Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3234203d3e20323635393735.roa
File:                     3136342e3136332e36382e302f32322d3234203d3e20323635393735.roa (raw, json)
Hash identifier:          IqF/utLWK2VEKJord2AClJm6DcUy1Q6pUV5MsebBAf0=
Subject key identifier:   D2:9F:88:DC:C7:F8:42:F6:62:2F:D2:63:34:AA:D0:80:F7:84:66:E8
Certificate issuer:       /CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
Certificate serial:       4AC8008D36B9BA69557DA73C2445BA391C4AC2CB
Authority key identifier: 2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3234203d3e20323635393735.roa
Signing time:             Fri 18 Sep 2026 14:37:15 +0000
ROA not before:           Fri 18 Sep 2026 14:32:15 +0000
ROA not after:            Fri 17 Sep 2027 14:37:15 +0000
asID:                     265975
IP address blocks:        164.163.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl
                          rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 22:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:00:8d:36:b9:ba:69:55:7d:a7:3c:24:45:ba:39:1c:4a:c2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1
        Validity
            Not Before: Sep 18 14:32:15 2026 GMT
            Not After : Sep 17 14:37:15 2027 GMT
        Subject: CN=D29F88DCC7F842F6622FD26334AAD080F78466E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:e4:cf:36:a4:90:16:e8:ec:11:85:f4:d6:
                    c0:04:f4:2b:90:1a:46:76:c7:41:13:1d:4e:3c:72:
                    8c:d2:3c:98:05:34:2b:d0:48:c0:46:7a:b3:c0:85:
                    4c:61:6a:61:e3:33:a1:72:4f:3d:76:38:9e:f5:4b:
                    be:68:13:d9:e4:9d:cb:ce:24:07:15:d0:9a:e4:25:
                    be:76:da:9b:44:b7:cc:e7:b5:49:ce:bb:92:51:a5:
                    5c:3a:df:1a:f0:4c:f6:ab:b7:ed:ae:5e:93:9c:95:
                    8d:d2:78:3c:bd:b9:2c:dc:c5:f9:9f:45:4f:13:b6:
                    62:41:05:2c:a0:09:c8:ae:7d:36:ba:f5:45:19:15:
                    de:d1:8c:d2:1f:11:e4:e8:5a:22:dc:81:9f:42:41:
                    78:f5:07:5a:d4:b3:85:e6:29:7e:8e:b1:ed:d0:48:
                    28:34:55:15:56:42:ef:25:a3:1b:41:37:ac:9f:d5:
                    d9:67:0d:e3:32:bb:0a:25:07:77:a2:54:5d:76:ec:
                    86:8a:95:d2:a8:7a:5d:b8:f3:87:c8:5f:e0:8c:66:
                    f6:48:a6:ea:8c:9e:e7:b3:c3:a7:e6:e4:f4:46:f6:
                    73:16:67:81:f6:a1:b9:bf:e9:40:52:0f:7e:29:70:
                    fb:d7:82:3e:7c:61:4a:0d:3a:95:84:62:62:cc:0f:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:88:DC:C7:F8:42:F6:62:2F:D2:63:34:AA:D0:80:F7:84:66:E8
            X509v3 Authority Key Identifier:
                keyid:2C:D1:1F:1C:63:9F:B5:D4:95:F1:A5:BA:66:FC:73:3D:44:CB:97:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CD11F1C639FB5D495F1A5BA66FC733D44CB97E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3136342e3136332e36382e302f32322d3234203d3e20323635393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:95:cf:02:bc:28:f3:ff:c3:db:27:1d:e4:c0:08:5e:eb:
         94:ec:bd:53:33:3a:7a:11:05:a7:4f:52:f7:cf:de:24:15:d6:
         87:de:e3:70:85:94:de:01:78:a8:b0:ef:ab:31:8b:0c:73:e0:
         a5:c5:f6:63:ab:a0:03:de:a4:4f:74:d1:4d:44:09:a1:dd:49:
         e8:dc:f0:f7:0d:42:16:77:72:86:67:af:b4:fb:38:81:11:73:
         d8:a1:e1:cd:b0:29:9e:de:5c:49:eb:e8:c9:bc:16:9d:8e:79:
         2c:c9:0a:6f:06:fd:8a:00:89:ad:0f:9d:3a:37:e6:09:b9:89:
         55:4d:a4:f7:9f:c0:01:25:c5:08:ec:57:90:34:cd:4e:2d:a5:
         b3:79:d4:9a:39:6a:12:ef:55:f4:17:6a:58:d6:88:a0:8e:3b:
         e8:6d:b2:76:2c:ee:8a:fd:39:20:99:e6:24:f1:47:b1:4c:fb:
         10:22:00:d8:f7:31:9c:4b:dd:f3:58:bf:9a:f9:58:76:4b:67:
         c6:db:6a:c6:6d:5d:2e:02:40:20:c3:f4:1a:fc:09:63:b0:fb:
         df:69:fd:21:d0:ab:0a:59:40:17:f1:4e:b3:0d:b1:17:e3:db:
         36:3e:b6:3c:5b:a1:49:1b:77:63:f2:66:29:e6:31:c4:d4:d7:
         09:ca:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:10:13 2026 by rpki-client