Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134312e302f32342d3234203d3e20323635333337.roa
File:                     3136382e3138312e3134312e302f32342d3234203d3e20323635333337.roa (raw, json)
Hash identifier:          GUKnWqKYpABBSICoudhq4UBHMA8QymRud9ru49lA8Rc=
Subject key identifier:   4B:89:70:A4:A7:AE:53:D7:B1:6E:73:B2:C1:D6:37:14:C7:FF:8C:C8
Certificate issuer:       /CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
Certificate serial:       592BA4CC18A5BDD90A5590536563103A6B46A23B
Authority key identifier: C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134312e302f32342d3234203d3e20323635333337.roa
Signing time:             Mon 17 Aug 2026 20:02:24 +0000
ROA not before:           Mon 17 Aug 2026 19:57:24 +0000
ROA not after:            Mon 16 Aug 2027 20:02:24 +0000
asID:                     265337
IP address blocks:        168.181.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl
                          rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2b:a4:cc:18:a5:bd:d9:0a:55:90:53:65:63:10:3a:6b:46:a2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
        Validity
            Not Before: Aug 17 19:57:24 2026 GMT
            Not After : Aug 16 20:02:24 2027 GMT
        Subject: CN=4B8970A4A7AE53D7B16E73B2C1D63714C7FF8CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:7b:55:35:56:3a:52:15:65:19:ba:d7:c4:
                    6d:c0:d1:b6:d6:f5:a1:0f:17:79:cb:bd:28:6a:c5:
                    a3:10:97:25:6c:e2:1b:74:17:7f:9f:b4:b8:d1:d8:
                    a1:6f:32:bc:76:07:09:e8:53:59:bd:63:cf:8c:8e:
                    f9:36:40:e4:b3:ce:34:53:18:cb:69:d2:06:90:52:
                    be:a6:6a:2c:94:89:36:1c:6b:7f:09:f8:94:28:41:
                    00:b0:5e:7b:8a:87:9f:98:d3:00:35:97:16:51:b8:
                    10:e7:12:26:18:c2:60:74:6b:1f:ea:31:5d:a5:ab:
                    4e:68:24:99:97:22:4b:28:cf:0c:f1:15:6f:9b:e2:
                    15:d5:a2:28:41:5a:9c:c4:e7:17:bc:88:ac:4d:a9:
                    ea:45:33:7b:ff:40:4d:08:ef:33:38:88:a3:d3:6f:
                    0f:e0:bc:33:09:38:52:c7:d4:75:c1:05:74:c3:f5:
                    f3:57:3f:f1:6d:52:49:12:60:fd:45:14:63:08:e4:
                    73:85:96:97:6b:9f:43:9e:02:a9:e5:32:4e:80:8c:
                    cf:c9:2d:68:64:c7:03:93:58:41:7d:f4:7b:a4:65:
                    5e:38:73:d2:84:e3:45:82:31:95:3b:6c:5f:f7:38:
                    cb:01:35:88:f5:d1:b0:ad:1e:02:1b:73:93:61:4f:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:89:70:A4:A7:AE:53:D7:B1:6E:73:B2:C1:D6:37:14:C7:FF:8C:C8
            X509v3 Authority Key Identifier:
                keyid:C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134312e302f32342d3234203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:2b:fa:e3:4e:73:e9:4e:be:e3:a9:eb:9e:3d:17:82:dc:
         19:5b:cd:85:3a:86:ff:fb:73:15:28:c5:fc:13:16:25:cc:3c:
         71:15:4a:e3:c3:e4:94:25:19:9f:7f:b3:45:43:ab:9c:bf:6d:
         33:cb:9f:2c:7a:09:b3:a3:10:e1:43:68:3d:50:5e:ba:3b:6b:
         17:cf:be:b3:17:7e:de:bb:6e:49:f8:de:58:62:51:65:e3:b6:
         ce:91:7f:9c:32:c3:7e:82:87:ab:be:09:ed:3b:24:1d:a2:f6:
         86:01:d8:1d:f6:80:28:b3:f1:93:a7:ef:8f:2f:bc:bf:64:a8:
         bd:2d:d8:62:95:9f:55:45:02:2d:c4:66:24:a2:a8:64:04:c8:
         31:13:0c:03:6e:4e:52:05:ec:4d:73:44:da:f4:42:77:be:d3:
         5d:95:16:4d:c6:ce:7e:e0:04:73:5c:92:0b:3c:8f:2c:4a:ae:
         c1:35:33:9d:77:c6:15:9a:de:50:aa:bf:42:13:12:9c:c8:f5:
         22:f4:9f:54:a7:f8:75:ce:21:86:82:d3:b6:55:5e:49:49:9e:
         63:94:b1:07:0a:99:59:49:79:78:a3:1f:27:91:bd:e7:f9:10:
         5f:54:c6:e4:ea:3d:cb:2e:57:f6:2a:da:ce:d4:d6:b2:ba:5e:
         0d:21:61:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 11:36:53 2026 by rpki-client