Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          zAJsz8yXNcnPEU3ADWvd4PRMXzmRqd6fgVWGo2/S7OU=
Subject key identifier:   54:E9:FA:BE:0A:C7:EB:5C:5B:B0:11:6B:5B:70:52:6B:1A:9E:C3:96
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       34A707C3AA458A22EEBFB1A779CB3301D573CBE4
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 20 Aug 2026 13:01:11 +0000
ROA not before:           Thu 20 Aug 2026 12:56:11 +0000
ROA not after:            Thu 19 Aug 2027 13:01:11 +0000
asID:                     265158
IP address blocks:        167.249.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 18:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:07:c3:aa:45:8a:22:ee:bf:b1:a7:79:cb:33:01:d5:73:cb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Aug 20 12:56:11 2026 GMT
            Not After : Aug 19 13:01:11 2027 GMT
        Subject: CN=54E9FABE0AC7EB5C5BB0116B5B70526B1A9EC396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:64:5c:45:96:93:25:a4:69:a2:df:6b:a7:
                    ab:34:41:3c:ac:7e:c4:1c:c7:e7:af:23:e3:bb:53:
                    00:da:1b:af:bc:c7:18:52:46:c2:46:f6:55:b0:7e:
                    b3:ba:bc:9f:72:4a:ac:62:b9:2f:ae:62:ce:5b:f6:
                    65:46:65:b8:57:00:44:31:c8:62:3f:aa:ad:28:42:
                    d0:2c:b9:b9:22:90:cd:71:29:70:b4:dd:a9:74:ef:
                    54:96:d8:ab:03:19:57:ef:84:d7:cc:47:09:26:65:
                    d1:89:2a:83:74:f9:48:dd:d5:36:60:5a:91:8e:7b:
                    33:09:0d:d0:6c:a9:46:5a:fe:60:91:0e:dc:a8:e4:
                    f2:11:7d:90:75:f7:9e:7e:7d:fb:9b:c9:59:bc:a5:
                    b4:51:38:52:5b:2c:71:be:fb:66:59:e1:7b:f5:1e:
                    8c:34:a5:13:1a:04:a2:ba:ab:08:64:c6:1f:5d:b0:
                    dd:7b:ca:36:33:ac:24:5a:c3:a9:25:c6:29:bc:8f:
                    f7:11:ac:a1:f6:1e:94:19:37:2c:f4:9c:b5:13:25:
                    72:80:7e:e3:67:a5:24:36:71:2f:da:66:4f:c8:ac:
                    12:4f:a3:67:a8:b7:ff:17:39:8d:af:9b:a4:0a:de:
                    b0:3e:eb:cb:9a:93:30:9c:1f:de:4c:70:6e:80:e7:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E9:FA:BE:0A:C7:EB:5C:5B:B0:11:6B:5B:70:52:6B:1A:9E:C3:96
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31362e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9c:e0:8f:b0:3d:02:86:53:41:50:1e:48:16:bd:d6:17:92:
         89:27:39:5c:2a:6b:5a:78:ed:39:33:51:8d:46:17:1d:60:67:
         cc:27:59:76:97:dd:65:e4:ed:31:b3:c4:6d:5c:9e:a7:b7:24:
         51:43:7e:e1:f9:27:58:c1:97:02:9b:4c:ca:70:43:7c:22:bd:
         56:5d:88:bf:d2:86:74:0d:a9:5a:b8:58:83:81:12:56:bd:e2:
         41:3d:fa:bc:24:eb:25:78:a1:80:29:2e:b6:f0:a6:c1:7d:de:
         9e:79:21:29:7d:e8:5c:25:f5:5c:16:dc:88:50:11:21:08:50:
         a5:c8:3e:fd:c3:3d:8b:e5:95:c7:35:59:d0:3f:cc:a2:4f:05:
         ab:d0:b8:6c:c7:ee:3f:9e:3e:07:cb:05:36:15:f2:00:75:cb:
         1c:1d:d7:c4:c4:d2:dd:9e:0e:70:91:fa:0c:76:4f:44:dc:4b:
         4f:e6:21:94:0e:56:b6:dd:25:de:75:01:87:a9:ac:49:8d:bc:
         2b:ca:0a:67:89:5a:19:2a:b1:39:a1:1f:19:3d:20:d3:25:a3:
         11:5a:09:69:7d:e3:e0:0e:05:d2:25:91:71:5b:a1:cd:9b:f2:
         6c:25:48:aa:d8:70:a4:64:ea:c3:d8:60:e5:b1:ae:23:c3:51:
         13:d2:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 21:06:01 2026 by rpki-client