Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32362e302f32332d3233203d3e20323635343234.roa
File:                     3136382e3139352e32362e302f32332d3233203d3e20323635343234.roa (raw, json)
Hash identifier:          kWc3QA2IvSr2Ersbl0hj//ZAH3yW98U0DDkae52HgFg=
Subject key identifier:   23:0A:2F:3B:E3:B9:AA:A4:18:D1:E9:8A:A7:DD:D1:9A:7F:89:62:E6
Certificate issuer:       /CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
Certificate serial:       2A4A4AA2ED60460DBCD8858701F8AC9C5621DB84
Authority key identifier: 56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32362e302f32332d3233203d3e20323635343234.roa
Signing time:             Thu 18 Sep 2025 18:16:29 +0000
ROA not before:           Thu 18 Sep 2025 18:11:29 +0000
ROA not after:            Thu 17 Sep 2026 18:16:29 +0000
asID:                     265424
IP address blocks:        168.195.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl
                          rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4a:4a:a2:ed:60:46:0d:bc:d8:85:87:01:f8:ac:9c:56:21:db:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5620BBE89DDD132481A293EA8E9BB36E74EBF02E
        Validity
            Not Before: Sep 18 18:11:29 2025 GMT
            Not After : Sep 17 18:16:29 2026 GMT
        Subject: CN=230A2F3BE3B9AAA418D1E98AA7DDD19A7F8962E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:68:3e:0c:6a:54:67:29:02:83:52:a1:ad:63:
                    8c:02:b5:c5:a0:bb:b1:ac:d2:93:82:fb:e5:fe:f6:
                    0b:79:52:46:f9:60:61:64:c8:14:4f:8b:c2:d3:a0:
                    b2:5b:2b:9d:c1:09:bd:30:8a:0c:62:1c:79:31:3b:
                    61:86:b7:27:5a:11:18:39:ee:ba:2d:b4:9f:c7:8f:
                    f1:90:e8:11:59:3a:12:5c:56:96:21:5a:63:e4:89:
                    2c:e3:f7:17:4b:47:a9:7b:58:03:83:46:03:35:b7:
                    bb:2f:65:61:26:dd:e3:83:ab:a2:12:25:37:6a:4e:
                    75:e6:f8:cb:14:35:0f:65:d4:fa:9d:bc:f6:ff:4a:
                    83:72:a6:26:22:b4:bb:d6:73:21:d2:b3:a3:27:51:
                    3e:4f:50:bb:5b:a7:4a:3a:c8:cd:34:69:e6:3c:03:
                    cc:35:f6:4d:bb:64:a4:cd:64:e3:2c:ed:17:8a:5c:
                    fe:be:22:3e:ce:38:45:81:07:c9:75:d3:91:59:29:
                    9b:43:80:c3:d8:e8:f5:17:83:68:30:f9:35:c0:2a:
                    70:e5:d9:90:28:77:52:4e:b4:48:97:de:3c:a1:cc:
                    29:7e:bc:ff:02:8c:42:56:3a:a9:ba:a1:25:89:9d:
                    6f:1f:d0:68:31:c7:73:21:b7:c6:98:56:c5:5f:9e:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:2F:3B:E3:B9:AA:A4:18:D1:E9:8A:A7:DD:D1:9A:7F:89:62:E6
            X509v3 Authority Key Identifier:
                keyid:56:20:BB:E8:9D:DD:13:24:81:A2:93:EA:8E:9B:B3:6E:74:EB:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5620BBE89DDD132481A293EA8E9BB36E74EBF02E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93JWbGHXriqMs8bp8oE2sY8ob9f9kBJxTj118mRThKYf/0/3136382e3139352e32362e302f32332d3233203d3e20323635343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:55:08:5a:da:bb:f4:49:a6:ba:41:b9:7e:5d:5b:ca:68:82:
         7f:20:a6:f3:83:d2:d6:79:92:c7:00:2a:26:6f:d5:86:79:21:
         c0:16:35:77:e8:1a:cb:ee:63:c8:34:a3:0c:7a:58:82:b2:f6:
         41:7a:cc:c2:3d:46:fc:27:75:03:cb:a7:d8:43:61:61:ce:e6:
         58:be:db:d5:a0:0a:d0:80:7b:4c:77:7d:c2:21:4a:4e:8d:2b:
         15:09:9e:87:90:cf:0d:f9:87:19:f6:18:51:96:ee:59:b4:30:
         8f:9a:0d:6e:08:f2:07:a5:2e:d5:43:f4:b3:a1:44:42:71:bd:
         9a:a5:20:cc:5a:6f:e1:1e:86:8d:56:ad:e4:f1:1a:f8:0f:ca:
         fc:92:79:ec:f3:a0:43:f2:03:5d:ca:bb:fa:38:4b:0c:7f:ee:
         69:e8:71:63:79:2c:06:96:1a:ec:ca:3e:e2:be:87:fb:4d:b2:
         8e:8f:07:4e:8f:56:6a:5b:8a:b6:f1:b7:a0:ac:81:03:67:7a:
         2a:e2:87:c0:b6:42:12:3c:bb:98:44:b9:ea:8a:bd:90:2f:b1:
         e2:96:50:b4:f0:b9:4e:d2:35:f5:76:06:a0:3a:8a:38:ec:b9:
         ee:05:8f:e3:1d:27:aa:32:86:d1:33:51:c5:fc:11:84:b0:50:
         61:a2:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:38:02 2025 by rpki-client