Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa (raw, json)
Hash identifier:          9XPYIpVin8vsEMIbKj60jod79nRfRlqPLVxQgC2WvTA=
Subject key identifier:   DB:A9:AE:A7:E4:46:DA:E7:98:23:84:6D:93:B0:1E:79:EC:DB:93:03
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       123CB025903EC851F544D6127D2255EFF99CDDD9
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa
Signing time:             Thu 20 Aug 2026 13:01:10 +0000
ROA not before:           Thu 20 Aug 2026 12:56:10 +0000
ROA not after:            Thu 19 Aug 2027 13:01:10 +0000
asID:                     265158
IP address blocks:        167.249.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 08:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3c:b0:25:90:3e:c8:51:f5:44:d6:12:7d:22:55:ef:f9:9c:dd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Aug 20 12:56:10 2026 GMT
            Not After : Aug 19 13:01:10 2027 GMT
        Subject: CN=DBA9AEA7E446DAE79823846D93B01E79ECDB9303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:0e:39:29:6d:12:d5:55:5d:bf:6f:c6:19:
                    a6:e5:89:18:18:1b:c2:58:b8:29:3a:7a:89:8e:bb:
                    d1:7e:66:29:83:0f:b2:2a:f7:0f:05:22:25:dc:0d:
                    25:80:40:60:87:16:e0:fc:d8:c8:9d:2a:ee:79:02:
                    a9:5c:52:61:e5:49:a8:1b:23:e6:ec:08:70:15:db:
                    d0:14:fc:e3:0c:f5:8e:90:f7:4a:9f:8a:17:b7:a9:
                    7a:9e:48:08:1e:42:88:4c:2c:28:51:50:39:08:69:
                    f2:11:a2:eb:63:8b:8b:ac:04:27:ed:ca:0b:75:ec:
                    07:74:a2:ef:ee:0e:35:64:19:a1:f2:f5:4a:20:9d:
                    dc:ff:4b:27:8f:e4:ab:4f:76:8e:2e:5b:c7:80:97:
                    ef:18:17:c4:39:4a:c9:67:1d:06:64:e3:7d:bb:b3:
                    ec:ad:7e:f1:e9:24:47:52:92:96:93:d4:1d:a6:9d:
                    89:f0:7f:18:5a:2f:19:70:78:27:58:82:34:74:c3:
                    b5:e7:6a:58:51:99:d7:65:16:5f:07:a5:11:13:91:
                    f1:b6:da:a5:a8:51:02:89:42:1b:8a:68:d1:a6:1f:
                    2d:70:74:81:43:be:37:66:08:a7:81:3e:bc:84:36:
                    9d:88:76:90:9c:75:7a:e5:56:bf:f5:73:29:e8:27:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:AE:A7:E4:46:DA:E7:98:23:84:6D:93:B0:1E:79:EC:DB:93:03
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32332d3233203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:a8:d0:df:e0:d4:63:48:ea:12:58:91:03:e6:40:90:38:3f:
         62:c5:01:31:14:5e:50:fe:bd:92:f2:fd:19:52:6f:74:6e:6f:
         86:df:c4:f6:89:cc:90:b7:60:ed:68:2b:00:9b:42:88:64:b8:
         1f:07:41:d9:41:95:3f:0a:e6:10:5c:85:ca:22:ff:fd:0c:59:
         6d:e3:b4:bf:82:98:6f:e5:fc:7e:ed:53:85:88:39:42:50:5c:
         e7:47:96:33:09:77:39:07:66:79:f4:a5:dc:09:df:0d:5f:26:
         41:58:b6:c8:49:c0:94:b4:a5:87:6c:5b:e1:b9:3c:72:f4:48:
         f0:ce:af:93:fb:fe:93:a5:76:5f:43:1b:84:9f:6a:7f:48:57:
         8f:c9:7d:94:34:72:b4:1e:e8:17:e3:25:43:37:e2:25:69:b1:
         6e:b3:d7:0f:2d:27:b0:7c:91:e3:91:36:a2:9b:6c:49:88:d6:
         6e:ce:be:5f:cf:44:06:eb:92:45:1f:a3:c8:18:c4:a5:cb:e8:
         0c:47:e5:77:ee:07:ff:4f:a8:f6:81:8f:f3:b7:03:b2:86:4d:
         69:f0:1e:64:ad:46:9c:ca:d6:52:37:b3:dc:97:05:fd:81:f0:
         7c:5f:b7:2a:89:22:25:7e:9e:2e:27:0d:00:44:31:79:55:34:
         71:55:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 08:29:25 2026 by rpki-client