Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32332d3233203d3e20323633303539.roa
File:                     3138362e3233322e3135382e302f32332d3233203d3e20323633303539.roa (raw, json)
Hash identifier:          BGlH4AkHwr7NOACR1y4rfiS9AZJFFmE0A7eRI4fdEvc=
Subject key identifier:   E9:FE:26:35:05:2F:71:FF:8B:5E:CA:9B:AE:5E:1E:5F:9C:CB:39:23
Certificate issuer:       /CN=60E5E85875AA425349FC348EA2ACB29313D099EC
Certificate serial:       3121324E37B4770106BB9025D62F5ADB562601CE
Authority key identifier: 60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32332d3233203d3e20323633303539.roa
Signing time:             Wed 26 Aug 2026 18:16:26 +0000
ROA not before:           Wed 26 Aug 2026 18:11:26 +0000
ROA not after:            Wed 25 Aug 2027 18:16:26 +0000
asID:                     263059
IP address blocks:        186.232.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl
                          rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 19:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:21:32:4e:37:b4:77:01:06:bb:90:25:d6:2f:5a:db:56:26:01:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E5E85875AA425349FC348EA2ACB29313D099EC
        Validity
            Not Before: Aug 26 18:11:26 2026 GMT
            Not After : Aug 25 18:16:26 2027 GMT
        Subject: CN=E9FE2635052F71FF8B5ECA9BAE5E1E5F9CCB3923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:1f:ba:0a:da:52:b2:d4:af:4e:1f:26:3c:
                    f5:04:1d:c8:50:9b:6e:12:82:5a:a7:be:30:8f:fe:
                    0f:75:d4:b2:88:94:96:9b:65:bd:f8:e8:bf:e3:b5:
                    13:24:53:4f:6c:32:36:c0:0e:19:3e:fa:8d:a2:c6:
                    03:b6:b4:bc:6d:d3:b0:ee:0b:e9:70:b2:01:bc:dd:
                    be:fa:0f:00:06:0f:34:b2:17:49:9d:4f:f5:73:27:
                    c6:68:8a:68:62:c7:98:9f:ae:a1:e6:60:f0:34:db:
                    59:e8:c6:d2:26:8c:e6:5b:2d:6a:d3:24:bd:6b:c4:
                    4c:51:fb:fe:b0:54:82:c5:55:6c:cb:c5:7a:65:9e:
                    b2:92:98:67:cc:9e:b2:9a:dd:02:c5:d2:02:28:77:
                    6a:77:95:1f:ec:10:44:61:85:03:13:68:c3:2a:60:
                    85:43:2a:a9:16:68:e3:8d:f9:c1:ce:f0:c2:c0:4c:
                    79:d8:c3:b4:f2:3d:51:9e:76:6f:19:06:ce:d2:d9:
                    ec:dd:96:01:27:cc:35:bf:af:c1:0c:ab:0a:b3:35:
                    24:e9:5d:e5:c6:d0:ef:40:ff:c2:88:17:0c:42:6a:
                    a0:60:e7:84:6e:f2:62:d9:0c:c4:74:40:0d:4f:91:
                    23:42:aa:fd:15:ab:01:53:90:6a:cf:64:98:d1:69:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:26:35:05:2F:71:FF:8B:5E:CA:9B:AE:5E:1E:5F:9C:CB:39:23
            X509v3 Authority Key Identifier:
                keyid:60:E5:E8:58:75:AA:42:53:49:FC:34:8E:A2:AC:B2:93:13:D0:99:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/60E5E85875AA425349FC348EA2ACB29313D099EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60E5E85875AA425349FC348EA2ACB29313D099EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tDno4MiufSHqKkEJn11K25QnrqsG17cVzmPLG3on6t/0/3138362e3233322e3135382e302f32332d3233203d3e20323633303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:18:bb:33:d1:41:49:b9:ef:80:ae:0e:40:34:93:b0:39:
         2c:8a:98:e0:aa:10:b9:65:1f:e9:4a:c6:de:90:54:67:97:88:
         7e:44:7a:b6:0a:80:d1:2e:15:dd:04:b9:d8:d6:fa:3a:73:36:
         24:da:df:89:37:f8:6c:71:c0:3f:46:25:ef:61:d5:10:33:1d:
         af:0f:59:95:f6:3d:e9:15:6d:bf:49:b2:92:5c:48:28:06:58:
         39:e3:b5:c2:46:8d:2b:f8:db:15:2f:c1:19:c1:6c:a8:c6:76:
         45:69:30:83:a5:83:da:63:d7:9b:ee:89:0a:4a:d0:80:51:70:
         34:37:cb:e3:a7:da:c9:4c:1f:c8:e4:35:24:b8:5b:89:1c:54:
         36:f3:c7:ba:8b:5a:56:65:f8:ea:64:7d:62:d9:d3:7a:bb:63:
         2a:01:e8:a1:39:b5:b9:48:78:7b:4b:53:f4:00:71:60:8a:22:
         a2:1b:38:19:c9:96:63:58:1c:64:c9:57:79:19:0d:8c:b3:f3:
         a4:36:fc:2d:60:fb:75:16:b8:9f:8e:80:6c:00:cf:ac:5b:dc:
         b2:88:bd:0e:60:6e:f8:da:87:d3:3e:5a:32:ad:fd:9d:d1:f7:
         89:44:d7:a1:64:43:60:6c:6b:a1:a8:cc:41:12:71:2b:da:f9:
         fc:2f:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:38:03 2026 by rpki-client