Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
File:                     3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa (raw, json)
Hash identifier:          k/vQqes4B2eI0J67Gvf5UgMzPtSV7LJretBHYKV+oEg=
Subject key identifier:   70:41:EA:61:54:25:51:E2:3A:E4:57:30:69:41:41:59:F4:FE:38:38
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       14207C7C5FFCF6AB7CC0561A5968C751B54BBCB1
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa
Signing time:             Mon 17 Aug 2026 14:28:24 +0000
ROA not before:           Mon 17 Aug 2026 14:23:24 +0000
ROA not after:            Mon 16 Aug 2027 14:28:24 +0000
asID:                     265282
IP address blocks:        168.90.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:20:7c:7c:5f:fc:f6:ab:7c:c0:56:1a:59:68:c7:51:b5:4b:bc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Aug 17 14:23:24 2026 GMT
            Not After : Aug 16 14:28:24 2027 GMT
        Subject: CN=7041EA61542551E23AE4573069414159F4FE3838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:2a:ab:c0:72:6d:4c:93:cd:f6:4d:4f:a7:
                    4c:e4:32:99:82:1e:e6:15:50:73:7b:c2:6a:26:68:
                    0b:0c:56:95:6c:3a:18:09:a1:90:d0:18:cd:44:06:
                    88:db:95:c9:3b:71:cd:47:0b:6f:e9:64:60:12:7b:
                    d6:44:67:57:93:01:62:df:ca:14:29:09:d4:02:9f:
                    32:7a:7b:bb:2c:3e:a7:56:9b:14:7b:57:9c:4c:ff:
                    59:84:20:b6:f9:85:f5:65:9b:0c:73:d0:53:3c:8a:
                    20:05:0f:51:dc:3a:cf:84:fa:90:72:64:24:8a:5c:
                    84:2b:6e:df:c7:a6:bb:8e:22:bb:39:71:0b:7a:57:
                    4a:39:e4:f7:83:cc:ec:5f:aa:27:c4:77:87:4c:4f:
                    71:f3:89:91:21:c4:1a:39:e9:11:27:44:f8:6b:70:
                    1f:ef:58:a9:d9:ee:37:dc:86:6a:dd:a3:33:d2:3a:
                    08:5e:b6:8e:e0:3a:40:52:33:0a:ec:76:a5:93:e2:
                    eb:09:05:b3:82:e4:ae:37:93:38:ff:ab:80:e3:6c:
                    e7:b4:33:f3:96:6b:57:2c:bf:5f:30:54:45:2a:51:
                    ef:1a:ce:ea:63:ab:00:c1:1e:9d:85:39:67:fd:65:
                    9f:82:48:c4:8c:ce:a7:85:05:b9:ba:8c:80:53:2d:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:EA:61:54:25:51:E2:3A:E4:57:30:69:41:41:59:F4:FE:38:38
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/3136382e39302e3230382e302f32322d3234203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:d1:33:76:a6:0d:b0:58:7f:8e:ce:6d:e0:e9:12:d9:e2:72:
         00:2b:7a:ba:45:5c:ed:e2:b6:46:a6:6d:15:a7:d4:e3:7d:66:
         0e:d0:f6:c2:8e:40:9f:05:9b:a7:77:7e:34:14:62:ce:ef:ad:
         eb:00:d3:3a:a3:6c:77:87:be:0a:72:e7:c2:43:49:37:ed:87:
         01:5a:e6:94:19:67:a1:ca:ea:57:52:e3:33:63:4d:77:31:11:
         d9:0b:7b:46:b3:ec:5c:df:84:24:a2:82:89:1e:5d:3a:a0:f8:
         35:ae:f4:ca:68:44:98:41:b3:06:db:c7:23:ee:e0:e0:72:5b:
         09:20:ee:d2:bf:b0:fe:5f:ff:fd:01:41:72:bb:fd:5e:35:e7:
         c8:7d:57:63:c6:d3:ec:b4:d4:aa:6a:c5:db:51:87:2c:ae:96:
         aa:56:61:53:7c:48:0a:e0:8a:45:cd:1a:f7:35:86:2d:83:f2:
         3e:52:a1:1b:0d:1d:f3:d7:58:b3:cf:69:d3:0e:68:61:cc:7d:
         8a:35:87:78:c4:03:1b:30:7b:b5:ca:67:26:b5:58:ef:4c:20:
         b5:dc:0f:73:0d:83:e6:2b:f0:aa:25:2a:76:1c:23:58:4d:85:
         5f:ce:f6:87:84:c0:d1:9c:8c:42:ce:00:77:0c:bf:4f:f1:c3:
         51:52:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:45:15 2026 by rpki-client