Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/3136382e302e3131322e302f32332d3332203d3e20323635323439.roa
File:                     3136382e302e3131322e302f32332d3332203d3e20323635323439.roa (raw, json)
Hash identifier:          24d8OU4knP9qUesPGcAykDQ5w8O3Xt3je9IVMs+bun4=
Subject key identifier:   D9:F9:9E:7B:14:63:DB:25:29:3C:F8:B4:7D:31:D1:70:D0:34:D7:80
Certificate issuer:       /CN=8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA
Certificate serial:       6F24051F177B0E131A5B67D3E7E513E4381A5FB0
Authority key identifier: 8A:81:40:AD:EB:24:48:B4:DA:A4:B7:B0:60:06:FF:97:B3:D6:70:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/3136382e302e3131322e302f32332d3332203d3e20323635323439.roa
Signing time:             Wed 17 Jun 2026 11:45:29 +0000
ROA not before:           Wed 17 Jun 2026 11:40:29 +0000
ROA not after:            Wed 16 Jun 2027 11:45:29 +0000
asID:                     265249
IP address blocks:        168.0.112.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.crl
                          rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:24:05:1f:17:7b:0e:13:1a:5b:67:d3:e7:e5:13:e4:38:1a:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA
        Validity
            Not Before: Jun 17 11:40:29 2026 GMT
            Not After : Jun 16 11:45:29 2027 GMT
        Subject: CN=D9F99E7B1463DB25293CF8B47D31D170D034D780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:d6:21:45:0b:08:d1:fe:d7:2e:af:a4:e6:
                    18:7f:af:00:49:a6:33:2a:83:a3:9b:0e:ac:52:8c:
                    8c:d1:9e:a2:f2:d0:52:eb:4d:e2:06:cb:ee:7a:75:
                    d3:8f:b1:13:a2:d8:32:33:ea:9e:87:86:de:76:14:
                    d4:94:a2:03:3d:ef:e1:ad:e6:6c:b1:9a:3d:e7:a4:
                    54:bc:dc:af:aa:33:98:b0:2c:b5:dc:10:f2:6e:21:
                    92:ee:b6:ba:3d:0a:2a:fc:7a:fb:20:7c:3c:52:2c:
                    8b:ce:43:68:08:b4:8e:bc:4c:22:da:41:4c:62:08:
                    a3:2d:d6:c0:af:8f:97:95:0f:db:72:4e:9f:4c:ad:
                    f9:b9:2a:88:a9:89:8d:7d:b2:eb:09:06:f7:43:78:
                    52:50:9c:39:c6:75:9d:11:e7:5e:65:f3:4e:18:4d:
                    3f:0a:35:85:d7:80:ba:3a:f8:b2:15:af:63:d7:38:
                    31:9e:d1:4e:2b:51:80:6d:57:24:77:5e:2b:7a:16:
                    c7:db:f4:8d:4e:7c:da:f2:45:31:99:6e:8c:ab:15:
                    68:59:7a:8c:42:50:34:96:c0:80:08:e2:56:7f:ac:
                    10:e7:23:72:16:fe:42:a3:89:0a:13:48:26:d9:94:
                    90:e0:15:99:0f:e5:1d:37:a2:6d:1d:d6:3b:6b:a6:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F9:9E:7B:14:63:DB:25:29:3C:F8:B4:7D:31:D1:70:D0:34:D7:80
            X509v3 Authority Key Identifier:
                keyid:8A:81:40:AD:EB:24:48:B4:DA:A4:B7:B0:60:06:FF:97:B3:D6:70:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A8140ADEB2448B4DAA4B7B06006FF97B3D670AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62XfWzRCP9rQxb8kV3DRCbaGm8H3ZSh8ney2uZFaX8gv/0/3136382e302e3131322e302f32332d3332203d3e20323635323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:92:e0:7c:7d:7e:83:c5:ba:20:6d:44:90:ab:a4:34:de:78:
         b1:1b:63:43:f7:42:5d:13:b9:89:96:9c:ad:ee:d2:b3:ce:3b:
         44:0a:82:a0:d7:de:b9:91:7e:7b:35:9e:af:bb:e6:60:fb:8b:
         f0:9d:7b:46:33:ba:14:bb:d9:1e:1c:55:b6:f2:c8:96:1e:29:
         8b:5c:0e:43:62:ff:e0:02:67:8e:9e:67:c1:80:1d:90:ba:62:
         e8:9a:3b:20:8b:5e:80:70:46:a9:c6:fd:13:db:f9:9c:3e:08:
         c9:e8:1e:98:0e:9e:d2:6d:a2:25:1d:51:52:54:06:3c:30:8b:
         60:85:ca:4e:38:e2:88:50:49:bd:35:35:7f:c5:02:b7:bc:3d:
         33:85:8f:11:1e:d3:21:15:8f:b4:bc:f4:37:24:f8:0e:56:44:
         2f:b5:f6:8b:f9:b0:f6:60:94:63:8b:f4:a0:5f:85:c1:54:2a:
         d0:f5:e2:4f:ba:e6:fe:f0:56:c8:a4:b9:16:5b:81:aa:77:d8:
         ea:b3:25:55:33:3e:b4:67:1a:b0:e0:09:ae:10:6a:f2:cc:fa:
         7e:1c:df:c6:9a:f4:08:2a:c7:f7:d3:24:98:12:2e:f2:5a:31:
         ae:67:c6:95:ba:3d:38:c3:54:f1:62:1a:00:21:0d:12:2f:d5:
         d1:42:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:13:06 2026 by rpki-client