Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          koQ0VZinxlbKgO8IFIPtLWEERWoo2gpsltHRoU3mRuU=
Subject key identifier:   2A:B2:1B:2F:7A:E4:2A:9A:C0:7B:8A:26:70:3F:B5:1A:A3:A4:2F:83
Certificate issuer:       /CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
Certificate serial:       3E1AE7955F869A992EF9E460ED99DB72C0DFE6FA
Authority key identifier: FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa
Signing time:             Thu 20 Aug 2026 13:01:12 +0000
ROA not before:           Thu 20 Aug 2026 12:56:12 +0000
ROA not after:            Thu 19 Aug 2027 13:01:12 +0000
asID:                     265158
IP address blocks:        167.249.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl
                          rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1a:e7:95:5f:86:9a:99:2e:f9:e4:60:ed:99:db:72:c0:df:e6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE247809DB2F862CD3846CAC4D7C8797629E1865
        Validity
            Not Before: Aug 20 12:56:12 2026 GMT
            Not After : Aug 19 13:01:12 2027 GMT
        Subject: CN=2AB21B2F7AE42A9AC07B8A26703FB51AA3A42F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:0b:ff:45:9a:71:0e:8c:08:06:ed:51:df:
                    fe:56:7e:85:7d:05:6a:05:53:17:ee:91:44:28:a1:
                    37:f3:c2:e8:9a:b8:fc:11:a6:33:14:3b:9a:03:05:
                    f6:89:a9:20:ed:9f:57:37:5c:89:d1:3c:53:9c:d3:
                    2f:20:00:9e:a9:25:58:08:8c:11:5b:38:70:d6:da:
                    8f:9d:3a:6a:ac:92:f0:29:c8:1b:26:0b:59:8a:47:
                    c4:05:c9:b1:b5:58:c9:17:ec:fa:d1:c6:75:c4:fb:
                    38:0e:4e:f1:87:2c:4e:7a:61:87:94:b3:17:da:4c:
                    5a:65:ec:c2:7d:87:3f:bd:cd:04:90:63:da:72:20:
                    52:45:37:dc:cf:15:ca:70:d2:27:91:9e:2e:38:a4:
                    aa:4d:5d:51:9d:0d:70:a8:f3:ea:e0:14:e9:d5:57:
                    f2:03:17:0a:67:35:1c:a5:34:97:f6:86:e3:f4:d9:
                    6d:a6:98:8c:db:3b:da:6a:c3:0c:5b:16:e5:43:05:
                    a7:e7:f1:5d:70:f3:66:3f:8f:e1:a1:22:57:c0:73:
                    f3:f1:5c:ac:d5:c5:74:77:d3:3a:a3:c9:46:c3:f9:
                    35:29:f3:96:92:a5:85:68:5e:75:ff:af:b4:a6:44:
                    3b:03:98:7a:12:39:59:9b:61:63:6d:3e:9a:c2:bb:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B2:1B:2F:7A:E4:2A:9A:C0:7B:8A:26:70:3F:B5:1A:A3:A4:2F:83
            X509v3 Authority Key Identifier:
                keyid:FE:24:78:09:DB:2F:86:2C:D3:84:6C:AC:4D:7C:87:97:62:9E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/FE247809DB2F862CD3846CAC4D7C8797629E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE247809DB2F862CD3846CAC4D7C8797629E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/0/3136372e3234392e31382e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:43:d7:1e:92:af:32:d7:d2:d2:91:d0:13:36:0c:08:94:
         7a:3f:53:c1:9a:4f:c2:c9:bd:98:13:5a:d8:6c:72:a3:e4:c2:
         cf:90:1d:ec:b8:af:f7:c4:3f:5f:77:e7:13:48:3d:40:7b:54:
         2d:60:a4:77:d3:f3:64:33:54:50:d3:79:ab:b6:2c:48:90:63:
         ad:c5:91:f1:a6:ba:b9:c7:e7:b5:a5:7e:16:53:c7:62:b7:e4:
         d0:16:41:87:8b:74:73:14:9e:8f:a0:4e:d6:d3:56:c7:ec:a4:
         45:9a:70:29:43:62:50:3f:66:8c:77:b5:79:7e:af:b7:a9:b9:
         ce:64:99:d0:f3:cc:76:40:e9:12:61:38:a3:f6:21:9c:90:1e:
         de:31:10:ed:2c:05:8e:07:ba:09:0b:ff:44:2e:21:4b:5e:ad:
         ca:36:c8:d6:57:73:b9:49:0a:ab:ed:11:0c:78:a0:d2:cb:2e:
         ec:f5:ac:48:a0:ec:2f:f6:63:30:7a:d8:04:7b:c2:b6:7c:d5:
         00:f2:c5:32:6a:aa:18:24:ce:03:1f:b3:d9:a1:2f:24:fd:44:
         f8:34:53:96:7c:8c:d3:e5:24:b0:26:8d:cb:ff:d3:ff:43:fe:
         e7:88:18:b8:c4:9a:14:9b:d4:3a:ed:45:18:27:51:f9:f7:f1:
         d6:52:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:40:51 2026 by rpki-client