Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa
File:                     3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          vH6ANbUyo9w7Czvgy2ilsr52z9BeutlqYk7QvALFP8A=
Subject key identifier:   C6:0F:0E:A3:77:33:E6:42:36:B5:4D:7E:CC:B9:E9:61:63:C6:EA:03
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       3260E275EB7F54E3B93B2E897230F4FB4F6ED4D3
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:52 +0000
ROA not before:           Mon 21 Sep 2026 19:43:52 +0000
ROA not after:            Mon 20 Sep 2027 19:48:52 +0000
asID:                     263880
IP address blocks:        168.181.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 20:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:60:e2:75:eb:7f:54:e3:b9:3b:2e:89:72:30:f4:fb:4f:6e:d4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:52 2026 GMT
            Not After : Sep 20 19:48:52 2027 GMT
        Subject: CN=C60F0EA37733E64236B54D7ECCB9E96163C6EA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:87:02:31:a0:3e:88:6f:a4:13:70:5f:f7:
                    8b:91:2d:df:53:56:b9:97:2d:59:0b:5f:61:3f:ce:
                    96:4f:7e:36:ec:71:9d:e9:92:f3:ae:e7:c7:6e:7d:
                    da:ff:69:41:d2:42:ca:08:5f:d6:9a:98:60:a9:c5:
                    92:66:9d:66:e8:23:a9:c5:52:10:ca:a0:40:80:6a:
                    f3:d0:b7:2d:3f:cd:f8:35:fe:9c:77:25:ab:4c:0e:
                    1e:56:a3:cc:88:7b:af:61:2f:1e:bf:4f:20:e6:79:
                    e1:9b:cf:fa:36:c4:b6:6d:32:51:2d:c9:7a:db:fb:
                    4a:39:17:32:0d:f3:d2:ad:d1:cb:9e:32:64:51:69:
                    33:22:14:73:b4:cd:cb:5d:6d:60:f5:59:f5:e9:43:
                    0b:e8:8e:6c:82:24:1a:96:2b:76:45:40:2e:69:d6:
                    cd:d4:b3:d2:e7:f4:ed:3e:db:f2:8d:ea:05:8e:a0:
                    ff:cd:7f:13:13:4c:aa:e1:00:94:40:d2:50:f8:15:
                    a1:22:14:8b:b1:e4:a5:0b:ff:2b:b9:70:d5:75:b5:
                    46:1f:4c:c8:a9:5d:11:7e:8e:46:b9:f1:52:aa:01:
                    c4:15:fa:ae:ec:fe:07:81:44:05:46:71:ad:81:30:
                    b0:02:09:f9:e6:e7:ec:5d:06:59:c7:4a:6b:bb:53:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:0E:A3:77:33:E6:42:36:B5:4D:7E:CC:B9:E9:61:63:C6:EA:03
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3136382e3138312e3133362e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:a1:b3:50:83:e8:83:b4:de:ea:ab:2c:b5:f0:21:d6:fa:67:
         e7:4f:0b:3c:95:67:30:6a:d9:ea:9d:d4:61:d4:6d:dc:bf:2d:
         d3:93:be:4b:42:18:57:5f:4d:19:f3:af:b3:0e:9d:7c:25:25:
         d9:d2:bd:a6:ca:2e:e4:5a:3f:31:9e:96:75:91:06:ef:5d:39:
         f1:0d:4d:e6:18:49:18:b1:78:9d:f1:b8:d7:cf:90:43:14:3f:
         2e:e0:c2:cc:d3:1f:e3:bb:a6:c0:03:6f:7b:32:cd:63:27:ff:
         9c:18:79:78:4d:a4:93:b0:7e:64:fd:b1:0b:5b:d4:11:51:bb:
         f3:96:f6:d5:2e:b1:40:ea:ba:c4:77:00:51:33:7c:86:b4:f4:
         30:bd:25:2c:18:a1:05:5e:70:13:28:98:39:d8:c4:60:eb:56:
         a6:39:10:84:c4:17:88:5b:bd:60:f7:d2:41:51:44:b0:5e:bb:
         d7:16:1f:14:22:7f:70:26:d1:50:68:51:f6:ca:83:99:9f:5f:
         51:11:83:7a:e7:6d:c7:f7:d1:a3:96:17:20:b3:f2:76:d7:95:
         1e:c2:d3:fb:8d:54:ac:f7:9d:db:05:58:bd:6b:9f:7d:f5:f9:
         6d:8f:9e:cd:90:85:08:98:51:91:88:bd:52:85:52:29:3b:4d:
         60:95:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----