Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3232203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32322d3232203d3e20323633343833.roa (raw, json)
Hash identifier:          bxospYIPULpdEefsp5S/uAOUH8Bn4kYdziIpoac5HYw=
Subject key identifier:   D5:2D:BE:FB:9C:E7:02:98:90:A4:F1:F2:D0:F2:E7:47:C8:BA:F0:86
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       780748DE0B3E886D8F39C5CFC0F6807040D82001
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3232203d3e20323633343833.roa
Signing time:             Wed 29 Jul 2026 15:18:25 +0000
ROA not before:           Wed 29 Jul 2026 15:13:25 +0000
ROA not after:            Wed 28 Jul 2027 15:18:25 +0000
asID:                     263483
IP address blocks:        168.0.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:07:48:de:0b:3e:88:6d:8f:39:c5:cf:c0:f6:80:70:40:d8:20:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Jul 29 15:13:25 2026 GMT
            Not After : Jul 28 15:18:25 2027 GMT
        Subject: CN=D52DBEFB9CE7029890A4F1F2D0F2E747C8BAF086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:2b:31:97:ae:f9:da:1b:7e:b4:96:d3:e3:
                    ef:cf:71:7b:59:89:27:b4:ea:d6:07:7d:fb:55:05:
                    3b:62:12:80:19:28:f3:07:3e:9b:70:1b:cf:4c:ea:
                    de:d9:18:80:18:2f:21:ec:c6:1e:d0:f9:b7:74:2f:
                    70:96:26:c9:80:46:e1:9d:03:65:18:d6:26:33:45:
                    71:ec:04:14:f6:28:5c:3f:3a:8d:a9:22:88:41:10:
                    6b:0a:9f:c8:7d:0e:68:37:3b:41:f6:1f:cb:b3:87:
                    43:34:c8:a9:45:10:3e:b5:07:13:b1:96:20:29:06:
                    db:2d:57:c6:3e:8b:91:6e:3f:ce:43:4b:fe:35:58:
                    d4:34:b2:54:02:79:9f:84:09:3e:3f:7f:06:b4:f1:
                    87:18:f6:da:27:e9:b1:66:63:d9:22:49:12:3d:1c:
                    7a:42:12:ed:5c:32:ce:a5:53:d9:38:29:e5:a4:fb:
                    fa:83:ff:70:20:9f:ab:fd:c1:95:9f:b6:27:75:a6:
                    e8:bc:6d:4b:e5:b9:88:7a:1d:89:01:78:4c:7f:d8:
                    d2:be:78:1b:eb:7a:4e:62:bf:15:fa:c8:ce:4d:d0:
                    e2:70:13:21:61:0b:8e:e1:74:8b:90:59:fa:a1:38:
                    34:dc:c6:5d:92:7b:61:07:03:48:4f:0c:5e:ea:f6:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2D:BE:FB:9C:E7:02:98:90:A4:F1:F2:D0:F2:E7:47:C8:BA:F0:86
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32322d3232203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:6a:77:21:e3:5c:2d:05:6b:31:90:63:95:34:67:76:1d:
         0d:2e:1f:06:74:63:e3:fa:5c:1e:37:bc:47:93:a7:e3:78:ea:
         b8:24:67:cc:3c:0b:a4:b0:58:f8:77:1e:2a:e2:a9:7b:c3:0d:
         e5:b5:87:a6:40:43:ff:ba:f5:09:bc:90:71:f7:fc:3e:6e:7f:
         06:40:6d:ce:5b:b2:ba:2c:2c:d9:ec:34:bb:06:5c:24:f4:5d:
         39:ae:91:00:8d:cc:26:4b:36:08:0d:dd:da:0c:35:0d:d0:9c:
         6b:9c:42:9d:e8:91:0d:73:94:5e:5f:7a:a6:4d:6b:c7:2f:b2:
         6e:5f:d6:a3:bc:ab:1e:20:1a:79:7d:58:b2:0d:2a:5b:39:16:
         ab:21:cf:99:9c:53:16:6f:dd:8f:a8:30:78:6d:d0:f9:78:42:
         ad:8b:f0:96:fe:33:08:ac:75:7d:00:e2:97:36:36:9c:0a:ef:
         54:06:b5:00:22:94:f0:b6:d7:83:68:3f:a0:91:db:16:c3:ca:
         3d:84:82:e5:91:49:25:e5:44:dd:7d:86:0e:14:54:0a:97:b3:
         bd:b1:23:37:a1:eb:05:d9:4f:a8:75:7d:2c:56:dd:7f:7f:4f:
         a2:49:59:e0:87:8d:23:b5:e0:04:6c:3c:75:ab:c6:fb:14:84:
         03:9e:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 00:07:25 2026 by rpki-client