Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132302e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3132302e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          QPgS9K2P5QfnVpVE10ajCGUyNzK6hGvcdIH4TusXcz8=
Subject key identifier:   69:72:6C:E3:80:66:98:09:7D:A4:1E:42:E9:FF:C4:D5:16:83:0B:1A
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       3F72B08A4B98D4D4479616DD7926D2B3C4E9F634
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132302e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:16 +0000
ROA not before:           Wed 23 Sep 2026 01:00:16 +0000
ROA not after:            Wed 22 Sep 2027 01:05:16 +0000
asID:                     263349
IP address blocks:        189.51.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:72:b0:8a:4b:98:d4:d4:47:96:16:dd:79:26:d2:b3:c4:e9:f6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:16 2026 GMT
            Not After : Sep 22 01:05:16 2027 GMT
        Subject: CN=69726CE3806698097DA41E42E9FFC4D516830B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9f:03:70:ba:04:48:48:ef:01:f8:74:38:32:
                    a7:9f:c2:ff:cb:0b:77:09:b1:84:fd:59:5d:1c:69:
                    aa:c1:d8:b8:50:c3:b9:de:45:a8:a4:9d:c3:ca:5e:
                    53:90:22:b1:d7:3c:47:b6:87:75:87:94:60:ae:7a:
                    b1:0e:9f:8e:7d:cd:d4:17:e9:6a:fd:3c:d0:05:c7:
                    78:ae:de:ef:49:30:8d:ea:6d:76:22:88:46:a6:67:
                    4a:76:cb:54:d9:9d:16:ed:ea:0f:cf:cb:91:0d:82:
                    b9:8c:65:d9:ed:8f:60:98:7e:29:6d:aa:89:5d:2c:
                    ec:a2:48:2c:fa:1a:bd:b2:e7:dc:81:97:8a:8d:61:
                    5a:51:ca:08:ee:85:64:65:4e:57:29:47:51:b6:d2:
                    9b:c5:23:24:83:53:4a:2f:dc:aa:b3:37:35:26:1b:
                    3c:a0:ab:2a:6a:50:07:4f:01:d3:4c:fc:ba:d8:d5:
                    f3:ae:08:f7:9f:c0:e7:2a:59:aa:85:94:d1:c0:e9:
                    5c:9d:5a:62:59:31:bd:2c:19:92:06:82:e7:a0:3a:
                    98:af:f4:95:31:a6:7d:57:43:24:79:2a:9c:d7:0d:
                    4f:f8:90:bf:3a:07:6a:64:24:4e:9c:75:23:d4:04:
                    4d:1d:32:3f:45:91:02:b5:b2:b6:55:2e:b5:b3:da:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:72:6C:E3:80:66:98:09:7D:A4:1E:42:E9:FF:C4:D5:16:83:0B:1A
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132302e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:a5:24:45:33:9b:44:fc:1f:84:ce:f6:fc:b0:47:b6:a4:
         0a:23:98:6b:aa:ed:be:0b:d4:2f:6d:51:8c:e0:91:5e:f6:52:
         e1:58:c1:52:dd:9c:ce:84:5f:74:cd:fe:4f:dd:37:7f:3a:0c:
         f4:9c:68:13:20:c0:3b:92:ac:76:68:fa:13:e8:e0:38:2f:a1:
         75:e3:28:b7:71:fb:fc:dc:b8:74:c8:81:7c:33:37:1e:38:57:
         f2:74:03:6c:ec:50:81:d3:b0:91:25:79:f3:13:5e:83:cc:70:
         3e:e0:fd:ab:67:10:fb:ff:7e:1d:12:e5:48:39:4f:9c:28:41:
         ab:2c:ae:61:62:9c:50:21:c7:4f:ec:9d:b6:10:3f:5b:67:0b:
         c9:1b:98:42:f7:9f:d7:7d:74:de:8a:6e:cb:bf:9b:cf:57:ad:
         09:f1:c7:84:26:e0:84:c9:d0:df:35:6c:c6:fd:97:58:78:d1:
         3f:b3:97:84:8d:3b:6a:d5:89:2c:63:ff:9b:18:4e:de:f1:4a:
         8f:4d:35:ce:a1:de:8c:fa:ee:dc:83:6d:ec:40:f7:e7:52:40:
         bb:78:72:27:a6:10:60:be:b6:30:10:58:cf:e7:fc:98:dd:1b:
         50:8f:af:05:5b:e5:5c:38:c7:f0:32:00:49:43:70:8f:2c:5c:
         cf:f1:81:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:15:07 2026 by rpki-client