Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36352e302f32342d3234203d3e20323632393739.roa
File:                     3136382e3139372e36352e302f32342d3234203d3e20323632393739.roa (raw, json)
Hash identifier:          hz9vh/dBRebpAIcssD3JPJGw2ZngCLplivkIWXO9BNU=
Subject key identifier:   2F:8F:94:D7:25:9F:81:E0:BC:4C:A0:4C:79:60:C3:B5:DA:79:2C:5F
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       700B1F3607924A4A10B60AC75BD44A321EF7CAA2
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36352e302f32342d3234203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:34:32 +0000
ROA not before:           Wed 29 Jul 2026 17:29:32 +0000
ROA not after:            Wed 28 Jul 2027 17:34:32 +0000
asID:                     262979
IP address blocks:        168.197.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 11:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0b:1f:36:07:92:4a:4a:10:b6:0a:c7:5b:d4:4a:32:1e:f7:ca:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:29:32 2026 GMT
            Not After : Jul 28 17:34:32 2027 GMT
        Subject: CN=2F8F94D7259F81E0BC4CA04C7960C3B5DA792C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:58:93:0b:5b:b7:a7:1f:5b:f4:46:a3:32:3a:
                    cd:b0:6e:e5:2a:8d:6b:e8:ee:d5:54:cf:69:d2:90:
                    61:15:a0:2d:75:59:81:93:c3:fc:ff:f8:4b:83:4f:
                    05:a5:42:d9:48:5c:b0:aa:3f:bd:bd:a4:97:64:9a:
                    e4:f6:1d:0d:72:c5:66:9d:2a:cd:4f:5b:98:a0:03:
                    6d:8e:3f:4b:47:7d:48:bb:81:b0:57:16:2c:84:c9:
                    ca:68:2b:73:79:dc:91:46:9c:55:fc:39:dc:ec:cd:
                    54:86:7c:41:8f:70:a2:99:09:16:4a:51:cb:46:a5:
                    99:5c:4b:bd:7f:3b:02:7c:a3:28:4a:7d:e0:f9:b5:
                    09:13:cc:01:7c:86:d2:3b:99:13:67:59:3e:60:81:
                    a3:e7:23:39:8d:90:63:a4:23:f1:f4:ef:e1:24:fd:
                    ce:b7:9e:04:35:e8:53:15:22:b3:25:48:55:57:1f:
                    39:b7:cc:39:9b:8f:c5:20:a9:0a:a6:77:93:da:50:
                    ce:0a:bb:96:77:66:03:62:39:5a:b8:bc:59:6f:8f:
                    df:c1:91:c9:81:11:5f:56:17:7a:c6:fd:98:9c:3f:
                    d5:12:35:1c:f8:2b:ee:01:77:fe:65:1a:41:1f:34:
                    36:98:56:e3:e2:9f:af:08:fb:1b:f2:2f:ca:40:5a:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:94:D7:25:9F:81:E0:BC:4C:A0:4C:79:60:C3:B5:DA:79:2C:5F
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3136382e3139372e36352e302f32342d3234203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:f1:8f:19:84:1e:1b:eb:a1:21:0e:68:80:10:47:bc:d2:
         5a:8e:62:04:2f:cd:43:7b:ce:c2:94:32:29:0d:cd:74:68:b7:
         62:ee:ea:94:f2:10:ed:c7:20:45:a0:af:98:56:10:31:d5:a9:
         af:5f:44:98:78:6a:33:10:96:76:be:fd:92:d2:d1:22:18:54:
         f9:11:51:d5:23:5c:1d:71:72:63:97:80:42:85:15:cd:f5:a4:
         78:b7:29:4a:3b:0a:44:79:d7:21:ec:18:32:db:bb:79:6d:b1:
         8c:85:4f:d0:98:28:9c:a8:e0:31:23:cf:58:5b:ae:6b:c4:d6:
         11:fc:f5:7f:7c:53:46:a2:91:72:b2:95:62:0b:b1:d8:2f:f3:
         22:e3:30:7f:8f:8b:0b:8e:9c:63:61:01:3f:7a:37:59:cf:c3:
         8f:a1:a0:03:fd:26:90:70:19:7e:50:20:f3:0d:ae:a0:bc:71:
         eb:29:f5:a4:e3:c6:de:fb:37:a8:fa:f6:4c:9a:b7:90:5c:ee:
         55:f7:7d:dc:c8:b0:9d:3c:4b:7f:8b:4d:5a:4c:70:73:ae:8b:
         6d:a6:f8:42:05:bf:a0:ba:41:59:3c:11:ba:e9:36:fb:48:f1:
         3e:66:a1:7f:88:04:3f:3e:a3:aa:0a:ba:f1:6c:0a:39:2d:d4:
         fc:83:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:20:29 2026 by rpki-client