Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32342d3234203d3e20323637353438.roa
File:                     3230312e3138322e3138362e302f32342d3234203d3e20323637353438.roa (raw, json)
Hash identifier:          Wu5Qk4CugKfl4SscULRwCWe96ztWyxrOsuSwWJEvFho=
Subject key identifier:   FA:54:5F:00:07:07:A7:E9:E2:45:85:93:C6:CB:DC:C0:6F:78:53:E6
Certificate issuer:       /CN=E36722E12D3D74530F7B920A984B1FD5187151B6
Certificate serial:       33580904481C4F01AE922AAC30B16F81C9CBA40B
Authority key identifier: E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32342d3234203d3e20323637353438.roa
Signing time:             Thu 01 Oct 2026 23:15:48 +0000
ROA not before:           Thu 01 Oct 2026 23:10:48 +0000
ROA not after:            Thu 30 Sep 2027 23:15:48 +0000
asID:                     267548
IP address blocks:        201.182.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 15:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:58:09:04:48:1c:4f:01:ae:92:2a:ac:30:b1:6f:81:c9:cb:a4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E36722E12D3D74530F7B920A984B1FD5187151B6
        Validity
            Not Before: Oct  1 23:10:48 2026 GMT
            Not After : Sep 30 23:15:48 2027 GMT
        Subject: CN=FA545F000707A7E9E2458593C6CBDCC06F7853E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:09:d3:73:21:40:72:b8:05:8f:39:49:e3:
                    d3:c4:20:97:8f:76:98:2e:8a:27:6d:62:c7:69:61:
                    42:fb:65:69:bd:28:c5:7f:83:3c:43:04:c5:64:93:
                    72:8d:4a:14:05:d9:c7:f6:b3:eb:ec:3c:18:06:85:
                    62:7f:c1:80:45:51:1e:75:6b:15:89:e4:6f:d9:41:
                    c0:c7:fc:dd:4a:1b:ab:88:c0:0e:f7:7d:ec:d6:9f:
                    2b:74:99:c2:2f:9e:9b:8a:41:f0:20:06:e4:5c:17:
                    05:28:cf:80:a6:c1:df:db:54:7e:a6:9e:79:ef:81:
                    4b:33:bb:bb:1d:d3:a8:26:7e:08:0c:a2:b5:74:17:
                    77:e4:9b:61:ed:cf:20:d9:21:53:57:cf:42:36:9d:
                    6a:27:c7:9b:30:5b:3c:ed:a9:4a:7b:25:f0:5d:43:
                    b1:c5:5e:91:89:e0:46:6e:bf:fe:c4:79:a0:8b:e5:
                    8f:96:56:a3:89:68:c0:68:8a:17:a7:cd:99:fc:f9:
                    19:52:a3:d5:ed:5f:ff:cf:b5:9f:93:ce:80:7b:1e:
                    ec:40:b6:db:5f:25:ac:d3:d7:3f:2b:86:9e:39:dd:
                    2e:12:ee:9b:d1:93:e1:e1:a4:eb:e4:a7:d4:da:35:
                    59:66:e6:0a:57:e0:52:28:9f:6c:b9:8a:73:fd:08:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:5F:00:07:07:A7:E9:E2:45:85:93:C6:CB:DC:C0:6F:78:53:E6
            X509v3 Authority Key Identifier:
                keyid:E3:67:22:E1:2D:3D:74:53:0F:7B:92:0A:98:4B:1F:D5:18:71:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/E36722E12D3D74530F7B920A984B1FD5187151B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E36722E12D3D74530F7B920A984B1FD5187151B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/0/3230312e3138322e3138362e302f32342d3234203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:11:99:72:3e:58:f4:b8:b5:f9:39:cd:51:94:af:66:52:
         f8:c1:97:f6:aa:b6:11:77:76:44:dd:d5:38:43:1e:c0:5e:d9:
         eb:28:6b:3a:8f:76:ce:2c:a3:9b:39:97:a3:64:2a:57:a6:ff:
         25:ec:01:e3:47:28:d4:8a:c1:01:81:5c:54:22:9a:73:7d:71:
         78:ae:6e:e4:24:4a:d1:8c:35:40:d3:d9:b1:29:fe:25:66:dd:
         e0:f8:64:24:58:58:1a:54:be:f7:34:36:6b:d3:a3:aa:3b:d6:
         37:da:4e:11:56:24:91:ac:1f:74:56:fc:15:5c:8f:4f:11:55:
         6a:4e:1e:cf:dd:d9:57:f9:31:12:80:82:fd:24:53:a7:38:52:
         aa:88:13:5c:e8:53:8e:5a:99:e7:10:5f:3d:79:fd:a4:74:55:
         2a:45:d8:37:54:e5:b1:d4:80:61:4f:63:ac:34:04:bb:e8:c1:
         1e:e8:a1:27:af:f0:ae:64:6b:7b:1e:32:27:f2:f5:15:d6:c6:
         f5:e4:5f:4a:dc:bc:89:72:f7:e2:a0:5a:a1:bd:ba:7b:b2:66:
         2d:4d:f9:5f:bf:1b:47:e4:cf:dd:53:77:c7:70:b6:2f:0a:ae:
         10:c4:fd:30:51:13:12:a0:11:3b:8b:db:5d:d2:61:ed:38:f5:
         76:4e:18:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:04:46 2026 by rpki-client