Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa
File:                     3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa (raw, json)
Hash identifier:          XiTiwq7ewLF5aup6uMecUC6ZbE+X8tcNRgUtYxa8uZU=
Subject key identifier:   87:3F:32:37:70:B1:5B:BE:0B:D3:B5:95:30:DD:9B:35:72:68:BD:C0
Certificate issuer:       /CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
Certificate serial:       41DAAF7389BE0E43A204D2E9790E5041E727D2EF
Authority key identifier: C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa
Signing time:             Mon 17 Aug 2026 20:02:24 +0000
ROA not before:           Mon 17 Aug 2026 19:57:24 +0000
ROA not after:            Mon 16 Aug 2027 20:02:24 +0000
asID:                     265337
IP address blocks:        168.181.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl
                          rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:da:af:73:89:be:0e:43:a2:04:d2:e9:79:0e:50:41:e7:27:d2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C
        Validity
            Not Before: Aug 17 19:57:24 2026 GMT
            Not After : Aug 16 20:02:24 2027 GMT
        Subject: CN=873F323770B15BBE0BD3B59530DD9B357268BDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:ae:48:6a:e9:eb:30:4e:4c:04:0f:fc:60:
                    6d:fa:76:d6:5f:d0:59:b6:92:56:8b:5c:23:42:fa:
                    ca:8f:b0:e6:f3:06:33:77:b3:98:aa:80:03:55:b5:
                    7a:a8:22:c9:e7:2d:73:e6:88:63:7d:1c:6d:9a:20:
                    09:44:98:7a:b1:8d:0b:74:a1:05:8c:2b:52:99:b0:
                    09:53:73:08:47:40:d2:0e:8d:30:48:6e:96:47:37:
                    8b:10:d3:74:84:87:46:22:50:95:19:99:02:b5:a2:
                    79:ec:44:07:21:98:d3:bd:5c:ae:ab:9e:53:e8:b2:
                    7e:81:31:6c:4f:d8:cf:54:3d:dd:65:4f:ed:e0:95:
                    a3:f5:e1:76:32:e5:5f:60:bc:b1:da:9a:f4:92:ec:
                    79:dd:8b:33:de:e0:2d:34:8c:aa:d3:aa:4f:83:7c:
                    27:ee:92:bd:20:d3:4b:ee:bf:7d:cc:13:2b:5b:80:
                    5a:38:5c:c7:93:12:ad:10:a4:b1:5c:98:9e:5c:e7:
                    a8:c3:77:ed:de:bd:3f:7a:6f:a0:4e:e0:1d:a0:37:
                    b6:1f:d3:ab:bb:34:4a:17:d6:6a:a7:6d:85:52:73:
                    b3:d3:16:b9:72:82:17:62:7c:bd:fb:03:27:71:50:
                    2b:85:51:8d:a4:9b:9f:26:5f:6d:5a:a2:a0:1b:cc:
                    aa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3F:32:37:70:B1:5B:BE:0B:D3:B5:95:30:DD:9B:35:72:68:BD:C0
            X509v3 Authority Key Identifier:
                keyid:C1:9C:9B:D0:B6:FB:2D:F3:08:E3:25:C1:FC:52:6B:B8:99:0A:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C19C9BD0B6FB2DF308E325C1FC526BB8990AAC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVLGjFMWha9eZ3RCWG6Er7tv8eCv2Ewa7BvDHb5KrVAa/0/3136382e3138312e3134332e302f32342d3234203d3e20323635333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:32:a8:76:63:06:1a:d6:f9:4d:70:00:98:94:ff:1c:52:
         94:fc:87:f1:ac:a2:2e:ee:d8:8a:21:27:88:2d:cd:27:57:2e:
         e7:10:c4:4e:2f:37:e5:09:b2:6c:36:2b:5e:7f:23:fb:a6:52:
         d5:08:3d:55:dc:5d:8d:81:f1:80:3e:7c:b8:d0:e2:27:87:76:
         b3:de:28:92:90:63:e1:c3:33:28:05:4d:26:5e:38:94:77:62:
         c3:c8:ac:d9:ab:43:28:24:cd:f7:42:1d:7d:5b:b9:76:1d:ed:
         6e:7e:50:b5:8e:57:61:9d:0c:8b:39:7f:2b:45:9c:f4:a7:e7:
         b0:5e:4f:52:d5:4a:e0:fa:03:02:ec:e8:0d:b8:2c:89:e6:ce:
         ef:bd:42:ad:21:49:60:3f:91:71:76:e1:21:d8:53:fd:1e:df:
         6e:3d:fb:eb:c4:00:8e:d0:03:b1:1b:bd:63:b1:63:61:3c:f3:
         eb:fb:3a:71:c8:c7:da:8b:be:f9:57:5f:50:16:6f:1d:23:15:
         61:3a:68:3a:a3:2f:b0:bb:a0:4a:34:16:9a:43:51:22:b3:6c:
         2b:db:f2:b1:73:81:7a:26:ec:20:a0:2a:ed:d1:37:4b:b2:4c:
         a6:1f:60:b3:67:3d:84:17:19:a4:18:c8:85:3f:1a:da:e1:dd:
         b3:81:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:18:00 2026 by rpki-client