Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
File:                     3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa (raw, json)
Hash identifier:          dNUqhUezj4T5UrtKIFbpRDR5ll0Jy89Qfql+aXWK+Fs=
Subject key identifier:   96:80:CF:4F:2F:E7:E2:4C:FC:60:0E:F1:B1:74:47:F7:DF:6C:75:A1
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       12E3FC2B0E410EAD966AC43799D996A90A66B353
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:16:21 +0000
ROA not before:           Wed 26 Aug 2026 18:11:21 +0000
ROA not after:            Wed 25 Aug 2027 18:16:21 +0000
asID:                     263059
IP address blocks:        186.232.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 19:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e3:fc:2b:0e:41:0e:ad:96:6a:c4:37:99:d9:96:a9:0a:66:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:11:21 2026 GMT
            Not After : Aug 25 18:16:21 2027 GMT
        Subject: CN=9680CF4F2FE7E24CFC600EF1B17447F7DF6C75A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:cf:f9:c2:4a:23:10:4e:d2:8a:57:ec:96:
                    a4:6c:a9:9a:cb:a2:8a:ac:b7:04:0d:fe:63:7c:f7:
                    38:c2:b1:0d:43:9e:63:13:6e:a8:6b:0e:06:e6:7b:
                    3c:b1:04:a0:2d:e8:2b:cc:ac:18:98:ce:35:e0:78:
                    17:da:3b:44:03:ab:10:fb:ab:59:48:0e:80:11:3b:
                    c1:b4:27:a6:35:b0:a6:7e:b7:af:e9:c2:f0:9d:56:
                    d4:ed:b3:ae:a6:d3:26:bc:88:69:93:7f:cf:94:e6:
                    8e:4e:9b:f5:09:18:ec:a2:d0:9f:01:29:bc:95:4e:
                    77:98:e0:94:e1:4e:3d:d4:d2:2b:4a:f4:dc:3e:f5:
                    a1:c5:61:f8:d7:a0:74:86:c0:b2:81:3a:82:9a:16:
                    56:c3:3f:86:a0:56:61:d6:5c:a7:2c:79:1a:d3:0b:
                    04:1a:1a:50:b8:78:99:a8:4d:fe:b3:0c:18:15:91:
                    e8:a5:9b:e0:cf:3b:a4:9e:e9:01:88:43:cf:46:35:
                    3d:ce:5f:29:6e:4e:95:95:fa:83:d0:3d:d3:4a:a7:
                    c9:4e:07:38:0f:65:5c:0b:bd:24:e1:9f:76:f3:a9:
                    74:fb:ad:e8:fb:93:c8:98:dc:33:99:eb:b9:11:52:
                    0e:af:ca:f6:0c:46:99:3b:4c:b0:07:03:76:b9:2b:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:CF:4F:2F:E7:E2:4C:FC:60:0E:F1:B1:74:47:F7:DF:6C:75:A1
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135362e302f32322d3232203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:40:4c:f5:0d:01:f0:89:f9:c4:7c:32:4e:58:b1:a1:d1:bc:
         69:3f:ff:65:94:ea:17:d5:cb:e5:f2:3a:66:53:66:b2:be:73:
         c3:4d:4f:a0:4c:47:78:ba:82:ca:15:00:d2:c1:1e:51:84:10:
         52:7d:34:5d:07:d3:10:df:84:41:a8:6a:80:a5:12:d2:9e:e1:
         8b:5c:d8:bb:28:ef:f2:25:a2:6b:2b:c1:9b:12:65:dc:c8:d3:
         2a:23:79:24:0c:f0:35:2a:83:bf:23:c8:41:ce:a8:1b:e4:9e:
         f4:7d:c1:8a:7d:d7:34:51:83:22:23:fc:0d:80:48:10:6f:56:
         5b:2e:76:1d:cd:a0:1b:3d:ae:58:e0:9d:18:dc:bd:d5:71:05:
         12:53:3c:97:27:5b:7d:a2:c6:6a:11:43:dd:7a:3c:85:91:a6:
         70:35:6c:d4:6e:ce:2c:8e:22:d2:bc:08:88:bf:03:49:b1:49:
         57:bf:c3:cf:e5:b2:01:4d:d5:62:99:14:bd:d0:5f:74:6f:09:
         1c:1b:56:4b:7c:4e:27:a6:b7:25:6e:2a:35:7b:94:90:47:bd:
         9d:b5:74:c5:0f:00:00:dd:41:52:ff:d9:4b:34:a0:94:fa:20:
         4f:f7:7a:90:cf:f6:0c:99:60:b0:32:90:1b:8a:c8:fd:b6:c9:
         23:c3:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:39:12 2026 by rpki-client