Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          aj4BKRbS1DQdCS629zAcIStcxmpVa0zbPL6IjihYFPM=
Subject key identifier:   A1:25:E3:13:B2:74:D7:33:9A:9F:87:CE:20:27:C7:6C:F8:E7:44:3A
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       26A95BCE0F945E7D650A5738534E482487BD4C0C
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:11 +0000
ROA not before:           Wed 23 Sep 2026 01:00:11 +0000
ROA not after:            Wed 22 Sep 2027 01:05:11 +0000
asID:                     263349
IP address blocks:        189.51.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 17:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a9:5b:ce:0f:94:5e:7d:65:0a:57:38:53:4e:48:24:87:bd:4c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:11 2026 GMT
            Not After : Sep 22 01:05:11 2027 GMT
        Subject: CN=A125E313B274D7339A9F87CE2027C76CF8E7443A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:e2:5a:0f:67:77:fa:0f:43:0f:83:d5:f9:
                    9c:cf:82:e2:32:09:26:23:ad:e8:c4:e5:45:26:51:
                    02:6d:42:96:ed:a0:3c:04:30:06:14:72:43:ba:75:
                    d8:9d:a0:9c:6b:ee:d6:25:dd:f6:d8:7e:d3:12:51:
                    f3:16:a6:33:98:ff:e8:9e:2d:70:d0:00:38:93:5d:
                    19:4f:a9:ce:c1:b4:c9:6f:f4:41:42:66:f7:e3:83:
                    25:c1:65:12:2a:71:6d:23:23:df:60:8b:40:f7:0b:
                    18:6e:32:66:60:05:28:40:6c:45:cf:df:57:34:70:
                    56:44:41:d9:ac:ae:a8:ad:ef:32:1c:83:c9:14:4e:
                    8b:e2:cb:c8:ea:2a:db:ce:b4:dc:62:cf:a8:2d:f3:
                    b7:4e:b5:b0:8d:b0:9f:d4:14:c0:87:82:1d:4e:04:
                    57:ad:17:f5:b5:de:40:66:44:dd:22:84:50:97:d4:
                    75:a0:e6:a2:75:a9:fa:61:f1:9a:39:64:04:ea:3d:
                    94:af:5a:6d:0b:72:d2:c3:2f:12:13:5d:ae:8f:d1:
                    9b:09:83:03:0c:ed:d1:1f:0d:a3:a0:e7:7e:3e:ea:
                    61:62:cc:6c:a5:10:7c:d3:8a:cd:db:4e:c9:73:82:
                    d4:28:d8:25:20:9a:24:16:32:fe:3d:29:6c:95:b3:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:E3:13:B2:74:D7:33:9A:9F:87:CE:20:27:C7:6C:F8:E7:44:3A
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:5c:c4:63:d2:28:b9:44:9c:92:d7:31:b4:23:e1:9f:fe:
         46:65:dc:42:35:f4:d3:44:97:3f:78:6e:ba:43:ca:3d:f3:bb:
         9f:38:f2:c5:8b:84:70:cf:18:82:f1:b7:52:9f:bf:df:91:e1:
         34:34:03:12:93:b2:83:1d:8f:57:d8:35:11:79:45:db:99:00:
         dd:72:3c:eb:cd:bc:4d:25:38:e9:c2:b6:81:c9:3b:de:8c:d1:
         46:8a:9d:b3:8c:b1:e3:c2:12:67:2d:6d:ab:cb:e1:5d:ba:ff:
         1a:bd:82:f6:f4:87:97:0c:e0:1e:06:a0:1d:0b:9b:14:3d:f6:
         c1:78:09:8b:a0:4b:fd:ef:8b:18:ba:f6:70:0f:96:bc:43:55:
         bb:3a:8d:36:7b:18:e2:29:eb:64:8a:ad:a1:0f:21:40:71:35:
         c5:cb:cf:e9:9a:41:de:4e:f5:be:e5:fe:4d:d8:05:10:a2:e2:
         19:89:ff:80:fc:92:e3:78:09:3a:5b:5b:31:06:9a:bc:7b:2e:
         6f:40:9a:64:07:61:2f:44:84:0e:aa:67:0c:d0:b2:41:ee:9b:
         7f:2b:9f:69:6f:40:6b:4e:89:b5:29:d5:ee:02:aa:02:43:40:
         36:17:05:b7:53:9a:48:b9:65:db:9d:f9:45:9d:94:6d:c5:ac:
         9c:1b:ad:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:52:23 2026 by rpki-client