Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32332d3233203d3e20323635393334.roa
File:                     3132382e3230312e3233322e302f32332d3233203d3e20323635393334.roa (raw, json)
Hash identifier:          x5iHlKsDjqGmDKqHwuInBYZvtHu4UKy1QimKRT8Y2FY=
Subject key identifier:   BD:50:D9:8C:26:4D:4F:ED:82:FC:06:7D:19:07:33:5B:3B:A7:D6:DF
Certificate issuer:       /CN=B1929389122679A4F6DEAA77BECF7D1E5B126F06
Certificate serial:       09978C29D6CF1150E3946A814F4AFC812EBAB407
Authority key identifier: B1:92:93:89:12:26:79:A4:F6:DE:AA:77:BE:CF:7D:1E:5B:12:6F:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32332d3233203d3e20323635393334.roa
Signing time:             Wed 16 Sep 2026 20:13:43 +0000
ROA not before:           Wed 16 Sep 2026 20:08:43 +0000
ROA not after:            Wed 15 Sep 2027 20:13:43 +0000
asID:                     265934
IP address blocks:        128.201.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.crl
                          rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 03:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:8c:29:d6:cf:11:50:e3:94:6a:81:4f:4a:fc:81:2e:ba:b4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1929389122679A4F6DEAA77BECF7D1E5B126F06
        Validity
            Not Before: Sep 16 20:08:43 2026 GMT
            Not After : Sep 15 20:13:43 2027 GMT
        Subject: CN=BD50D98C264D4FED82FC067D1907335B3BA7D6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:e0:3b:59:1b:d5:7b:df:08:44:e6:44:f2:
                    48:9e:33:3f:b7:11:54:f9:12:85:b4:1a:c9:c7:14:
                    7a:33:0d:71:a8:d1:22:91:99:f8:1e:aa:2c:da:86:
                    86:b2:75:28:14:4c:7a:92:a7:8a:5d:84:37:b7:89:
                    23:60:76:23:94:7f:b3:4e:13:f6:5c:39:9e:af:6a:
                    a6:93:5b:91:08:ab:0e:26:25:80:62:2b:21:99:2d:
                    76:2b:60:bb:f2:fa:70:07:7c:a9:9f:85:36:5f:b5:
                    3c:c0:e7:30:df:df:99:99:24:05:46:14:53:5e:ea:
                    00:f7:e8:fd:e7:d7:7d:e8:09:a1:21:b4:f2:88:b3:
                    f9:54:a4:9d:36:5d:e5:91:83:18:71:c9:6c:bc:6e:
                    6f:b0:5f:81:75:9f:dd:0c:2a:f6:84:32:b4:67:c7:
                    d1:73:74:5c:f5:c6:ff:e9:36:a1:73:0e:a1:b7:14:
                    14:80:78:7a:96:c6:7b:11:15:07:f0:9a:9b:44:36:
                    52:11:b3:0a:d2:b1:bc:71:c8:c8:9b:07:e0:86:81:
                    84:68:e6:b0:c8:13:27:90:99:9a:77:6f:ae:0d:80:
                    48:8c:6b:a8:27:56:27:bb:4a:07:86:ac:ce:99:ab:
                    8e:62:56:6b:fc:1c:fe:34:57:ff:57:ec:f0:01:e1:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:D9:8C:26:4D:4F:ED:82:FC:06:7D:19:07:33:5B:3B:A7:D6:DF
            X509v3 Authority Key Identifier:
                keyid:B1:92:93:89:12:26:79:A4:F6:DE:AA:77:BE:CF:7D:1E:5B:12:6F:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/B1929389122679A4F6DEAA77BECF7D1E5B126F06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1929389122679A4F6DEAA77BECF7D1E5B126F06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ChZzS1J6uFocYyX4yHvZjQtkPqG9Lm4726pnm5W6nCZ/0/3132382e3230312e3233322e302f32332d3233203d3e20323635393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:e3:90:be:d4:1c:28:b4:ea:24:2c:db:ca:e2:14:9a:24:c0:
         11:08:5d:5d:2f:1f:c7:f1:1c:e8:59:8e:05:cb:93:b4:e1:6b:
         a0:4a:bc:20:36:98:1e:21:de:c6:e2:0d:0a:ea:4a:ea:3e:bc:
         9a:db:e9:37:2a:bd:12:6a:1b:c6:98:39:84:cc:8a:a7:c3:6d:
         d4:1f:f2:46:a4:a8:22:2c:b3:90:8f:22:85:73:28:7b:78:61:
         61:99:b9:d0:00:8f:fe:3f:6a:32:af:6c:26:80:ae:37:fd:3f:
         c7:20:16:f8:b4:ff:9c:0e:6b:17:16:20:52:f9:22:d7:8f:1e:
         b2:d1:8e:50:30:e8:94:83:90:97:bf:69:36:32:36:aa:15:3f:
         50:f2:11:54:3c:9e:08:c0:b1:c6:10:2e:3c:e2:fe:b0:4d:9c:
         0e:22:59:57:41:6a:c0:9b:7a:b3:2c:03:ba:fb:54:2d:18:e1:
         84:bc:be:fd:9b:22:14:d3:74:54:6b:c9:ba:ed:6f:81:86:da:
         90:5e:fc:00:39:fd:b7:de:6f:70:e4:0d:0b:11:1b:5e:91:37:
         c6:5a:37:e2:63:1d:61:4b:06:42:c1:02:94:fd:38:cf:9f:b7:
         44:53:63:bd:e3:0b:d4:38:93:12:ac:04:8c:b4:b2:f7:fc:7c:
         e3:7b:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:26 2026 by rpki-client