Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
File:                     3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa (raw, json)
Hash identifier:          6+K+oXzKL/5tFLn4szMwaJpZgR7uaPNgDU6ruSTBS7o=
Subject key identifier:   62:5F:88:AD:75:8C:52:5C:96:FB:75:C2:B8:1F:0C:EB:10:A2:C6:C4
Certificate issuer:       /CN=3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE
Certificate serial:       3F2BCB1E8B304A3F4BBCB5A7AF78E8CB7A3AC3D5
Authority key identifier: 31:46:C0:55:FE:8F:1E:F2:4F:8B:ED:F5:87:E8:48:C6:F0:F3:5A:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa
Signing time:             Thu 10 Sep 2026 13:04:59 +0000
ROA not before:           Thu 10 Sep 2026 12:59:59 +0000
ROA not after:            Thu 09 Sep 2027 13:04:59 +0000
asID:                     270287
IP address blocks:        200.115.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.crl
                          rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 12:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2b:cb:1e:8b:30:4a:3f:4b:bc:b5:a7:af:78:e8:cb:7a:3a:c3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE
        Validity
            Not Before: Sep 10 12:59:59 2026 GMT
            Not After : Sep  9 13:04:59 2027 GMT
        Subject: CN=625F88AD758C525C96FB75C2B81F0CEB10A2C6C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:be:1d:18:dc:db:0b:f7:f7:d5:f2:2d:11:
                    f1:4e:d3:ba:cc:b3:9f:a0:1f:98:80:be:97:d4:1a:
                    e4:a7:e4:45:4c:e9:66:df:f2:2a:fc:80:aa:8e:11:
                    0e:cf:64:f6:99:d9:95:60:a8:b7:fc:b1:86:ba:06:
                    bf:56:27:c2:27:ba:e3:3d:2a:6d:aa:e8:0e:f7:04:
                    b6:99:af:2f:21:16:fa:e3:08:07:06:c2:f0:fe:3a:
                    8b:0a:54:3f:a9:76:cd:5c:6b:81:eb:14:09:7c:d7:
                    37:54:49:63:cc:68:d3:17:1f:25:58:5f:bf:c3:6f:
                    83:86:1e:97:08:7a:46:6e:fe:b7:59:d4:68:92:85:
                    57:6d:28:36:03:d0:e3:e7:c7:a5:01:fe:36:16:5d:
                    1f:5b:de:b9:05:e4:2e:e0:dc:06:be:cf:50:e1:14:
                    0a:33:a3:c7:58:e3:05:1c:ce:46:d7:e7:3e:a4:30:
                    ab:95:94:ac:1b:6b:f8:b4:bf:8a:25:9d:a5:2a:2e:
                    97:db:24:a2:39:1f:7d:6b:d3:aa:5d:f3:f7:6c:bf:
                    4e:9e:5e:f0:06:ce:b3:a3:1e:36:68:7e:fb:06:d8:
                    a8:6a:7e:a7:f2:1f:2a:12:ae:be:1f:ee:88:a9:b2:
                    57:e2:58:9d:28:88:c2:7e:d6:0b:0a:c2:0d:d7:f7:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5F:88:AD:75:8C:52:5C:96:FB:75:C2:B8:1F:0C:EB:10:A2:C6:C4
            X509v3 Authority Key Identifier:
                keyid:31:46:C0:55:FE:8F:1E:F2:4F:8B:ED:F5:87:E8:48:C6:F0:F3:5A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3146C055FE8F1EF24F8BEDF587E848C6F0F35ACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CxfG1u38ASdqAD1UDZAaz7CiJw7zA3BHHLyXwLrpvsT/0/3230302e3131352e3130382e302f32322d3332203d3e20323730323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:d1:bb:d4:50:65:81:0f:03:16:6c:d4:c3:ba:f1:4f:64:
         b0:82:73:dd:46:76:00:2a:2a:61:f1:9b:18:af:c2:88:15:7a:
         3b:4c:05:d0:d3:31:17:6b:b8:58:ee:d5:ea:e2:34:85:19:12:
         f3:fb:cc:1a:c9:7f:3c:df:8c:56:df:d1:fd:e2:3c:86:e0:fb:
         f6:f7:0b:dd:08:22:90:81:88:c5:d2:31:78:24:2e:12:b9:c9:
         95:a3:ae:ef:65:c7:02:68:bd:a7:93:fc:e6:79:be:61:3b:9b:
         da:19:a4:ad:25:38:2b:9e:81:cc:bd:a9:48:0a:35:6d:c4:da:
         59:7d:7a:a1:b3:f4:62:37:d7:4a:f9:b9:10:24:5d:7b:d2:57:
         c3:7f:99:8a:e5:3c:cf:0f:1d:4d:ae:69:01:e0:f7:c8:2c:45:
         3f:37:7a:8a:68:6e:75:a8:3f:d1:b3:7a:4d:d2:13:34:aa:c1:
         5f:3c:e5:25:87:33:4b:23:b4:7a:c2:19:f2:24:56:dc:bb:22:
         c0:55:ea:3c:d8:a3:b0:34:3e:2e:c5:7c:1b:0e:1b:c3:98:39:
         f4:de:c7:39:68:ef:a0:1a:5b:53:ac:26:8c:e2:d8:2d:de:a2:
         96:bb:93:bf:a0:ed:cc:1d:42:35:1b:65:22:5b:17:49:b8:d0:
         41:a6:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 01:25:49 2026 by rpki-client