Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3136372e3235302e3132342e302f32332d3234203d3e20323632343638.roa
File:                     3136372e3235302e3132342e302f32332d3234203d3e20323632343638.roa (raw, json)
Hash identifier:          kOrsSET+8aMSbo9/mgDQKBT95H8CQEiYwwuMkxtkCEg=
Subject key identifier:   96:D7:63:C6:17:97:45:16:57:37:32:08:51:42:A9:F3:64:4A:04:0E
Certificate issuer:       /CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
Certificate serial:       63FBB87FEB6D7E01D5D90AB350E0E4F975625E1D
Authority key identifier: 40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3136372e3235302e3132342e302f32332d3234203d3e20323632343638.roa
Signing time:             Fri 25 Sep 2026 17:13:11 +0000
ROA not before:           Fri 25 Sep 2026 17:08:11 +0000
ROA not after:            Fri 24 Sep 2027 17:13:11 +0000
asID:                     262468
IP address blocks:        167.250.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl
                          rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 05:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fb:b8:7f:eb:6d:7e:01:d5:d9:0a:b3:50:e0:e4:f9:75:62:5e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405D2DEC132ACCB71362AFA8367808F3FDE8D341
        Validity
            Not Before: Sep 25 17:08:11 2026 GMT
            Not After : Sep 24 17:13:11 2027 GMT
        Subject: CN=96D763C617974516573732085142A9F3644A040E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:95:d8:4c:64:7d:d6:b3:ac:35:12:8c:48:
                    a7:60:35:0c:ba:ec:eb:61:88:01:52:c6:dd:ad:ff:
                    8d:b0:b1:3c:67:85:be:11:e7:0b:dc:fe:e3:f2:24:
                    d3:33:36:ee:9f:74:f5:0c:3b:f5:82:bd:80:3f:94:
                    9e:96:5b:54:d0:bf:77:d0:78:f0:02:8a:5a:c7:06:
                    68:70:99:c1:94:fe:28:82:d1:81:f4:48:d7:57:8a:
                    89:d1:8b:d5:df:44:ac:68:16:21:64:0c:df:d3:80:
                    ad:00:8f:1f:fa:55:34:55:b0:18:cb:29:ea:e3:a3:
                    ee:d4:09:96:fd:11:d7:83:d6:13:25:ee:34:f0:de:
                    7f:fc:49:c7:1f:9d:d1:b3:ca:fb:b6:97:ad:e1:55:
                    87:59:29:ad:fe:d6:41:97:57:f1:1d:4f:77:0e:5a:
                    f9:94:b7:f5:c8:2d:16:c1:36:ce:6c:60:5d:59:34:
                    48:df:5c:6b:9c:e3:e7:8c:34:9a:26:c4:ce:a7:fd:
                    e1:74:9c:b2:88:53:da:96:ce:87:4d:87:85:92:bb:
                    b6:dc:9f:20:bf:10:f4:50:5d:5c:0d:9c:86:e9:65:
                    60:62:8b:84:77:56:31:34:a5:13:20:d4:31:27:4f:
                    7a:25:82:9d:7e:70:2f:86:c7:59:9e:44:0d:9d:9c:
                    be:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:63:C6:17:97:45:16:57:37:32:08:51:42:A9:F3:64:4A:04:0E
            X509v3 Authority Key Identifier:
                keyid:40:5D:2D:EC:13:2A:CC:B7:13:62:AF:A8:36:78:08:F3:FD:E8:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/405D2DEC132ACCB71362AFA8367808F3FDE8D341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/405D2DEC132ACCB71362AFA8367808F3FDE8D341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/2/3136372e3235302e3132342e302f32332d3234203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:95:cb:4f:7e:cd:a2:17:e0:83:41:61:6b:ba:f7:f6:ee:
         d0:4e:5b:b2:7b:17:e7:fe:a6:5c:77:e6:78:6c:a4:ed:54:00:
         e4:82:6b:15:f4:ff:83:80:ce:b9:00:7c:e4:fa:dd:ff:a9:e6:
         5d:b0:8e:aa:6d:c5:d7:59:f5:e3:83:60:57:ac:76:9b:51:09:
         d5:b6:a7:61:2e:71:9e:40:21:9f:cf:bc:71:31:cc:61:8f:80:
         0c:e6:0d:72:0e:70:f7:52:58:d2:3c:2d:fe:34:5d:27:b6:46:
         b2:68:61:c0:01:0a:cf:26:03:f9:d6:42:14:83:93:2a:1d:36:
         19:bb:cf:d8:ab:72:eb:39:a6:fe:50:57:2b:9b:48:5b:52:ee:
         ee:14:96:1a:cf:ef:b6:f6:41:b1:11:98:46:5c:de:97:94:53:
         c5:a9:58:4e:e1:f3:6b:bd:5b:8b:c4:4a:12:07:32:b1:b0:e7:
         15:da:9d:58:c0:b5:71:1a:a6:36:34:63:a5:f9:85:2a:af:bd:
         3d:75:1d:72:10:8d:ef:bb:fc:c3:e2:4a:54:29:60:9a:93:dc:
         38:e0:c5:e0:1e:33:b2:66:8c:45:9b:13:fa:2b:6d:14:91:2f:
         f6:aa:a8:71:55:aa:46:e3:fe:52:08:6a:64:68:09:c5:d6:7e:
         5a:a9:98:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:55:28 2026 by rpki-client