Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          949nOVtyvnY5Y/d1pMbsVUAnAEq0L9hAxN9txYWbEp8=
Subject key identifier:   FA:E6:69:E7:A4:E4:F8:93:68:EB:19:A9:0B:31:00:C4:5C:2C:EF:18
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       1E04F5E8B2D998AEBE40458AB76CE2F29708CF42
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 20 Aug 2026 13:01:11 +0000
ROA not before:           Thu 20 Aug 2026 12:56:11 +0000
ROA not after:            Thu 19 Aug 2027 13:01:11 +0000
asID:                     265158
IP address blocks:        167.249.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:04:f5:e8:b2:d9:98:ae:be:40:45:8a:b7:6c:e2:f2:97:08:cf:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Aug 20 12:56:11 2026 GMT
            Not After : Aug 19 13:01:11 2027 GMT
        Subject: CN=FAE669E7A4E4F89368EB19A90B3100C45C2CEF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5a:41:e5:31:45:74:f9:7c:60:4c:51:6c:8d:
                    e1:cc:ea:6c:ca:b2:ac:3b:fb:55:51:c0:2b:eb:04:
                    bf:78:2a:eb:5a:9f:0d:d4:e8:b4:0c:c9:2a:fc:f5:
                    1c:90:bc:79:16:d1:e3:7e:60:98:90:d3:85:4a:b8:
                    77:95:6f:7c:6d:dc:77:ed:65:e6:a5:39:75:7a:1e:
                    aa:f1:03:a3:ce:03:91:10:f3:b8:f0:c1:ea:00:17:
                    d2:54:2d:1e:0a:cd:3e:f4:a3:00:1c:6f:d7:d4:64:
                    4b:22:61:af:04:05:03:7c:17:16:d6:c1:ef:30:bf:
                    8a:13:6f:81:81:19:ca:e4:5c:ff:ae:2c:e4:07:1f:
                    73:83:5d:ab:63:5f:8e:a6:0b:fc:60:90:01:f2:48:
                    8a:98:a1:0f:eb:f6:6a:76:61:d0:9f:97:d3:d4:81:
                    a1:a8:4c:32:ee:f5:a6:d0:e4:48:bb:0b:70:e6:c5:
                    95:d3:a7:ef:4d:80:d7:c0:42:68:df:83:73:fb:f3:
                    8d:f9:7f:a1:3c:91:5b:61:8e:55:e5:38:20:38:7a:
                    60:cc:5b:05:95:c3:3a:cd:a8:ff:52:60:ef:d5:19:
                    e9:05:80:7f:33:bc:33:42:42:b4:43:74:6e:c5:97:
                    05:b5:bd:1d:bd:a8:e0:b0:17:71:3f:42:6f:c0:72:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:69:E7:A4:E4:F8:93:68:EB:19:A9:0B:31:00:C4:5C:2C:EF:18
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:4d:80:79:8e:6e:c3:d9:ef:81:77:35:6e:fc:53:66:34:55:
         7c:c5:83:a2:75:2f:0f:d8:65:d9:bf:cb:2e:cf:4d:2f:2d:31:
         d9:54:d8:bc:ae:cf:09:02:fb:6f:72:fd:96:d5:15:bb:a4:c5:
         a4:b3:24:ef:39:38:4d:c0:b8:ac:45:23:35:67:2e:26:a6:7e:
         98:b5:30:38:5a:5c:bd:ab:87:ec:cf:0e:3d:df:dc:36:27:2e:
         41:0d:4a:c3:35:24:7b:ea:b2:52:b6:e1:4d:fb:4d:af:48:2f:
         6b:cb:4e:b1:1b:81:f5:d4:7c:58:46:2a:fa:36:d7:7d:8d:73:
         5f:8e:7e:e6:0a:c5:44:35:25:f6:2d:71:6b:17:0b:8b:44:a3:
         6b:60:48:4e:d5:b2:b2:a1:f0:ed:f2:0d:6c:00:35:93:a1:b6:
         6d:3e:dc:df:76:4e:ba:5e:2a:e5:8e:c7:73:13:2b:b7:69:93:
         21:a9:f7:68:4c:f9:2c:c0:22:76:f1:9b:f6:e3:eb:f5:ea:eb:
         17:76:06:c9:18:7f:93:fe:3b:51:fb:36:4e:15:f8:c0:95:45:
         ad:39:35:f3:6e:b5:20:7d:30:0b:76:22:5d:af:71:60:09:bc:
         e0:ff:ee:62:c9:cd:c4:5a:22:d1:57:86:6f:65:86:e1:08:41:
         60:89:d8:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHgT16LLZmK6+QEWKt2zi8pcIz0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkUyNDc4MDlEQjJGODYyQ0QzODQ2Q0FDNEQ3Qzg3OTc2
MjlFMTg2NTAeFw0yNjA4MjAxMjU2MTFaFw0yNzA4MTkxMzAxMTFaMDMxMTAvBgNV
BAMTKEZBRTY2OUU3QTRFNEY4OTM2OEVCMTlBOTBCMzEwMEM0NUMyQ0VGMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWkHlMUV0+XxgTFFsjeHM6mzK
sqw7+1VRwCvrBL94Kutanw3U6LQMySr89RyQvHkW0eN+YJiQ04VKuHeVb3xt3Hft
ZealOXV6HqrxA6POA5EQ87jwweoAF9JULR4KzT70owAcb9fUZEsiYa8EBQN8FxbW
we8wv4oTb4GBGcrkXP+uLOQHH3ODXatjX46mC/xgkAHySIqYoQ/r9mp2YdCfl9PU
gaGoTDLu9abQ5Ei7C3DmxZXTp+9NgNfAQmjfg3P78435f6E8kVthjlXlOCA4emDM
WwWVwzrNqP9SYO/VGekFgH8zvDNCQrRDdG7FlwW1vR29qOCwF3E/Qm/AcqkXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+uZp56Tk+JNo6xmpCzEAxFws7xgwHwYDVR0j
BBgwFoAU/iR4CdsvhizThGysTXyHl2KeGGUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSExVV2NyOUU2YlJpcW1LdUFtSGRNYWRVdXg0YVYxS1JNREVUdlA2
bmUvMC9GRTI0NzgwOURCMkY4NjJDRDM4NDZDQUM0RDdDODc5NzYyOUUxODY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFMjQ3ODA5REIyRjg2MkNE
Mzg0NkNBQzREN0M4Nzk3NjI5RTE4NjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0hMVVdjcjlFNmJSaXFtS3VBbUhkTWFkVXV4NGFWMUtSTURFVHZQNm5lLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMTM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACn+REwDQYJKoZIhvcNAQELBQADggEBAHpNgHmO
bsPZ74F3NW78U2Y0VXzFg6J1Lw/YZdm/yy7PTS8tMdlU2LyuzwkC+29y/ZbVFbuk
xaSzJO85OE3AuKxFIzVnLiamfpi1MDhaXL2rh+zPDj3f3DYnLkENSsM1JHvqslK2
4U37Ta9IL2vLTrEbgfXUfFhGKvo2132Nc1+OfuYKxUQ1JfYtcWsXC4tEo2tgSE7V
srKh8O3yDWwANZOhtm0+3N92TrpeKuWOx3MTK7dpkyGp92hM+SzAInbxm/bj6/Xq
6xd2BskYf5P+O1H7Nk4V+MCVRa05NfNutSB9MAt2Il2vcWAJvOD/7mLJzcRaItFX
hm9lhuEIQWCJ2Gk=
-----END CERTIFICATE-----
Generated at Mon Aug 24 19:53:02 2026 by rpki-client