Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138352e302f32342d3234203d3e20323637353438.roa
File:                     3230312e3138322e3138352e302f32342d3234203d3e20323637353438.roa (raw, json)
Hash identifier:          mBuq/GdyJDvpCp1Mq/rlXY0CuB2vVxNDomksD+hq1eo=
Subject key identifier:   08:D9:42:01:D5:19:12:BE:C2:73:5A:7C:76:A1:66:81:3C:2F:73:D2
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       3258279951EC41452DDECD67652482210AEB3E57
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138352e302f32342d3234203d3e20323637353438.roa
Signing time:             Wed 30 Sep 2026 15:15:15 +0000
ROA not before:           Wed 30 Sep 2026 15:10:15 +0000
ROA not after:            Wed 29 Sep 2027 15:15:15 +0000
asID:                     267548
IP address blocks:        201.182.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 09:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:27:99:51:ec:41:45:2d:de:cd:67:65:24:82:21:0a:eb:3e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Sep 30 15:10:15 2026 GMT
            Not After : Sep 29 15:15:15 2027 GMT
        Subject: CN=08D94201D51912BEC2735A7C76A166813C2F73D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:14:59:ae:f3:74:5f:fc:6d:c2:0b:6a:01:49:
                    bd:80:c0:da:cb:26:db:0e:16:32:5b:f6:a6:2c:fe:
                    b3:bf:f7:9b:3b:3b:8d:24:c7:f5:1c:69:3c:00:9d:
                    1c:39:ab:03:06:0e:06:d9:1c:a8:bd:d1:55:b0:c4:
                    91:e9:8c:8b:15:64:5c:ef:85:93:12:91:83:92:d5:
                    32:36:f0:a7:66:51:0a:0f:71:47:7f:78:d9:e1:f6:
                    4c:c8:f5:64:ed:3a:49:ba:96:9e:80:e7:b9:f6:ca:
                    be:ba:0f:8d:a8:e8:35:35:2e:20:3d:fe:95:2d:c5:
                    3f:d1:05:cc:57:1d:ce:5d:2e:5d:f6:f1:b1:e9:92:
                    a7:ce:7f:4b:c6:7e:90:03:7a:e6:d1:2d:61:40:d8:
                    e3:a7:8b:bb:3a:00:0e:ae:84:f0:99:02:64:de:ca:
                    98:e0:dc:f2:53:53:f2:e9:da:53:97:49:2c:c4:db:
                    a8:ab:1c:5e:1d:43:fa:de:ef:15:46:11:3c:fb:bf:
                    8e:87:51:4f:e9:fd:43:7f:b3:c3:94:c4:cd:65:06:
                    a9:41:b7:e0:3b:70:40:81:1c:ee:28:04:e8:16:ae:
                    c5:55:5a:8d:cf:88:64:31:b1:ee:1a:49:6b:60:12:
                    8c:66:79:25:9c:f5:e2:40:7b:d3:48:59:e6:44:72:
                    1b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:42:01:D5:19:12:BE:C2:73:5A:7C:76:A1:66:81:3C:2F:73:D2
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138352e302f32342d3234203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:1c:e5:20:8c:cd:11:72:d5:0a:03:70:18:ed:f7:e3:00:5a:
         2b:f0:96:06:f1:8e:61:95:f2:e1:f8:17:e1:56:16:c9:c0:9d:
         5c:16:9e:2f:e4:b1:d5:5f:4b:6b:45:67:6d:1c:6a:21:16:0e:
         ac:c2:0f:76:a0:ae:07:c7:30:3c:6a:f9:80:fc:c0:87:87:2e:
         b8:5a:84:69:5a:a4:38:51:1b:ad:b6:8f:09:37:33:38:39:6a:
         82:e3:61:78:61:08:2d:b3:74:e4:62:49:84:57:43:27:bf:97:
         05:9e:22:27:54:06:e7:80:4f:50:c5:fa:ed:ec:99:25:1f:54:
         d3:91:d6:bc:b0:d4:02:09:0e:ef:01:5a:55:56:b0:dd:32:6c:
         f7:b9:bf:d0:7f:19:01:ab:40:49:92:f8:45:a4:6a:eb:95:32:
         a2:01:ab:3c:df:70:77:9e:2d:68:bf:32:39:12:d3:d6:02:00:
         9b:28:48:ce:34:dc:dd:48:32:db:fd:45:6d:e7:f1:1a:fa:39:
         30:3c:5c:df:7b:88:2d:f0:5b:14:90:03:65:59:bd:31:9f:c3:
         f3:b7:66:2f:12:90:5e:0c:37:b4:76:2d:66:ff:73:72:5f:cb:
         cc:df:b1:99:55:42:0f:26:41:19:5d:71:b5:88:65:e6:5f:9a:
         4c:3f:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:27:58 2026 by rpki-client