Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132362e302f32332d3233203d3e20323634343436.roa
File:                     3136382e39302e3132362e302f32332d3233203d3e20323634343436.roa (raw, json)
Hash identifier:          Ep7gI3A0YGNSj//Ca+h8Mo0tSf5GzW6SLq9kn4zlY5Y=
Subject key identifier:   FA:F8:22:A6:A6:14:DB:39:29:0D:D2:F1:61:C4:95:57:40:14:C3:27
Certificate issuer:       /CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
Certificate serial:       0574B706D022E56D2A5B63CD667CD02E2D9D0264
Authority key identifier: 51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132362e302f32332d3233203d3e20323634343436.roa
Signing time:             Tue 09 Jun 2026 12:40:32 +0000
ROA not before:           Tue 09 Jun 2026 12:35:32 +0000
ROA not after:            Tue 08 Jun 2027 12:40:32 +0000
asID:                     264446
IP address blocks:        168.90.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl
                          rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:74:b7:06:d0:22:e5:6d:2a:5b:63:cd:66:7c:d0:2e:2d:9d:02:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
        Validity
            Not Before: Jun  9 12:35:32 2026 GMT
            Not After : Jun  8 12:40:32 2027 GMT
        Subject: CN=FAF822A6A614DB39290DD2F161C495574014C327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:86:0c:be:16:95:74:aa:5a:bc:a0:97:b3:13:
                    8b:4a:50:b8:67:71:bb:88:44:f5:e3:eb:ee:84:b1:
                    2d:c4:76:a1:63:d5:29:b9:88:d3:7a:3c:14:af:97:
                    25:87:a7:6c:9a:82:a6:34:b4:66:5c:4e:69:83:96:
                    9f:96:c9:07:42:45:f6:21:c6:01:e7:34:9c:8c:2b:
                    db:f8:d2:26:c3:20:a7:b5:c7:a7:25:98:f9:bb:ea:
                    01:ab:27:56:39:ad:fc:b0:be:73:66:eb:b3:42:6f:
                    d9:90:7d:a7:fb:3e:47:68:70:09:69:d0:c5:43:7c:
                    bb:79:62:55:40:a7:51:d9:45:b4:c1:86:aa:1c:ee:
                    20:e5:4e:d8:f2:df:8f:49:c7:dd:e8:b5:8d:6b:b6:
                    e6:ab:51:25:46:00:25:98:e5:b8:8a:95:52:39:53:
                    ae:28:98:8d:2f:1c:02:f4:1e:65:65:1c:2e:48:7c:
                    dc:ad:cc:5d:f7:51:e7:b3:e8:95:8a:dd:e4:64:59:
                    a2:98:7f:74:0e:0b:9e:3a:9f:bc:d0:c8:64:d8:9c:
                    81:3a:99:73:66:64:76:55:75:1a:41:17:ed:b5:73:
                    d1:b6:7a:2d:75:bf:94:c3:0b:3e:95:05:e6:e1:72:
                    cf:44:ff:e5:f1:06:3a:2b:64:72:4e:16:ab:f6:11:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:22:A6:A6:14:DB:39:29:0D:D2:F1:61:C4:95:57:40:14:C3:27
            X509v3 Authority Key Identifier:
                keyid:51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3136382e39302e3132362e302f32332d3233203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:fa:26:ec:71:53:b5:78:bb:87:f8:69:16:99:5a:14:05:
         b0:ab:2d:bd:07:3f:c7:2b:88:20:f9:99:c9:8f:f6:2b:04:36:
         2f:65:08:22:73:57:1c:a1:79:61:de:7a:4d:00:2b:64:0e:c2:
         aa:82:e7:22:9b:8a:56:b4:f8:36:53:35:98:46:d5:b4:19:c6:
         a1:b4:d1:e6:6c:80:cb:5a:93:22:8d:73:1f:da:9b:a9:f3:7c:
         26:e4:fe:cd:f0:1a:17:ed:67:9b:57:f4:dc:25:1e:0f:a4:18:
         69:5e:e8:74:e3:c1:ef:5d:fc:7f:55:d9:f8:b1:3c:54:c5:2c:
         a8:f4:f1:c0:49:88:ee:05:b2:c8:9d:cb:42:0b:26:ae:2e:96:
         19:70:93:64:52:cc:e8:5f:9b:a7:13:cd:ab:8b:58:f8:e5:ac:
         e4:eb:a3:d1:88:29:30:52:8f:58:05:03:8a:a0:bc:e2:6a:65:
         47:ca:f1:b1:e3:e4:03:75:a7:ac:20:1d:c0:d5:d9:42:07:92:
         6e:58:bf:0c:e8:3f:a8:4e:73:b7:de:09:6f:4a:41:f6:d7:2f:
         06:06:6d:18:5d:35:12:d8:1e:bf:1e:e6:2f:46:e9:4d:03:d5:
         15:b5:e8:cb:f3:68:b6:b1:93:1d:0a:56:af:8e:b8:d3:d6:29:
         b6:e6:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:53 2026 by rpki-client