Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          ktHXmeVQEsJXVkhwp2t8cJ4yoXGxRS0zX4AQ5MR2wbs=
Subject key identifier:   57:14:91:39:18:F0:41:6D:3F:A4:FA:91:58:F8:6E:D9:AC:24:90:58
Certificate issuer:       /CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
Certificate serial:       37C306E41A0F781B926DE1D800CBFF8412766704
Authority key identifier: B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa
Signing time:             Mon 28 Sep 2026 14:46:18 +0000
ROA not before:           Mon 28 Sep 2026 14:41:18 +0000
ROA not after:            Mon 27 Sep 2027 14:46:18 +0000
asID:                     265287
IP address blocks:        168.90.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl
                          rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 20:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c3:06:e4:1a:0f:78:1b:92:6d:e1:d8:00:cb:ff:84:12:76:67:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B13AB9B350577E0B11786B5653C71517FBFBD2E3
        Validity
            Not Before: Sep 28 14:41:18 2026 GMT
            Not After : Sep 27 14:46:18 2027 GMT
        Subject: CN=5714913918F0416D3FA4FA9158F86ED9AC249058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:77:08:fa:de:a8:da:74:74:8f:fa:6d:43:
                    f5:e3:23:3e:62:b2:58:56:cc:68:27:b7:fb:40:9d:
                    0f:df:71:3a:08:6b:47:c5:c3:7b:d1:e2:3a:ce:24:
                    05:f4:a7:a6:bc:b4:11:ad:de:c5:d4:3c:eb:f1:dd:
                    8c:8f:36:66:7d:7a:60:ee:7a:48:dc:91:38:63:98:
                    fe:dc:be:bf:e5:09:3b:fa:2f:83:4e:b0:97:c4:a7:
                    99:7f:30:78:d0:72:b6:0c:65:e6:f2:25:46:39:f6:
                    01:b1:3d:3f:af:ca:3e:7b:0c:89:4e:d8:12:8c:41:
                    d2:57:0c:8d:46:55:bd:8f:bb:b6:78:cf:be:35:30:
                    8f:61:8c:6b:73:c0:bb:e4:2f:dc:0f:d4:05:f4:af:
                    50:73:ef:79:b8:9e:3d:91:62:77:f7:c7:f5:8e:83:
                    33:2b:a2:23:40:45:b8:68:cd:aa:32:77:f2:91:7b:
                    1c:32:0c:a2:58:0a:41:cc:46:6b:f1:f1:c0:bb:21:
                    96:5d:28:64:aa:4b:7c:4d:d9:7c:3b:7f:dc:de:05:
                    d5:75:c6:01:03:bf:95:29:e0:97:18:d4:35:72:c1:
                    82:fa:c7:27:ea:70:57:3c:39:8f:71:7c:50:78:3e:
                    3e:96:e6:0a:97:2e:cb:61:c1:13:00:86:c5:4b:40:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:14:91:39:18:F0:41:6D:3F:A4:FA:91:58:F8:6E:D9:AC:24:90:58
            X509v3 Authority Key Identifier:
                keyid:B1:3A:B9:B3:50:57:7E:0B:11:78:6B:56:53:C7:15:17:FB:FB:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/B13AB9B350577E0B11786B5653C71517FBFBD2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B13AB9B350577E0B11786B5653C71517FBFBD2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:eb:57:82:17:1c:bc:68:8e:28:a3:ad:e5:5e:76:fa:95:
         bc:db:3e:ae:13:45:ed:23:7e:42:76:02:34:6a:e2:b1:80:4d:
         50:eb:70:a8:74:a0:62:a6:28:7a:08:33:be:35:c3:97:20:8c:
         f6:5d:08:81:16:eb:de:74:96:00:36:37:d3:80:44:28:75:1f:
         a0:6f:8e:29:bb:d4:61:c0:5d:5b:b1:e5:af:f4:78:5a:73:f5:
         b0:d8:9c:ee:f4:03:7b:ce:e5:ab:4a:19:8a:3e:41:06:9b:d6:
         cc:26:c1:cc:c3:88:57:bb:c2:f3:5e:18:42:73:00:3f:ee:4a:
         fa:3d:dc:19:7b:8c:21:0c:c9:0a:c5:35:11:48:61:46:c4:ba:
         b4:48:9d:39:40:2c:94:5c:7e:9d:fa:03:c5:f8:8b:8f:20:cd:
         b4:c9:2e:23:c0:b8:c9:8f:b7:07:2d:3c:22:0b:9d:22:e5:77:
         c4:25:ad:ab:98:2e:62:ba:08:4d:22:a5:b6:03:7f:c0:56:bf:
         f9:6d:c0:4d:aa:9a:c0:44:33:57:09:e7:e2:c9:80:35:48:35:
         11:0d:3c:a3:36:17:ed:62:be:14:05:18:3f:cb:48:eb:5c:a3:
         ac:59:5c:f0:9e:ea:01:e0:91:00:2e:c4:4e:3f:65:55:40:81:
         4a:2a:16:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:42:55 2026 by rpki-client