Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3234203d3e20323634393632.roa
File:                     3136382e3233322e3234342e302f32322d3234203d3e20323634393632.roa (raw, json)
Hash identifier:          2Xy4Rn0/5gjkvzeJVVabHyOgBtpUys4PsCsyuEYn/3o=
Subject key identifier:   68:0F:EC:26:1F:24:E3:51:15:8B:67:FF:5A:C6:84:1C:45:B0:0E:CF
Certificate issuer:       /CN=A3227F62A1427A54D4D75882E2D0596B3DCB4925
Certificate serial:       436CE485F04BAE03A9889162B4BEB52EB9921CEA
Authority key identifier: A3:22:7F:62:A1:42:7A:54:D4:D7:58:82:E2:D0:59:6B:3D:CB:49:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3227F62A1427A54D4D75882E2D0596B3DCB4925.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3234203d3e20323634393632.roa
Signing time:             Fri 02 Oct 2026 13:35:28 +0000
ROA not before:           Fri 02 Oct 2026 13:30:28 +0000
ROA not after:            Fri 01 Oct 2027 13:35:28 +0000
asID:                     264962
IP address blocks:        168.232.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/A3227F62A1427A54D4D75882E2D0596B3DCB4925.crl
                          rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/A3227F62A1427A54D4D75882E2D0596B3DCB4925.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3227F62A1427A54D4D75882E2D0596B3DCB4925.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 16:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6c:e4:85:f0:4b:ae:03:a9:88:91:62:b4:be:b5:2e:b9:92:1c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3227F62A1427A54D4D75882E2D0596B3DCB4925
        Validity
            Not Before: Oct  2 13:30:28 2026 GMT
            Not After : Oct  1 13:35:28 2027 GMT
        Subject: CN=680FEC261F24E351158B67FF5AC6841C45B00ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:95:9c:b3:e8:a6:3c:45:d1:f1:0b:ad:43:
                    23:69:8a:4e:18:03:99:00:a7:74:bd:8d:7c:61:98:
                    44:35:16:3f:33:73:54:ad:18:23:27:3e:47:1c:19:
                    a7:ec:f3:1f:0a:1a:f5:ad:84:d5:3b:76:de:a7:06:
                    c1:c9:a8:a7:7d:eb:2b:14:1b:25:28:04:2b:0a:bd:
                    6c:cf:82:6c:8d:2f:14:af:4c:d3:92:bc:6e:a8:34:
                    22:50:89:be:68:18:3e:ae:49:69:a3:83:43:61:aa:
                    4d:49:d3:02:a6:31:8f:e3:38:02:55:c5:5a:95:9e:
                    a3:b3:04:cd:10:58:2c:9b:6d:21:4b:74:22:46:6d:
                    f7:8d:79:ad:f5:ff:a9:ce:3a:bf:71:c4:d4:f9:3f:
                    a6:fc:f2:bc:10:5e:15:f3:04:a5:43:67:d0:28:57:
                    29:fc:c6:ab:aa:10:e8:fa:30:85:3d:f5:ad:1a:fc:
                    d9:33:73:8c:6a:60:03:56:46:5e:ac:34:60:04:76:
                    01:36:34:f1:b4:4a:b1:f7:55:92:23:11:22:bb:7b:
                    15:a2:ab:0a:56:2d:9d:bd:37:8e:24:3c:cc:98:09:
                    f9:34:66:85:26:f5:25:a0:a9:03:21:ef:d4:08:a4:
                    29:07:2f:81:a0:17:ad:c7:35:99:40:c2:ac:68:53:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:EC:26:1F:24:E3:51:15:8B:67:FF:5A:C6:84:1C:45:B0:0E:CF
            X509v3 Authority Key Identifier:
                keyid:A3:22:7F:62:A1:42:7A:54:D4:D7:58:82:E2:D0:59:6B:3D:CB:49:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/A3227F62A1427A54D4D75882E2D0596B3DCB4925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3227F62A1427A54D4D75882E2D0596B3DCB4925.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M2RabgEEPNDw9ix5c9xsZxQSv3yfoz8sfAvzzt9Vhdh/0/3136382e3233322e3234342e302f32322d3234203d3e20323634393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:0c:27:67:71:92:5f:8d:e1:97:fc:74:ad:a7:9b:a8:3f:71:
         0d:bb:b3:97:85:91:e0:d7:a0:38:a4:a4:4e:03:75:c0:ef:48:
         77:5a:4f:6e:bc:44:e1:45:cf:21:ac:b5:d0:28:4e:31:59:b0:
         93:9a:05:9a:0b:4c:39:42:f2:cd:66:ca:6b:52:50:6b:b1:5e:
         21:dd:d4:e2:f3:9d:98:b9:8d:5c:b3:ea:06:1e:da:71:52:26:
         62:d1:f7:8a:5c:ee:87:cf:2d:8e:55:55:a8:e8:a0:67:3d:fc:
         99:ef:be:3a:ae:83:b2:70:8f:31:5f:4c:e7:a5:25:97:7a:ea:
         95:92:05:a2:43:22:67:83:52:c5:2b:92:00:ec:39:8e:f4:9f:
         64:05:09:40:2d:2b:bf:08:a3:34:53:90:8a:2b:a0:d3:7c:d7:
         e1:c7:ff:d1:1d:12:00:1a:24:11:d6:3e:ea:78:88:ea:59:b8:
         51:78:22:3d:cb:70:96:5d:5a:ea:8e:e0:ba:93:88:c7:72:98:
         a4:63:d5:9d:43:b0:5e:ea:0a:e5:fe:94:f2:db:cb:5c:d2:6b:
         3c:2d:de:69:34:3e:ac:55:43:c5:b7:16:ec:62:4d:8e:36:ff:
         3f:ea:1d:ba:05:75:f0:45:01:1a:03:09:da:c9:5c:2e:18:1a:
         55:68:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:16:20 2026 by rpki-client