Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
File:                     3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa (raw, json)
Hash identifier:          4g6JulW9855dkvc7ojBlGQHOLtMNZ2PRC6ICayjT/S0=
Subject key identifier:   FA:E6:DC:72:D7:43:9B:65:A6:DE:E2:E1:CF:F5:81:8C:86:8C:EF:21
Certificate issuer:       /CN=D6C21E919D849D295973A3C07DBFAFE92BB49F7E
Certificate serial:       7E860142EAF3DA2DEC2F071C0E26AC7EA0909DF0
Authority key identifier: D6:C2:1E:91:9D:84:9D:29:59:73:A3:C0:7D:BF:AF:E9:2B:B4:9F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa
Signing time:             Wed 23 Sep 2026 11:51:10 +0000
ROA not before:           Wed 23 Sep 2026 11:46:10 +0000
ROA not after:            Wed 22 Sep 2027 11:51:10 +0000
asID:                     265174
IP address blocks:        167.249.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.crl
                          rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:01:42:ea:f3:da:2d:ec:2f:07:1c:0e:26:ac:7e:a0:90:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6C21E919D849D295973A3C07DBFAFE92BB49F7E
        Validity
            Not Before: Sep 23 11:46:10 2026 GMT
            Not After : Sep 22 11:51:10 2027 GMT
        Subject: CN=FAE6DC72D7439B65A6DEE2E1CFF5818C868CEF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:fd:e8:f0:02:20:9d:e0:e6:53:96:e2:2f:
                    31:67:f2:6a:2a:1d:c2:80:ae:a3:02:a7:c6:8e:84:
                    1e:41:d2:89:88:73:cc:98:4f:5d:3c:d2:b7:6c:3d:
                    3c:3f:0b:c0:33:91:e7:e3:7a:1a:bf:17:69:35:01:
                    50:63:ae:75:2b:f9:b4:74:d3:08:7c:37:85:af:21:
                    93:af:69:d1:2c:85:52:19:8e:29:33:9c:4f:d1:e7:
                    18:40:46:8a:52:8e:df:23:85:99:50:9b:cd:5f:66:
                    6c:d0:1e:8c:d5:50:8f:2b:e4:75:d8:e8:6e:55:fb:
                    40:85:25:1e:29:08:d5:bf:d9:6c:ac:61:34:22:68:
                    9d:3e:b4:21:4a:d1:62:e7:66:24:e0:3b:2b:6d:df:
                    62:5a:85:b5:98:3b:41:b6:f8:a5:01:7b:fb:00:b1:
                    32:74:5b:bc:86:e0:7e:b4:bf:8c:dd:94:4a:f6:54:
                    1f:e2:62:b5:52:05:38:8a:b5:2b:25:22:e9:a2:cf:
                    e9:ea:ce:ef:6d:66:74:ec:c5:ce:39:0f:a5:1a:66:
                    db:e2:ca:9a:73:df:bc:03:fd:1e:77:be:5a:bc:47:
                    9a:27:6d:db:ab:cd:c7:33:28:6c:7f:52:a9:c4:29:
                    1d:13:9a:a8:8d:7e:d4:ee:79:4a:fa:b5:e7:f2:37:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E6:DC:72:D7:43:9B:65:A6:DE:E2:E1:CF:F5:81:8C:86:8C:EF:21
            X509v3 Authority Key Identifier:
                keyid:D6:C2:1E:91:9D:84:9D:29:59:73:A3:C0:7D:BF:AF:E9:2B:B4:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6C21E919D849D295973A3C07DBFAFE92BB49F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/3136372e3234392e3230342e302f32322d3332203d3e20323635313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:99:eb:a8:ae:eb:ec:ce:60:91:e2:e6:1e:09:5a:0a:a7:16:
         ba:4c:ab:72:81:44:37:a0:83:27:60:52:b8:d3:a7:90:ca:1a:
         79:c9:5a:15:1c:f4:57:f3:80:29:a1:59:67:fe:76:0a:38:c1:
         ce:c1:5c:8d:6b:50:22:74:46:00:45:77:c9:8f:80:0e:83:75:
         95:16:9c:12:44:4f:50:50:12:66:05:76:a2:2f:af:53:cf:bd:
         5f:51:cc:de:85:9f:02:4e:55:4c:74:06:fa:c5:e2:99:2b:74:
         6a:96:63:b6:9e:17:58:43:3d:36:85:06:d8:8e:69:2a:65:43:
         d3:93:2d:69:d0:e9:69:e2:7c:1f:ef:d5:a8:1a:2a:6f:48:92:
         55:9a:e4:56:ad:8f:e9:2f:6d:8e:3c:21:25:2c:2d:96:3b:af:
         42:0c:47:66:4f:e8:da:4e:8e:da:00:5a:e0:fc:d7:57:2c:c1:
         dd:5d:33:f9:8a:53:0a:5d:98:59:f1:bd:ef:d2:9b:46:59:dd:
         79:89:6e:da:ed:7a:05:4c:7b:28:68:b1:93:33:72:28:2e:04:
         34:38:f2:fe:b3:27:d0:2e:00:48:0f:48:fc:56:5b:be:8c:96:
         4e:74:93:dc:3d:50:e8:67:1e:4f:4d:df:54:78:20:40:e9:bd:
         e4:81:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:58:25 2026 by rpki-client