Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32342d3234203d3e20323635333435.roa
File:                     3136382e3138312e3231342e302f32342d3234203d3e20323635333435.roa (raw, json)
Hash identifier:          xlyVIDebBYmjbh1rGLav14rQlrtP6QhrZjHv/seNLYQ=
Subject key identifier:   B5:FD:26:7F:E1:08:BB:7D:90:71:AB:8C:94:8C:37:87:DD:84:DC:CC
Certificate issuer:       /CN=22CDCEFFC5D6F7341E8D050F623112B324C5463F
Certificate serial:       2BDEBC5A4A08EDEFAC09F89B9BCBD52E3F8A10D3
Authority key identifier: 22:CD:CE:FF:C5:D6:F7:34:1E:8D:05:0F:62:31:12:B3:24:C5:46:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32342d3234203d3e20323635333435.roa
Signing time:             Sun 20 Sep 2026 14:35:36 +0000
ROA not before:           Sun 20 Sep 2026 14:30:36 +0000
ROA not after:            Sun 19 Sep 2027 14:35:36 +0000
asID:                     265345
IP address blocks:        168.181.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.crl
                          rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 08:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:de:bc:5a:4a:08:ed:ef:ac:09:f8:9b:9b:cb:d5:2e:3f:8a:10:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CDCEFFC5D6F7341E8D050F623112B324C5463F
        Validity
            Not Before: Sep 20 14:30:36 2026 GMT
            Not After : Sep 19 14:35:36 2027 GMT
        Subject: CN=B5FD267FE108BB7D9071AB8C948C3787DD84DCCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:af:0a:5d:e8:35:c3:7d:d2:d6:35:0a:18:
                    fb:b7:42:d0:73:95:e2:3e:81:f3:6e:4f:cd:e9:23:
                    3b:4a:7b:25:e3:19:75:86:69:f1:17:9d:93:96:f3:
                    94:f1:cf:95:98:60:91:1d:99:ab:31:4e:f0:3a:24:
                    38:b2:82:fc:56:da:c0:88:3b:74:b7:8e:c5:59:f8:
                    3e:2d:b3:4a:66:9a:d5:82:de:e6:2a:b8:55:e3:dd:
                    3a:60:37:06:14:73:f2:83:0b:e9:54:34:c2:b5:c1:
                    c1:29:e0:7e:ad:aa:2c:ff:0b:c0:a5:8a:8e:93:10:
                    4e:ce:72:e5:fd:30:d2:a1:63:59:e2:c3:51:66:33:
                    0f:67:57:23:00:18:00:dc:0b:2c:7f:56:6b:ae:4c:
                    d9:78:7b:f3:05:ce:97:e2:a2:89:42:bc:57:9e:d6:
                    f7:eb:41:7f:b9:36:b0:9a:8f:9d:0d:51:1f:c1:c5:
                    ee:da:d4:4c:d7:a0:15:8b:31:b4:bb:94:c5:02:bd:
                    05:a6:ea:72:b8:6d:21:2b:51:cd:de:4e:04:b3:5b:
                    80:fc:30:2a:21:7d:9b:22:21:97:a8:1f:96:f1:5d:
                    fb:a5:91:06:9b:cc:15:49:27:86:0f:a4:78:6b:2f:
                    ec:9a:96:4a:c4:33:ed:55:3d:78:b3:2f:fa:48:b0:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:26:7F:E1:08:BB:7D:90:71:AB:8C:94:8C:37:87:DD:84:DC:CC
            X509v3 Authority Key Identifier:
                keyid:22:CD:CE:FF:C5:D6:F7:34:1E:8D:05:0F:62:31:12:B3:24:C5:46:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/22CDCEFFC5D6F7341E8D050F623112B324C5463F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CDCEFFC5D6F7341E8D050F623112B324C5463F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y3JgxxepACA73NUxNCsyq45gpW8p1LvSSJnjxZFwxHe/0/3136382e3138312e3231342e302f32342d3234203d3e20323635333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:be:08:25:4a:f8:8f:5a:a1:94:69:3e:81:65:98:44:1e:38:
         99:a0:6d:45:d8:5c:b3:01:0b:3e:0c:42:3c:5c:19:43:81:ed:
         9e:b4:c7:03:50:fb:5e:19:84:ae:8d:7b:06:9a:d6:14:3f:5f:
         1f:b8:af:20:94:e9:ed:91:62:ec:f8:60:0c:47:e1:33:fe:0f:
         ba:35:e9:6a:58:a0:d8:f0:67:5c:9f:9f:d3:62:b7:6e:a5:0d:
         b4:64:92:6b:6b:03:7a:ba:f1:b6:09:4f:d3:95:9e:2d:ce:a9:
         4c:dd:71:13:36:37:53:25:0e:24:d2:fd:e4:14:5a:d2:de:cb:
         39:15:78:d4:3b:c0:0e:97:10:7c:24:e4:01:ad:c0:e3:cd:bf:
         5c:8d:5a:b0:5b:7c:1f:0c:a3:e4:b3:3e:17:69:81:a3:af:ea:
         fa:4f:00:bc:30:38:57:af:70:1e:97:64:75:00:99:c8:00:2e:
         37:c8:c7:82:51:02:54:de:d0:57:43:1b:21:22:df:c0:43:3e:
         82:d7:8e:36:da:5d:34:88:6e:62:a2:94:00:cd:b9:25:b2:c8:
         eb:2a:17:6c:c9:08:35:c3:2b:03:d0:39:ac:91:3b:17:61:3b:
         f3:f0:3b:ae:37:ea:f3:8c:f2:7a:ef:69:9a:b5:c7:fb:7e:0c:
         19:29:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:11 2026 by rpki-client