Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32342d3234203d3e20323635333337.roa
File:                     3136382e3138312e3134302e302f32342d3234203d3e20323635333337.roa (raw, json)
Hash identifier:          avjy/XKRsNxty67im7SOPusuLR5qLqXu6YkbP3rBqg4=
Subject key identifier:   E5:BA:BB:87:30:E8:19:9D:AA:7F:1B:18:79:A8:9B:AE:49:A8:1C:BB
Certificate issuer:       /CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
Certificate serial:       07D5A0E3B9916276509F7B292082F0E5414C20C4
Authority key identifier: C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32342d3234203d3e20323635333337.roa
Signing time:             Mon 17 Aug 2026 20:02:24 +0000
ROA not before:           Mon 17 Aug 2026 19:57:24 +0000
ROA not after:            Mon 16 Aug 2027 20:02:24 +0000
asID:                     265337
IP address blocks:        168.181.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl
                          rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d5:a0:e3:b9:91:62:76:50:9f:7b:29:20:82:f0:e5:41:4c:20:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
        Validity
            Not Before: Aug 17 19:57:24 2026 GMT
            Not After : Aug 16 20:02:24 2027 GMT
        Subject: CN=E5BABB8730E8199DAA7F1B1879A89BAE49A81CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:c8:39:19:f7:03:d9:ac:26:3c:25:6b:92:
                    e5:ba:19:2a:41:82:d5:15:db:3a:65:e8:f0:30:b2:
                    2b:3f:b1:18:c4:62:46:96:79:92:9b:ad:d6:c4:bf:
                    8c:94:b3:1a:c2:dd:5a:d2:3d:a0:45:bd:ef:9e:0b:
                    59:a4:41:e1:4a:be:4d:ce:f1:33:a7:66:02:c9:78:
                    17:f7:70:b2:bd:4a:aa:13:20:dc:39:9d:8e:fa:f1:
                    50:9d:82:3a:04:f8:9f:f3:63:46:03:d5:56:ff:57:
                    5b:97:f9:4a:f2:04:7a:bc:bd:a6:8d:ed:fc:4e:36:
                    2d:d5:81:1e:6a:29:70:0e:2f:dd:cf:c8:35:64:70:
                    47:a8:a0:35:9e:c8:6d:f6:51:b7:e7:e7:75:46:14:
                    3f:47:fc:53:b1:ec:2e:45:2d:97:59:fa:a4:66:04:
                    62:ce:0e:71:d2:1d:57:1c:6b:96:a4:9b:c7:e6:7f:
                    28:c4:16:21:da:ea:9e:66:79:ab:68:36:c7:99:ac:
                    2f:27:bb:fb:47:65:48:a3:b1:93:98:65:81:e4:59:
                    90:58:da:e2:5a:1a:86:3f:fe:af:82:8a:51:70:8e:
                    3b:21:82:85:17:f4:6d:69:84:44:95:03:bc:14:65:
                    bf:02:74:3f:d6:99:12:6b:fa:e3:c1:cd:34:8d:2b:
                    e2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BA:BB:87:30:E8:19:9D:AA:7F:1B:18:79:A8:9B:AE:49:A8:1C:BB
            X509v3 Authority Key Identifier:
                keyid:C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134302e302f32342d3234203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:d1:a8:bb:0a:b9:14:d1:92:c4:d3:58:94:22:4e:61:e6:
         b5:21:ff:70:b0:d5:fe:fe:9a:41:c6:ef:64:48:82:b3:d5:8e:
         60:da:0b:51:25:a6:e7:e6:8c:c4:8e:8a:a1:dd:53:ec:20:f9:
         7e:73:18:4d:c4:bb:5c:80:10:6a:b4:40:fd:67:ad:df:8b:bc:
         b8:dd:a6:e5:be:65:77:2b:d2:c0:08:4d:3c:14:09:e9:50:f8:
         08:1d:69:11:8d:d6:23:6e:4a:a2:5b:b7:44:9e:0b:8b:c6:0b:
         60:b7:91:87:55:a9:05:b7:ed:b3:6f:fd:66:e5:a2:c2:b2:4d:
         75:57:97:57:86:31:8f:b7:2d:50:99:06:e8:e0:21:6b:a3:a5:
         c7:9f:47:86:35:06:4a:5c:51:88:55:ec:fe:bc:36:90:46:ae:
         4c:b4:fa:de:0f:e1:ee:20:6d:48:e3:cf:62:f6:d9:8c:7e:87:
         25:b2:48:7b:2e:76:33:13:8d:3f:0d:54:dd:3c:22:7e:88:76:
         34:32:f4:3b:bb:91:b7:ff:10:e5:59:97:0c:b0:8e:a8:5d:65:
         e5:65:ee:bb:72:17:a8:4e:46:20:f3:80:22:5d:8c:84:62:c4:
         8d:e3:d5:4f:64:72:70:44:bf:f4:63:84:ab:d4:e3:26:e1:61:
         6d:e2:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:16:44 2026 by rpki-client