Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa
File:                     3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa (raw, json)
Hash identifier:          FjN+6dg9JWgB51OVnYP76RVZnEOCTa5WyojN42eJKSI=
Subject key identifier:   AB:2A:06:F9:36:BF:36:4F:1F:5F:34:A8:9E:04:78:0E:67:E7:EE:5C
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       2956FBD5D8B9E34F894172560EA1E64E3316B8C3
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:27 +0000
ROA not before:           Thu 30 Jul 2026 17:54:27 +0000
ROA not after:            Thu 29 Jul 2027 17:59:27 +0000
asID:                     264025
IP address blocks:        168.197.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:56:fb:d5:d8:b9:e3:4f:89:41:72:56:0e:a1:e6:4e:33:16:b8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:27 2026 GMT
            Not After : Jul 29 17:59:27 2027 GMT
        Subject: CN=AB2A06F936BF364F1F5F34A89E04780E67E7EE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:99:08:f6:ca:96:e7:b1:a2:ab:d3:a9:67:
                    5d:3d:8b:41:90:fa:b4:f9:02:28:75:84:2e:ca:b4:
                    15:98:d8:46:79:1f:75:25:55:fd:dd:8d:ff:81:70:
                    31:c0:69:3f:58:cd:ef:d7:70:a4:18:ed:ed:f2:81:
                    74:5e:5b:e3:66:7e:f1:30:6f:e1:e2:d2:d3:e8:0e:
                    c4:db:ba:52:e7:32:ee:ba:da:3d:b1:d9:13:ed:c7:
                    a4:81:e7:74:cd:dc:81:64:3f:6b:eb:53:07:1f:9c:
                    04:80:04:3e:c6:05:60:8a:13:e7:f8:0a:5b:fb:03:
                    d8:4c:7c:e2:a4:e3:3f:53:bb:bf:de:48:8c:8a:3c:
                    ca:9a:0e:08:6b:5d:99:83:df:0e:48:4f:ae:0b:6e:
                    ac:7c:40:00:4b:b2:be:03:6d:06:85:c9:52:f8:de:
                    27:69:8f:70:fe:0e:ef:6a:f9:35:a7:b8:72:78:64:
                    64:f4:89:13:ca:d0:fe:2e:39:67:66:60:c4:10:1b:
                    fb:4b:89:0c:5c:f8:a4:9f:0a:5e:2f:d5:49:0b:26:
                    e3:b6:be:5a:c6:4e:86:b7:37:c9:e3:07:35:e6:4d:
                    e5:7d:3c:46:ae:d9:8e:6c:9e:0d:05:20:83:8b:5a:
                    b3:94:ce:0a:58:6b:3a:17:f3:e9:af:a0:a8:05:0c:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:06:F9:36:BF:36:4F:1F:5F:34:A8:9E:04:78:0E:67:E7:EE:5C
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32332d3233203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:da:49:50:d1:2b:98:22:f5:35:21:be:30:dc:8a:4a:c1:e5:
         68:2c:cd:a5:38:6c:d2:b1:95:8f:c6:a7:07:3e:c4:0b:fc:7c:
         e3:fd:ff:17:7e:a2:69:e8:5f:c2:74:a6:8d:bd:05:c8:65:73:
         a8:18:cf:ca:86:f5:53:b4:1e:8c:42:31:00:b1:c2:d1:09:76:
         46:45:26:97:27:2c:b2:e4:c1:5f:ad:0f:ad:dc:f6:8b:58:e0:
         e2:d1:ac:b4:68:c2:e4:b6:f2:f0:bc:4b:87:22:bd:dd:3f:22:
         ec:c5:6a:44:d9:be:e6:e8:9e:3b:7d:b9:93:d3:59:f7:cc:0b:
         56:be:26:5e:4a:3a:14:80:e3:a3:4a:4d:21:9a:1b:5b:cf:13:
         d0:18:38:92:e2:d4:ef:19:31:59:de:96:b8:11:c9:61:3d:01:
         59:a5:96:44:bf:a8:8a:e5:d2:20:bc:c3:6d:46:09:c9:b0:65:
         b9:1e:6f:c0:2f:6e:50:9f:fa:25:70:05:b7:22:8a:ec:e5:50:
         71:08:d7:49:e8:be:a0:ff:55:aa:93:2a:a6:33:70:f4:5f:d5:
         7a:7d:52:3b:17:6e:c2:77:55:08:3d:93:3c:5e:f0:5c:82:eb:
         de:5a:76:ec:95:88:35:95:2b:73:21:b2:f2:d1:c3:45:64:79:
         4b:d9:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 05:33:31 2026 by rpki-client