Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233322e302f32332d3233203d3e20323634303936.roa
File:                     3138362e3231362e3233322e302f32332d3233203d3e20323634303936.roa (raw, json)
Hash identifier:          zrxwB+mssKaztQQo1DtasXqmUeYLKrkxNbNE2PQkiIQ=
Subject key identifier:   9D:BB:F8:A6:69:5C:49:39:38:92:15:F1:16:C0:EF:DC:42:31:C5:05
Certificate issuer:       /CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
Certificate serial:       4431456AEB5A30DF36E4D056175EB529942098BD
Authority key identifier: 1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233322e302f32332d3233203d3e20323634303936.roa
Signing time:             Mon 25 May 2026 15:04:33 +0000
ROA not before:           Mon 25 May 2026 14:59:33 +0000
ROA not after:            Mon 24 May 2027 15:04:33 +0000
asID:                     264096
IP address blocks:        186.216.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:31:45:6a:eb:5a:30:df:36:e4:d0:56:17:5e:b5:29:94:20:98:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F89CA79234EBEE1EDFBB720CAEAD02161B8C443
        Validity
            Not Before: May 25 14:59:33 2026 GMT
            Not After : May 24 15:04:33 2027 GMT
        Subject: CN=9DBBF8A6695C4939389215F116C0EFDC4231C505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:07:b9:13:f9:63:a9:1d:69:b6:90:60:68:
                    e9:bb:e8:07:71:62:69:79:49:ee:ee:38:3b:3e:76:
                    fd:11:c4:55:fa:d0:54:1f:55:d9:69:46:88:3f:d8:
                    8b:01:f0:96:5e:fc:58:94:8f:86:37:bf:41:26:fc:
                    ac:62:ab:65:b0:f2:87:12:2f:ce:97:cf:e0:4e:af:
                    0b:9c:1a:14:c1:6f:8f:e2:73:a3:b7:66:3e:22:53:
                    0a:db:bf:37:47:1a:da:c2:1e:55:8a:55:d8:2e:3b:
                    b6:4d:d2:9c:15:dd:1c:be:c1:0a:7f:a5:30:82:be:
                    26:05:7b:70:de:66:5f:4b:08:5b:b0:e6:78:0e:ad:
                    f7:53:b6:73:f9:8a:5f:a2:22:4c:e4:26:f4:7c:71:
                    37:34:62:40:ea:11:f1:c0:27:fd:3a:b7:63:c7:c4:
                    3b:c6:9a:b9:c7:bc:05:d5:15:5b:de:a9:be:d0:0b:
                    09:45:88:a7:92:ca:9b:7b:9b:9c:79:a2:b3:89:74:
                    dc:78:2d:9d:36:6b:92:72:25:a4:fc:66:cb:55:58:
                    11:83:39:75:69:38:d6:c4:3c:1d:55:4d:30:96:d9:
                    2d:0a:5f:b8:bc:03:cb:28:a1:ea:0a:15:7a:85:4f:
                    f1:94:d3:9a:34:45:d2:56:18:24:e9:16:bf:af:95:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:F8:A6:69:5C:49:39:38:92:15:F1:16:C0:EF:DC:42:31:C5:05
            X509v3 Authority Key Identifier:
                keyid:1F:89:CA:79:23:4E:BE:E1:ED:FB:B7:20:CA:EA:D0:21:61:B8:C4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F89CA79234EBEE1EDFBB720CAEAD02161B8C443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/4/3138362e3231362e3233322e302f32332d3233203d3e20323634303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:4b:5d:9c:1a:b5:22:4a:01:af:b2:44:f3:47:b9:eb:04:d7:
         80:aa:62:96:41:df:bc:be:f9:c2:44:a0:87:57:40:de:68:9a:
         c5:08:0a:7a:82:af:26:df:3d:23:6a:39:d5:b5:47:8a:c6:40:
         9f:12:e7:06:84:77:33:48:06:67:00:76:31:b6:45:d7:ef:82:
         5a:ba:40:35:1a:81:7f:3d:65:c7:03:de:0d:b1:43:ca:e1:40:
         08:8d:16:72:b4:b8:11:8c:0e:79:26:59:ef:cb:56:d9:82:80:
         41:3c:45:2b:0f:c9:70:26:33:2f:51:97:31:13:fb:a6:58:83:
         50:6b:e1:65:c4:65:ac:f9:81:1c:c9:ff:76:ef:d4:91:8f:7e:
         05:b8:0e:2c:cd:f7:6d:ff:38:5f:89:5c:24:69:86:4c:d0:40:
         2a:06:71:30:a7:21:62:ec:ae:d3:dc:4c:c2:f9:3e:ca:35:7d:
         57:e7:1b:7b:a4:f4:4b:e8:0f:36:57:dd:b2:75:1e:1a:ca:6f:
         22:91:ee:9c:6b:32:e2:cd:f6:05:c7:88:de:df:7b:78:12:26:
         a6:ad:e9:09:41:b0:33:22:0b:ba:62:3d:99:e6:62:7a:7e:b9:
         4e:60:0b:e8:1b:b7:5e:c1:ab:9f:a6:bb:7b:da:06:73:1e:08:
         11:29:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:43:52 2026 by rpki-client