Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa
File:                     3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          rfKTkUuJao0hJlGPBOQ9nUY6ppwn84hZY0u/22Ek4hw=
Subject key identifier:   53:B2:5F:64:0A:63:09:A8:F2:7F:03:F0:C5:20:31:56:8C:24:B2:62
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       2592DAFAF97DD2735815320FCDFF9BE17525EEB9
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa
Signing time:             Tue 04 Aug 2026 21:08:01 +0000
ROA not before:           Tue 04 Aug 2026 21:03:01 +0000
ROA not after:            Tue 03 Aug 2027 21:08:01 +0000
asID:                     262729
IP address blocks:        168.197.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 10:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:da:fa:f9:7d:d2:73:58:15:32:0f:cd:ff:9b:e1:75:25:ee:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Aug  4 21:03:01 2026 GMT
            Not After : Aug  3 21:08:01 2027 GMT
        Subject: CN=53B25F640A6309A8F27F03F0C52031568C24B262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:06:94:20:7b:cf:f9:95:1a:68:10:d8:21:
                    10:ba:ba:64:a7:01:f2:f8:d8:25:05:ef:df:9a:93:
                    b9:93:a8:f9:fc:41:62:6a:44:63:ec:5a:3a:9e:49:
                    a0:4a:07:a8:e2:b6:a5:e6:2f:9f:89:37:14:7c:06:
                    22:61:6a:4e:14:6b:54:e5:7b:e3:2e:85:17:4d:71:
                    05:be:b6:ec:f3:c8:03:76:55:3a:e9:16:58:01:46:
                    8a:f4:de:5f:94:59:c6:f0:e3:24:f0:8f:d8:d2:d5:
                    84:29:ab:a8:5d:66:40:43:67:d5:e1:84:f9:7d:f5:
                    d9:d2:47:27:ae:5e:37:ac:37:7e:c6:34:4f:15:00:
                    4c:f9:83:6c:10:f7:6d:e6:73:3c:f6:a5:71:d8:09:
                    15:ec:e9:f1:7c:6d:a2:dd:93:af:1b:cf:59:3e:13:
                    f8:17:5c:3e:ff:c2:c0:5f:8a:4d:46:9c:c2:86:eb:
                    f8:e1:3c:36:c8:64:67:6b:79:ee:dd:16:27:f4:f7:
                    48:cf:ff:5f:38:70:0a:d3:72:a3:dc:ef:8c:0c:f0:
                    6e:f2:fb:ad:62:b9:b0:f8:30:57:eb:65:a6:7b:56:
                    12:eb:42:4a:65:c4:49:26:87:20:3f:b2:1c:a0:54:
                    8e:12:40:d8:0c:e6:e9:97:5d:ba:90:44:a4:5c:4a:
                    43:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:5F:64:0A:63:09:A8:F2:7F:03:F0:C5:20:31:56:8C:24:B2:62
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3136382e3139372e3232352e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:18:15:7a:ac:8f:59:80:42:2b:b6:01:0d:47:fc:82:c9:
         e6:5f:7a:16:2f:53:d7:7a:3a:f3:ed:34:86:b3:18:4b:f2:86:
         f7:98:9e:a4:70:9e:43:fb:bb:0f:c6:d6:00:45:f8:a1:e5:48:
         30:6f:b4:b8:8d:a3:77:50:1f:0e:f8:54:62:c8:40:f0:1a:6e:
         c1:71:77:8d:a3:08:db:0a:62:5f:02:29:cf:6f:2f:e1:79:d1:
         80:38:d1:00:5c:15:33:d1:8b:01:aa:d6:b9:98:4a:95:65:ca:
         4d:24:c9:46:73:75:c2:7b:00:21:0f:19:e8:19:47:f8:33:ae:
         40:a2:d4:ae:b8:3a:1a:b3:63:73:05:63:da:c1:c9:65:ab:64:
         ce:bb:fb:4d:12:3e:49:77:f0:a7:a3:3a:56:11:f0:58:7a:9f:
         10:6e:d2:62:63:bf:84:27:e0:c1:ed:43:5f:20:d8:52:64:b7:
         e3:b7:44:43:1c:ba:25:4b:05:3d:85:5f:2a:b2:62:fe:52:94:
         57:88:ce:6a:b2:40:e6:d6:b1:39:38:9b:55:c7:b0:89:01:4a:
         d6:e9:7c:64:c2:ff:fe:e5:da:ae:f7:68:4d:f1:41:1e:10:32:
         af:59:27:5d:0a:e0:3e:29:77:e6:bf:d3:b7:c1:67:a3:89:08:
         48:0f:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:31:12 2026 by rpki-client