Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa
File:                     3136382e302e3136342e302f32332d3233203d3e20323633343833.roa (raw, json)
Hash identifier:          yMvo03Cefd/cmb7czi8xYIFRw5maXxCOTZmUOp6ZQrI=
Subject key identifier:   0B:A8:86:BD:BE:D9:10:AA:DB:A5:B7:7C:B0:0A:A8:79:AE:E8:81:21
Certificate issuer:       /CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
Certificate serial:       0E77B3BEC8618137FCC2658EC3F8E26A7171D383
Authority key identifier: 6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa
Signing time:             Wed 29 Jul 2026 15:18:27 +0000
ROA not before:           Wed 29 Jul 2026 15:13:27 +0000
ROA not after:            Wed 28 Jul 2027 15:18:27 +0000
asID:                     263483
IP address blocks:        168.0.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl
                          rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:b3:be:c8:61:81:37:fc:c2:65:8e:c3:f8:e2:6a:71:71:d3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FD8D0D68F2208E3EDC86B958989529597FE5B05
        Validity
            Not Before: Jul 29 15:13:27 2026 GMT
            Not After : Jul 28 15:18:27 2027 GMT
        Subject: CN=0BA886BDBED910AADBA5B77CB00AA879AEE88121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:c4:12:ec:65:5d:ea:44:63:00:84:8e:8a:
                    8f:6b:91:cf:fe:10:d7:c3:bc:23:4f:a9:87:0c:87:
                    4b:c0:90:ad:1a:9e:69:48:34:62:bc:33:a4:c7:45:
                    05:3e:ab:d9:95:6b:84:c7:09:d4:40:83:dc:25:3b:
                    f6:a4:25:65:03:4b:f1:38:63:ca:e6:dd:3e:0f:cc:
                    ce:5c:28:29:47:a5:1b:8d:00:d7:c2:83:be:cd:1c:
                    f2:d3:fd:79:f8:ff:2b:da:d9:83:52:17:22:ce:15:
                    e8:d9:12:7d:60:06:97:df:af:09:ac:a1:f1:f2:0f:
                    1e:95:a8:87:58:18:e9:5d:7d:19:cd:6b:f2:04:c3:
                    b6:65:a1:3d:33:af:20:b5:6d:99:c7:8b:76:ec:a0:
                    aa:0a:ef:b2:bd:f1:ef:7c:88:00:38:1a:7e:97:19:
                    d3:af:57:27:d9:21:17:b1:34:e5:01:db:12:c2:d3:
                    a2:78:63:1b:0e:3c:d0:54:49:bb:dc:be:68:6e:b7:
                    ff:49:b2:d6:57:58:37:d1:b9:2d:28:51:b8:2e:66:
                    28:18:21:d5:1e:23:27:5d:77:cb:58:3f:f1:13:9d:
                    30:b8:a8:a6:e0:a7:99:17:44:6d:4e:fc:c1:18:03:
                    aa:7f:e2:38:47:cf:9e:0c:86:d6:1d:b4:83:f3:db:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:86:BD:BE:D9:10:AA:DB:A5:B7:7C:B0:0A:A8:79:AE:E8:81:21
            X509v3 Authority Key Identifier:
                keyid:6F:D8:D0:D6:8F:22:08:E3:ED:C8:6B:95:89:89:52:95:97:FE:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/6FD8D0D68F2208E3EDC86B958989529597FE5B05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FD8D0D68F2208E3EDC86B958989529597FE5B05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4xNXu9cZbJ9AWyftXUzXTdsmD4GsnC252k9ZAMdeAUp/0/3136382e302e3136342e302f32332d3233203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:02:7c:a1:58:a6:fb:f4:21:c1:81:37:3f:ce:60:46:28:ea:
         f7:14:ad:6c:2b:ee:3e:f8:17:18:a0:89:4a:d8:e7:ff:91:a7:
         55:1f:6a:8f:37:8f:db:5d:45:72:fe:ac:37:49:b9:01:5f:4e:
         a0:80:c9:5f:8b:df:f3:6d:e5:bc:6a:8b:6c:90:0a:89:1e:bd:
         0a:26:39:87:21:04:57:df:47:4f:88:cd:92:db:46:96:58:51:
         bc:14:64:88:cb:0b:d3:c3:84:d1:18:22:d2:e9:b1:c1:9d:b0:
         2c:0b:6b:c4:5d:53:d1:a0:fc:b6:61:43:31:f4:51:92:b2:a7:
         ce:c9:ee:3d:95:9f:06:1c:e2:1a:d4:04:5f:c5:6a:37:d9:3e:
         86:bb:c1:8e:40:fa:3b:10:3f:8d:49:04:22:76:8a:35:be:89:
         65:35:b5:c9:ce:12:76:64:6a:0d:2b:c7:ec:35:c5:3b:ad:64:
         b0:76:86:23:81:1b:fe:07:19:dc:d3:84:b1:7e:e2:b0:e5:07:
         68:d2:d9:1a:84:9b:16:1a:79:bd:3b:e5:da:77:5a:60:dc:d5:
         29:4c:05:56:15:2b:2c:ed:3c:34:d2:89:10:1f:81:b7:42:b3:
         a0:b8:b6:55:95:5d:92:6f:ca:06:29:93:66:32:6e:d2:f6:b1:
         a8:ee:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:15:47 2026 by rpki-client