Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32332d3233203d3e20323634323131.roa
File:                     3133382e39392e3136362e302f32332d3233203d3e20323634323131.roa (raw, json)
Hash identifier:          kDnsQCj5hmX5uSWncx+z8Qnz7UgU6sAywAON4i4PdK0=
Subject key identifier:   E8:BB:FA:67:FF:70:F9:75:D9:A8:06:50:F3:38:17:D4:83:F7:7C:BD
Certificate issuer:       /CN=916B2689E54D248C6020BC30FDA122F25B14FE87
Certificate serial:       0C9A956D4C4FDB84BC55FCC741AB05D1A6C5E884
Authority key identifier: 91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32332d3233203d3e20323634323131.roa
Signing time:             Thu 30 Jul 2026 17:10:33 +0000
ROA not before:           Thu 30 Jul 2026 17:05:33 +0000
ROA not after:            Thu 29 Jul 2027 17:10:33 +0000
asID:                     264211
IP address blocks:        138.99.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl
                          rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:95:6d:4c:4f:db:84:bc:55:fc:c7:41:ab:05:d1:a6:c5:e8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916B2689E54D248C6020BC30FDA122F25B14FE87
        Validity
            Not Before: Jul 30 17:05:33 2026 GMT
            Not After : Jul 29 17:10:33 2027 GMT
        Subject: CN=E8BBFA67FF70F975D9A80650F33817D483F77CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:97:64:db:a7:01:9c:68:2e:54:e4:27:10:
                    6a:62:7a:71:40:21:8f:a7:2d:60:d7:91:15:13:da:
                    19:8f:ac:54:40:ee:ea:53:bd:16:f1:9b:f0:64:d2:
                    78:87:be:24:41:30:7d:6c:19:76:8e:5b:a0:f7:48:
                    bb:e9:c4:82:66:23:a4:b3:e4:37:f5:1a:f8:f3:e1:
                    da:59:23:64:93:9d:4b:1d:0d:06:4b:b5:c5:74:db:
                    8f:74:e7:36:7d:d5:91:46:20:c5:61:89:80:b9:52:
                    88:b0:8d:7f:a6:b2:ce:b9:18:18:3d:2d:cd:d4:62:
                    73:1f:50:e0:45:53:dd:2e:13:19:9e:65:58:26:1b:
                    8c:8b:9c:6a:a9:ba:e2:5d:05:83:0f:e4:b3:33:02:
                    ca:81:00:0b:92:34:f2:c3:a5:ee:7f:43:d3:6f:70:
                    21:c9:47:23:b7:e1:a7:6e:a0:d8:d5:f5:5e:ac:ea:
                    3e:ac:99:8a:6a:d9:05:a1:76:8a:53:4a:e8:8e:a9:
                    20:37:90:7d:2d:95:1c:a5:0f:db:01:e4:78:61:71:
                    58:99:2b:ab:8a:6f:89:8c:0e:a2:79:e4:ae:47:9e:
                    30:33:48:dc:d9:14:6f:25:27:a2:81:55:8a:98:b0:
                    55:ba:28:31:57:78:cd:bb:e4:3a:36:10:18:cf:a0:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:FA:67:FF:70:F9:75:D9:A8:06:50:F3:38:17:D4:83:F7:7C:BD
            X509v3 Authority Key Identifier:
                keyid:91:6B:26:89:E5:4D:24:8C:60:20:BC:30:FD:A1:22:F2:5B:14:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/916B2689E54D248C6020BC30FDA122F25B14FE87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/916B2689E54D248C6020BC30FDA122F25B14FE87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136362e302f32332d3233203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:25:99:8a:02:12:4a:33:21:69:a0:f0:d4:db:4f:21:c6:f2:
         dd:28:73:68:05:cd:7e:22:e0:13:f9:6f:5f:c9:d3:23:8e:5a:
         2b:16:d1:ec:98:b1:3e:9f:8b:46:3a:d8:c2:0f:17:6c:ec:93:
         be:c3:1e:8f:13:a5:94:72:04:29:b2:20:ac:25:ce:c3:32:a3:
         48:a8:43:af:b0:be:a1:3b:4d:96:ee:40:d4:82:f5:ba:69:6f:
         bf:5c:f5:8a:89:46:3b:8e:e4:f8:a0:d9:9a:3c:1f:8c:04:df:
         51:d2:2c:0d:02:cc:4c:eb:4a:94:cd:01:a4:1b:5d:90:7b:a8:
         da:fe:a4:3f:d4:fd:e6:63:15:63:46:ff:84:0e:63:d9:09:ad:
         71:05:60:49:4b:b8:65:a6:8e:57:6d:15:9e:51:f3:f1:c1:fd:
         48:0c:13:d8:71:c9:73:3d:9d:0b:50:01:b2:0f:b1:27:d2:fe:
         69:02:09:27:e5:d7:89:a2:d6:4a:4c:1d:52:29:26:1d:14:bd:
         5c:9d:8f:4b:43:ce:4a:8b:fc:dd:af:0c:ba:1e:fc:63:4a:b8:
         9c:3d:03:ea:3e:2b:89:9d:9f:30:44:fa:0a:ed:c5:2f:d7:ac:
         ab:8d:1c:aa:f1:66:54:a5:ce:0a:02:cb:da:98:9c:c0:d2:b1:
         e4:44:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:03:11 2026 by rpki-client