Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa
File:                     3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa (raw, json)
Hash identifier:          MiFvHS+rqFPoYFDBzz3PH32pPOlUaMBBXKNmbplP+WU=
Subject key identifier:   50:6B:FD:AB:2A:47:BD:E4:C4:98:80:1C:40:6D:CB:B5:EA:37:FA:BC
Certificate issuer:       /CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
Certificate serial:       204F4D104F3EA6D234F9935224ADB69894FC1DDB
Authority key identifier: 08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa
Signing time:             Thu 13 Aug 2026 14:41:07 +0000
ROA not before:           Thu 13 Aug 2026 14:36:07 +0000
ROA not after:            Thu 12 Aug 2027 14:41:07 +0000
asID:                     263137
IP address blocks:        168.228.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl
                          rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 10:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4f:4d:10:4f:3e:a6:d2:34:f9:93:52:24:ad:b6:98:94:fc:1d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CF424E6FE1980B284A93E6736C3E8628D381CA
        Validity
            Not Before: Aug 13 14:36:07 2026 GMT
            Not After : Aug 12 14:41:07 2027 GMT
        Subject: CN=506BFDAB2A47BDE4C498801C406DCBB5EA37FABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:75:6f:d1:ce:0d:aa:1a:e9:4f:a9:8f:a0:
                    29:b3:57:67:ce:2f:11:27:fa:e1:90:77:38:ef:df:
                    ee:c5:ec:0e:81:27:cf:d6:43:0a:13:85:0e:7f:c5:
                    60:eb:bc:fa:f7:e6:71:f1:97:4a:f2:9f:6b:9a:ec:
                    f3:28:b4:3e:59:88:9f:c8:9d:5a:15:eb:90:4d:af:
                    47:eb:19:9b:4c:a9:54:3f:68:4e:6f:2c:8b:3e:3a:
                    8e:37:aa:13:71:71:c8:bb:e6:71:d3:7d:a4:17:11:
                    e4:d3:05:2d:7a:74:88:b8:b2:e3:08:b2:6d:5f:f1:
                    7b:04:15:de:1d:17:c7:72:ea:03:29:c3:4e:bc:0b:
                    20:d0:14:14:a9:68:23:1b:91:44:e0:be:eb:da:5e:
                    e0:7c:48:ba:51:02:b8:df:31:22:8a:ab:b8:a2:f0:
                    c9:93:ac:05:9d:19:4a:ea:cb:30:6c:04:cf:c6:99:
                    d2:31:ba:26:4a:eb:5c:e2:4d:f2:24:36:42:58:50:
                    4a:8d:ad:78:3c:02:6d:64:9a:f6:6c:b5:b3:8c:1b:
                    4e:cf:35:ac:9d:7e:d9:77:db:f4:43:6f:33:70:83:
                    d5:c5:8c:2e:a5:24:0e:af:3d:4b:be:3e:c9:46:1e:
                    1b:97:61:45:61:17:e2:04:b9:87:4b:36:7d:bf:12:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:FD:AB:2A:47:BD:E4:C4:98:80:1C:40:6D:CB:B5:EA:37:FA:BC
            X509v3 Authority Key Identifier:
                keyid:08:CF:42:4E:6F:E1:98:0B:28:4A:93:E6:73:6C:3E:86:28:D3:81:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/08CF424E6FE1980B284A93E6736C3E8628D381CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08CF424E6FE1980B284A93E6736C3E8628D381CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BprNGgqTqf6CpT6MZ9derrSdVYibM8RQ8tLpkSn3Lmos/0/3136382e3232382e3139362e302f32322d3234203d3e20323633313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:f3:b8:43:b3:7e:cf:27:b1:64:4a:0a:49:46:0f:77:a5:
         11:ea:90:e7:1c:dc:f7:87:02:47:76:7b:6b:83:ed:b8:ae:15:
         c4:d3:77:67:9b:c1:9a:b3:e2:da:74:ce:76:e6:75:b4:0b:8e:
         6b:5e:89:2f:ec:53:da:c2:e5:a2:1c:c4:cd:58:68:ac:4c:88:
         a6:fa:99:05:6f:80:1d:cc:22:86:da:bb:c8:f6:33:16:cf:35:
         a0:9a:b5:1d:f3:07:10:e4:00:3e:8a:35:7a:71:5d:77:ae:10:
         2b:98:b7:aa:45:89:c2:56:74:b0:c3:05:3e:d6:43:b3:1f:af:
         f7:cb:45:b6:59:60:e1:28:84:fa:87:a7:9a:48:5a:25:47:3b:
         58:8c:c2:16:86:42:9d:21:0e:d6:05:14:53:13:c7:06:46:93:
         68:ec:f0:57:d1:f1:a2:47:7e:a2:66:68:e1:2a:67:69:e0:61:
         a6:85:6b:04:3e:65:05:9d:30:97:ae:a3:f8:13:87:26:7c:c7:
         69:dd:37:64:fc:7f:73:45:bf:80:88:b5:24:97:f2:0e:f4:3b:
         ad:7e:af:52:8e:26:c2:82:26:4b:83:a8:3e:f9:35:01:eb:aa:
         b7:32:4e:cb:f5:ad:d3:3e:2c:ef:cc:b0:39:94:1e:19:91:16:
         9e:83:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:22:17 2026 by rpki-client