Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3234203d3e20323632373737.roa
File:                     3138362e3233332e31362e302f32312d3234203d3e20323632373737.roa (raw, json)
Hash identifier:          rpnuwA7y0SuuhGmzvRL6JFW6WHP7ezxU4uMgJmn5k24=
Subject key identifier:   B7:E3:E4:BC:AE:03:A9:04:35:DF:AF:58:8F:FA:45:4F:1A:42:7F:97
Certificate issuer:       /CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
Certificate serial:       065EAACADB926913D12287E958C0F22B7D8017E8
Authority key identifier: 46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3234203d3e20323632373737.roa
Signing time:             Thu 15 Oct 2026 16:58:18 +0000
ROA not before:           Thu 15 Oct 2026 16:53:18 +0000
ROA not after:            Thu 14 Oct 2027 16:58:18 +0000
asID:                     262777
IP address blocks:        186.233.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl
                          rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5e:aa:ca:db:92:69:13:d1:22:87:e9:58:c0:f2:2b:7d:80:17:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46347A4C2AE403C996A9371EF62F1CE19E33F606
        Validity
            Not Before: Oct 15 16:53:18 2026 GMT
            Not After : Oct 14 16:58:18 2027 GMT
        Subject: CN=B7E3E4BCAE03A90435DFAF588FFA454F1A427F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:55:15:3f:7e:30:3a:61:04:44:c8:2f:a4:
                    e0:2d:ab:9b:29:b2:fe:1f:b5:b3:80:09:f3:4f:d2:
                    ed:93:ce:2b:85:71:b1:4a:14:99:be:51:0c:43:dc:
                    4e:8d:47:c9:cd:07:73:00:90:ed:5c:80:77:96:2e:
                    d2:05:78:11:66:50:92:7f:63:99:b0:c0:7e:3d:59:
                    ed:e1:e9:68:63:83:90:d1:a8:36:45:ae:46:d8:de:
                    08:d1:08:9f:ea:28:36:b0:55:c9:d8:7c:02:c1:e1:
                    1c:c7:1f:8b:1c:fc:ba:b5:69:f0:95:81:3b:c2:3e:
                    31:3a:19:be:ed:2a:99:4c:4c:79:28:9e:71:f0:73:
                    36:d4:23:94:83:08:56:ca:89:a1:f9:ec:52:65:26:
                    c0:8f:0b:f8:3b:8a:68:c3:95:ac:82:bc:9e:71:27:
                    61:8f:9b:56:18:ed:9d:4d:cb:a7:55:ee:43:a3:5b:
                    4c:fa:18:3f:74:cd:a8:42:1a:ce:41:57:9f:db:e6:
                    d1:5e:82:70:6b:b5:c7:69:74:00:22:3b:06:3d:fc:
                    2a:d3:6e:80:bd:98:b1:3c:fa:60:89:ad:c0:be:0a:
                    44:2a:b0:d3:68:92:02:f0:e4:b4:e3:1e:eb:f4:2a:
                    ac:8d:48:1e:8c:91:29:02:e8:bb:61:46:69:6d:44:
                    b6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E3:E4:BC:AE:03:A9:04:35:DF:AF:58:8F:FA:45:4F:1A:42:7F:97
            X509v3 Authority Key Identifier:
                keyid:46:34:7A:4C:2A:E4:03:C9:96:A9:37:1E:F6:2F:1C:E1:9E:33:F6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/46347A4C2AE403C996A9371EF62F1CE19E33F606.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46347A4C2AE403C996A9371EF62F1CE19E33F606.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaUS6jW9JnQCTS7jE2i3LKUthfnoxKWvkuhvjgVBZMKb/0/3138362e3233332e31362e302f32312d3234203d3e20323632373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:23:12:30:f6:00:cc:ad:8c:fa:4b:0c:26:c9:d7:83:35:
         c1:67:99:63:d3:0f:87:87:e7:ed:e7:d6:43:a6:d8:90:70:33:
         49:82:5c:6d:24:51:a0:45:b9:98:e1:b4:0d:51:45:5a:47:aa:
         75:9a:e4:09:d0:d3:9c:7d:84:8e:65:0d:24:82:91:73:b2:fa:
         59:f6:f1:a1:56:3d:12:3b:7c:67:42:56:c5:3d:f9:c9:02:f0:
         91:79:95:cf:20:bc:66:d0:3f:b8:95:7f:aa:a3:36:75:68:bb:
         ed:12:1c:5d:1b:d0:96:66:fb:f6:40:c7:62:18:be:99:10:b5:
         ef:12:c5:0f:bf:0e:b3:c8:21:10:bd:66:7a:47:99:e9:29:ef:
         37:6d:a1:bf:46:d0:d6:1b:59:a5:e3:c1:54:30:7a:32:90:0a:
         d4:35:69:98:30:fa:81:bf:86:a8:22:c3:59:b2:30:74:c6:f6:
         b1:e8:86:0d:3f:67:fd:98:5a:0e:c9:7e:cd:16:42:ab:4f:ae:
         e6:fe:44:2e:d9:15:03:87:8a:59:26:2e:20:a5:a6:42:b9:dd:
         68:23:ac:1e:81:ff:5a:ed:44:47:f5:cf:48:c0:42:f9:b0:e2:
         c0:db:ff:6a:2c:55:61:ad:8c:89:49:81:dc:6c:94:70:9f:03:
         9c:10:4b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:42:42 2026 by rpki-client