Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
File:                     3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa (raw, json)
Hash identifier:          vMQ24ILrNDpZpc+efklqY/ABdnMJK5u/Ha/9Pm826yA=
Subject key identifier:   C3:82:BB:55:BA:D0:E3:7D:5B:51:F7:3E:FA:6C:52:10:93:9F:EE:36
Certificate issuer:       /CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
Certificate serial:       59C5774A2201E7C0CDA6E953A9914F81C68BC73E
Authority key identifier: 6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
Signing time:             Tue 15 Sep 2026 17:31:38 +0000
ROA not before:           Tue 15 Sep 2026 17:26:38 +0000
ROA not after:            Tue 14 Sep 2027 17:31:38 +0000
asID:                     267429
IP address blocks:        181.191.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 13:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:77:4a:22:01:e7:c0:cd:a6:e9:53:a9:91:4f:81:c6:8b:c7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF
        Validity
            Not Before: Sep 15 17:26:38 2026 GMT
            Not After : Sep 14 17:31:38 2027 GMT
        Subject: CN=C382BB55BAD0E37D5B51F73EFA6C5210939FEE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:86:ff:f3:8b:8c:8b:81:ce:df:be:a7:76:
                    3c:72:a7:ab:18:5f:c0:b5:56:c8:8f:2c:31:aa:cd:
                    e3:9b:95:bb:b1:db:cc:7f:c3:52:8c:8c:c2:5e:ab:
                    06:73:df:1f:a8:c6:a5:a2:88:0a:0d:44:06:49:a1:
                    f4:40:ce:16:c3:33:89:95:c5:ef:f5:25:53:ad:2c:
                    d6:b4:a2:59:68:8b:64:81:a3:f0:04:56:06:d7:e9:
                    ca:cf:92:95:3c:05:c4:72:e9:ae:71:90:09:21:d0:
                    21:ac:e1:5c:7b:c6:ef:8e:e3:09:5f:80:c2:97:60:
                    98:a7:48:18:08:f5:09:a3:59:51:e7:64:e0:98:0c:
                    97:05:06:ed:b0:1d:83:c6:05:8d:1b:5a:1e:27:12:
                    50:77:c5:1e:04:05:8a:74:c6:35:83:63:aa:a0:be:
                    54:b4:cd:9d:69:b4:b1:a8:6c:ca:de:fd:9e:01:57:
                    fd:60:c5:02:52:0b:a6:cd:72:81:b6:83:fe:3d:c9:
                    c8:3b:dd:d2:94:a0:75:77:97:a7:16:1e:95:01:0c:
                    bc:1d:a9:04:10:32:50:42:a3:f8:91:94:72:25:da:
                    04:b9:62:4c:ee:21:43:9a:39:06:02:7f:86:db:9f:
                    5e:7a:b8:06:cd:51:13:25:91:ab:b2:ca:7a:ba:59:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:BB:55:BA:D0:E3:7D:5B:51:F7:3E:FA:6C:52:10:93:9F:EE:36
            X509v3 Authority Key Identifier:
                keyid:6B:D6:13:29:CC:9F:31:3A:9A:21:BD:E8:18:B6:8C:5D:BB:7B:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BD61329CC9F313A9A21BDE818B68C5DBB7BEBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:70:f4:d4:c6:f1:34:78:01:58:5a:6f:f7:93:d4:9e:f2:
         6c:19:fc:31:b4:c6:6f:3c:a4:9c:3d:b5:06:09:9f:a0:5f:ff:
         5a:03:0a:a4:b3:1b:15:d3:d8:21:ba:68:b6:3f:bf:80:1f:e3:
         48:25:17:59:23:8c:cf:52:b3:f7:b9:b7:15:4b:4d:43:27:ff:
         f5:45:07:3f:75:01:27:b0:12:dd:75:34:43:3f:95:0b:3c:c9:
         74:c2:e0:73:0f:77:6d:bf:0b:9b:b6:5c:e6:08:6b:c8:5b:56:
         12:d5:66:ce:06:d7:fb:9e:f8:ce:5d:24:b5:3d:a6:f8:91:79:
         10:e4:21:7f:8a:92:42:13:d6:73:0b:cf:8e:94:87:60:13:f8:
         34:75:a0:74:d0:b1:e9:ce:b9:6b:11:6e:67:b9:29:54:c7:f8:
         6e:a0:f0:8b:3f:d0:29:e4:5d:7a:7c:67:75:ab:d3:eb:be:e4:
         ea:0c:bb:50:eb:df:02:2e:d6:05:77:2b:d2:cf:47:a8:ec:e2:
         6a:f1:15:6c:0f:c7:dc:83:83:52:99:04:5d:44:dd:df:1e:0f:
         d2:1b:44:bc:b2:ac:1c:ad:45:33:68:4b:0d:09:16:72:35:4e:
         ab:46:0b:85:06:3c:24:eb:25:a7:89:15:e8:a8:76:6b:94:08:
         49:54:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:36:43 2026 by rpki-client