Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3234203d3e20323730393830.roa
File:                     3136382e3139362e3139362e302f32322d3234203d3e20323730393830.roa (raw, json)
Hash identifier:          0Tt0/xhpmx4ov2bG4DFSiX0z1W8FDkRBU4sbdvXb6oA=
Subject key identifier:   C9:37:E9:9C:60:22:8C:71:DA:4B:A8:A2:7A:74:E0:87:39:14:34:AA
Certificate issuer:       /CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
Certificate serial:       76F435095A8A89E00040AB73142DEA542077E0CA
Authority key identifier: 09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3234203d3e20323730393830.roa
Signing time:             Tue 04 Aug 2026 17:32:48 +0000
ROA not before:           Tue 04 Aug 2026 17:27:48 +0000
ROA not after:            Tue 03 Aug 2027 17:32:48 +0000
asID:                     270980
IP address blocks:        168.196.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f4:35:09:5a:8a:89:e0:00:40:ab:73:14:2d:ea:54:20:77:e0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0999EEBD16ACF640EA6ECD54D32D89799668A6E2
        Validity
            Not Before: Aug  4 17:27:48 2026 GMT
            Not After : Aug  3 17:32:48 2027 GMT
        Subject: CN=C937E99C60228C71DA4BA8A27A74E087391434AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:ab:8b:83:f7:82:6c:2d:c1:d3:aa:61:d9:
                    31:22:00:23:b6:bc:51:70:23:08:70:f8:c9:ee:32:
                    6f:0d:a4:df:0c:7c:27:db:1c:58:4f:72:99:de:20:
                    02:6a:51:44:7d:b0:d2:23:f5:6a:57:55:f0:fa:d4:
                    9f:a4:87:58:5c:7f:68:d4:2a:aa:6d:b7:55:aa:81:
                    89:a0:c5:65:17:8e:14:8c:15:f4:f4:f7:b2:10:bb:
                    b3:06:c8:0b:a8:31:5a:3c:02:80:44:92:3e:6b:bb:
                    13:0f:5c:78:67:0c:64:56:23:10:4a:1c:76:ab:ec:
                    26:ca:16:ff:7a:24:7c:52:38:57:e7:31:46:09:b0:
                    f8:13:9f:a9:52:29:8f:8c:8d:bc:72:ac:4f:e2:db:
                    c1:2e:70:41:2c:c4:62:73:94:41:2b:42:05:10:0e:
                    dd:7d:8a:d2:28:2d:44:fd:49:7e:6d:fc:6b:27:c1:
                    5c:02:94:dd:fd:ce:1d:5e:67:c7:bf:71:88:27:9a:
                    77:72:06:4a:b9:1b:44:bd:7f:d7:e1:c2:81:d5:1f:
                    e8:7f:ab:f6:38:c9:9c:88:6f:73:c5:9c:26:7c:46:
                    61:8d:c0:dd:16:28:3a:1e:db:63:db:31:5e:c5:d7:
                    43:49:c4:7a:43:a0:fe:40:21:29:d3:04:61:3b:cd:
                    45:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:E9:9C:60:22:8C:71:DA:4B:A8:A2:7A:74:E0:87:39:14:34:AA
            X509v3 Authority Key Identifier:
                keyid:09:99:EE:BD:16:AC:F6:40:EA:6E:CD:54:D3:2D:89:79:96:68:A6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0999EEBD16ACF640EA6ECD54D32D89799668A6E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/3136382e3139362e3139362e302f32322d3234203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:80:cf:e9:13:0e:1e:cc:a6:cb:6e:1f:e9:54:03:ac:1b:49:
         34:da:86:89:bc:56:07:07:ec:b4:24:f9:b0:4a:b6:1f:86:93:
         f4:b0:68:48:c5:31:b7:56:11:22:7c:00:29:88:10:b7:8f:66:
         10:e8:69:22:ac:94:b4:d8:f4:74:10:03:cf:2a:36:21:1f:92:
         01:76:21:b5:1b:b5:55:5a:37:4b:11:94:9a:91:45:ad:38:83:
         dc:d8:68:84:c1:a5:f0:56:57:7a:b7:1f:fa:08:ba:69:31:48:
         7f:3c:37:1c:46:e8:7c:dd:92:4a:5f:b2:ba:e8:90:c1:77:59:
         d6:82:0a:3a:30:c6:0b:de:b4:7e:bd:f4:0d:40:7e:6f:92:8b:
         6f:e5:54:b9:10:38:53:90:31:32:d1:09:12:7d:e6:73:fb:57:
         57:41:e6:fa:89:a0:d0:94:76:92:a3:75:de:89:e2:0c:d9:7d:
         2a:19:15:49:d9:1c:69:0f:6e:35:da:b8:f1:2d:a0:61:ab:cd:
         a3:1f:9f:3e:44:ed:e0:0f:32:ba:30:6a:6c:e1:ca:f1:35:54:
         b5:7a:1d:7b:16:01:54:75:49:d1:a3:5f:e9:9c:2e:8d:e4:ca:
         fd:77:f7:08:46:cc:ee:c4:e1:7d:cf:e2:6c:9b:9e:41:c0:0a:
         f4:cf:41:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:52:20 2026 by rpki-client