f:0d:c7:ac:dc:23:a1:f7:90:1d:d1:9d:47:45:b2:5a:82:
         03:91:8f:2d:24:4a:05:fb:e5:db:66:39:04:a2:8b:8c:77:90:
         61:ad:c1:19:00:91:97:92:4f:14:cd:da:71:c4:c9:e2:64:ad:
         c3:d5:35:a7:bc:91:05:c3:d1:cd:35:61:94:5d:50:89:42:7c:
         0c:84:76:89:af:2c:96:1c:7d:fd:b3:8b:65:c2:c9:27:ef:77:
         63:2c:bd:cc:e4:eb:4d:f6:a8:37:bc:fe:9c:70:5f:c0:77:6e:
         c8:d7:95:b1:59:b1:44:41:44:04:25:00:fe:d3:bf:3c:35:c9:
         83:39:be:75:0c:28:a6:30:09:f6:88:54:1b:50:a7:09:f1:d2:
         4b:ea:6c:74:4e:3d:62:9f:b5:76:23:b3:e0:39:14:40:a5:5d:
         c9:7a:5c:9a:b6:86:1d:12:a8:44:44:a7:57:17:6c:2c:23:2b:
         8c:cd:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:37:39 2026 by rpki-client