Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3332203d3e20323638373836.roa
File:                     3136382e3139362e3230362e302f32332d3332203d3e20323638373836.roa (raw, json)
Hash identifier:          be2kD8DBaFVmvKuspyLKC8gym8S6swsWPaoDFiBUN+g=
Subject key identifier:   BD:59:7A:4C:3E:F7:86:00:FB:25:E6:C1:6A:B3:1A:9D:17:6B:2F:7E
Certificate issuer:       /CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
Certificate serial:       711579833C0B1DEF791ABA723FF0BB85F079092F
Authority key identifier: 81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3332203d3e20323638373836.roa
Signing time:             Thu 08 Oct 2026 18:39:29 +0000
ROA not before:           Thu 08 Oct 2026 18:34:29 +0000
ROA not after:            Thu 07 Oct 2027 18:39:29 +0000
asID:                     268786
IP address blocks:        168.196.206.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 16:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:15:79:83:3c:0b:1d:ef:79:1a:ba:72:3f:f0:bb:85:f0:79:09:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819DF9BCABB60928D0FA4318848ACDF259DE262E
        Validity
            Not Before: Oct  8 18:34:29 2026 GMT
            Not After : Oct  7 18:39:29 2027 GMT
        Subject: CN=BD597A4C3EF78600FB25E6C16AB31A9D176B2F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:21:34:59:86:fc:14:a7:05:f3:76:18:2e:
                    6d:44:d5:1b:e4:22:9a:7b:46:67:d4:9b:1a:57:69:
                    c7:fc:c4:86:fc:3f:b2:50:72:cc:47:f3:06:c9:ba:
                    30:91:49:89:d3:f1:41:21:88:db:4f:22:69:1e:91:
                    1c:b9:b6:ef:43:ca:3e:fd:c3:53:c0:6d:1d:fc:76:
                    e1:58:69:49:16:7a:80:58:52:f0:fd:6a:6e:54:69:
                    21:db:dd:70:72:ad:22:63:2f:74:f2:0b:be:07:a8:
                    a2:d2:fe:f5:37:2a:71:19:04:0d:54:e7:80:0a:ab:
                    2d:d3:e0:1a:79:26:ad:82:49:43:96:d0:71:a0:fc:
                    0e:71:e0:c3:48:1a:87:d5:21:6c:87:48:6b:5c:57:
                    e5:6d:f4:b0:e9:41:75:5c:01:0c:90:06:ab:2e:3a:
                    7f:47:5c:a0:87:53:63:e0:4f:56:f8:e7:20:8e:64:
                    4e:bd:58:b6:24:31:67:fa:ef:6d:52:bd:df:5b:ba:
                    c1:5e:ba:a0:48:d5:57:4e:27:81:29:f5:f4:01:64:
                    33:1d:dc:43:49:2f:38:bb:68:11:e0:81:3a:15:79:
                    60:a3:20:17:b4:ae:15:1a:6b:16:08:a7:76:8b:f1:
                    a1:0c:a0:c1:c2:a7:82:4c:58:3d:d6:ae:21:ec:61:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:7A:4C:3E:F7:86:00:FB:25:E6:C1:6A:B3:1A:9D:17:6B:2F:7E
            X509v3 Authority Key Identifier:
                keyid:81:9D:F9:BC:AB:B6:09:28:D0:FA:43:18:84:8A:CD:F2:59:DE:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/819DF9BCABB60928D0FA4318848ACDF259DE262E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/819DF9BCABB60928D0FA4318848ACDF259DE262E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/3136382e3139362e3230362e302f32332d3332203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:cf:20:c3:4a:8f:fd:57:6f:5f:62:26:f0:17:ed:f9:e9:01:
         b1:33:d3:10:09:36:7d:fb:4a:d3:5e:d1:59:0f:21:7b:9b:cc:
         db:2a:d0:b3:42:9a:51:93:76:d9:60:7c:d4:58:f7:0a:a5:88:
         4b:97:9f:8a:3c:3b:44:b3:fb:6f:45:7c:5e:fc:e3:8f:32:af:
         6b:92:ac:8c:b9:4b:88:8f:66:8c:31:e5:1f:ea:45:87:ef:85:
         99:11:27:0f:1a:07:b7:05:8d:08:74:8e:45:59:85:d1:a2:75:
         a6:c1:dc:af:3e:e7:ce:3a:b3:fa:29:14:ff:6c:94:8b:6b:c9:
         7a:55:25:e2:79:b3:dd:96:cc:27:a1:2a:c2:f3:79:2a:21:b1:
         8c:49:af:5b:70:63:49:a8:3f:d5:52:cb:15:e3:85:d0:6c:7f:
         f2:0e:74:bc:a8:2f:23:b9:2e:7f:a6:6e:ce:dd:8a:ee:34:66:
         b1:f5:e7:fa:ae:9a:83:9b:53:e4:a3:95:bf:25:63:8e:0a:32:
         3f:d3:ff:b9:a6:4e:27:3e:c5:0a:b0:7e:c8:3a:d3:46:55:f5:
         34:fc:d0:77:6b:1d:5e:bb:e4:54:d6:c4:d0:09:a2:06:38:68:
         27:6c:8f:dc:a5:ef:26:1d:1a:ba:c0:22:5f:31:b0:6b:c6:e8:
         3f:ae:c5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 00:00:04 2026 by rpki-client