Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32332d3233203d3e20323635333435.roa
File:                     3136382e3138312e3231342e302f32332d3233203d3e20323635333435.roa (raw, json)
Hash identifier:          lk7+SHwnREijHU1kH3OOeIggr5D7ZSLB7kkqYVuKw3s=
Subject key identifier:   B4:D4:3C:99:38:7A:6C:54:19:2A:D0:63:12:68:C1:D0:9E:4A:46:4B
Certificate issuer:       /CN=22CDCEFFC5D6F7341E8D050F623112B324C5463F
Certificate serial:       1C903F0808BD423BC8B90A34753B279F2C36ABE5
Authority key identifier: 22:CD:CE:FF:C5:D6:F7:34:1E:8D:05:0F:62:31:12:B3:24:C5:46:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32332d3233203d3e20323635333435.roa
Signing time:             Sun 20 Sep 2026 14:35:37 +0000
ROA not before:           Sun 20 Sep 2026 14:30:37 +0000
ROA not after:            Sun 19 Sep 2027 14:35:37 +0000
asID:                     265345
IP address blocks:        168.181.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.crl
                          rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:90:3f:08:08:bd:42:3b:c8:b9:0a:34:75:3b:27:9f:2c:36:ab:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CDCEFFC5D6F7341E8D050F623112B324C5463F
        Validity
            Not Before: Sep 20 14:30:37 2026 GMT
            Not After : Sep 19 14:35:37 2027 GMT
        Subject: CN=B4D43C99387A6C54192AD0631268C1D09E4A464B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:05:5a:c1:8f:53:99:ce:17:cf:12:61:63:c8:
                    ec:f5:fb:c3:ee:d8:d7:d4:07:f1:51:df:ac:60:cb:
                    ee:5f:64:f4:d3:54:a2:e8:1d:b0:fc:ca:09:d7:1d:
                    68:97:84:09:e6:ef:9c:7d:70:c5:09:84:3d:0a:d0:
                    62:53:b6:31:da:89:1f:b8:83:81:10:32:63:a4:4f:
                    ac:e4:ef:32:b0:2b:ea:58:65:2f:86:5a:ae:3d:b0:
                    99:5b:75:20:51:c5:02:f3:43:1b:86:2b:9d:d4:99:
                    50:65:89:4d:52:7d:15:a4:76:8d:ae:42:72:6a:d8:
                    f5:f0:89:ab:cb:ae:10:93:f8:47:56:66:1a:e6:86:
                    1f:19:e9:02:d2:b4:4a:7a:6e:83:f6:11:54:29:a2:
                    c9:2e:7c:be:c3:ef:9f:b0:f3:3d:a4:32:70:d0:24:
                    54:ff:8b:47:b2:18:c9:a1:f5:db:e8:dc:d9:09:e1:
                    f1:42:1b:5b:6e:38:b5:10:eb:9a:8b:75:49:35:ef:
                    84:90:6b:d7:1e:66:28:b0:b5:f7:8f:a7:76:e0:0b:
                    4c:1e:90:b4:3a:45:c1:4a:73:6c:1c:ac:b9:e4:d5:
                    cd:dd:b4:1c:4c:4a:03:e8:b0:7d:3e:f7:f2:e4:ba:
                    c5:c4:86:1e:c3:30:c0:d5:5d:ca:f9:7b:9f:5c:55:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:3C:99:38:7A:6C:54:19:2A:D0:63:12:68:C1:D0:9E:4A:46:4B
            X509v3 Authority Key Identifier:
                keyid:22:CD:CE:FF:C5:D6:F7:34:1E:8D:05:0F:62:31:12:B3:24:C5:46:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32332d3233203d3e20323635333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b4:ef:49:5c:e2:4b:01:b5:3a:4d:4d:3c:67:e6:77:f2:46:
         81:78:67:8f:3f:87:41:d0:fe:79:09:a0:f5:ac:9b:9c:ee:33:
         5e:e9:b7:8b:41:0f:1c:64:6d:28:74:23:39:48:b1:08:a6:fb:
         fa:3b:4f:34:d4:eb:79:5a:35:06:61:cd:52:8c:ef:7b:53:80:
         95:64:18:63:60:ce:bf:61:09:1b:52:96:db:2b:cd:a3:77:46:
         fd:80:b5:48:ad:30:d9:e8:d4:e2:d9:00:50:20:78:54:85:92:
         11:22:8f:31:87:f9:c5:a0:8d:ed:e9:23:0d:19:aa:55:fe:2f:
         47:e8:72:23:31:a4:13:dd:d5:5d:1a:ad:ee:35:38:00:0c:50:
         10:d2:4c:06:e2:fd:5c:b7:97:c1:03:1f:3e:63:62:e0:a8:d1:
         00:5d:0b:99:2a:a0:ff:14:70:73:f4:ac:2a:3c:d1:84:09:e5:
         94:d5:4c:2c:d1:e3:e4:c2:e3:18:ad:e7:5b:ee:57:8a:68:cb:
         58:67:f0:db:38:c3:1f:f5:23:85:1e:63:a6:27:48:40:a6:f7:
         07:21:32:45:5f:a8:5f:00:0c:23:0b:eb:18:ea:b7:7d:95:1a:
         ff:f0:4b:4f:83:b4:44:ad:8e:71:5a:cb:71:25:db:10:25:7f:
         f1:9f:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:28:52 2026 by rpki-client