Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3231362e302f32312d3231203d3e20323730353635.roa
File:                     3139312e33362e3231362e302f32312d3231203d3e20323730353635.roa (raw, json)
Hash identifier:          hPsqUBbDEtF5ezvImw5aU0yuqGz/ZB8aDRViSMOdEXQ=
Subject key identifier:   67:FE:A5:D9:AC:8A:2C:E8:F7:F7:8B:6A:D4:A0:C8:85:4E:A7:70:AC
Certificate issuer:       /CN=36500E1FB4E214E103051D00FF4050AF888628A1
Certificate serial:       6F2E31E0B4146CDB2BD802238F998B49D68622B2
Authority key identifier: 36:50:0E:1F:B4:E2:14:E1:03:05:1D:00:FF:40:50:AF:88:86:28:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3231362e302f32312d3231203d3e20323730353635.roa
Signing time:             Fri 11 Sep 2026 17:17:48 +0000
ROA not before:           Fri 11 Sep 2026 17:12:48 +0000
ROA not after:            Fri 10 Sep 2027 17:17:48 +0000
asID:                     270565
IP address blocks:        191.36.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.crl
                          rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2e:31:e0:b4:14:6c:db:2b:d8:02:23:8f:99:8b:49:d6:86:22:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36500E1FB4E214E103051D00FF4050AF888628A1
        Validity
            Not Before: Sep 11 17:12:48 2026 GMT
            Not After : Sep 10 17:17:48 2027 GMT
        Subject: CN=67FEA5D9AC8A2CE8F7F78B6AD4A0C8854EA770AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:6d:8a:de:df:d6:48:0e:28:a1:8c:9c:59:
                    ef:a4:1f:94:27:29:4e:b5:e6:d2:b6:84:45:df:0d:
                    dc:32:fb:c1:65:06:76:e7:ea:02:1a:53:9e:11:81:
                    80:a2:4e:1f:65:99:47:a8:c2:32:9c:36:75:62:2d:
                    cd:81:dc:31:e9:d1:b5:79:6c:09:e2:0a:3c:18:3c:
                    3b:69:ba:fe:c1:7c:57:5a:46:9a:e4:b5:9d:4b:ca:
                    60:92:c8:c1:99:34:a5:1e:0c:20:c3:dd:fd:58:18:
                    07:b0:d9:37:b4:89:b4:4c:7f:05:b5:f4:ec:36:dc:
                    d1:35:00:5e:5f:6a:16:66:2a:ae:05:a9:75:9c:e1:
                    fe:40:d8:cc:63:85:fa:48:50:14:c0:28:06:bf:24:
                    27:d3:ec:06:b9:31:a5:a3:71:c9:21:74:81:1b:44:
                    f5:45:9c:f5:1d:35:f7:56:42:ae:21:54:bf:0a:81:
                    c4:37:5f:5b:af:3c:19:65:fd:b0:9d:a3:fc:c8:08:
                    50:26:e2:ee:eb:1d:31:c9:21:e3:5f:e6:dc:01:b9:
                    36:ea:8e:93:49:37:25:01:8c:85:de:0f:1a:70:9d:
                    5e:71:f8:ee:f7:65:9c:ba:3e:90:c4:4a:d4:c2:f3:
                    8d:99:6b:3e:cf:aa:bc:58:c4:a9:a3:0a:67:df:b4:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:A5:D9:AC:8A:2C:E8:F7:F7:8B:6A:D4:A0:C8:85:4E:A7:70:AC
            X509v3 Authority Key Identifier:
                keyid:36:50:0E:1F:B4:E2:14:E1:03:05:1D:00:FF:40:50:AF:88:86:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/36500E1FB4E214E103051D00FF4050AF888628A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36500E1FB4E214E103051D00FF4050AF888628A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABcKkzs3yjZ4FU5m8wbJzkFcCG2H9pmB8FL9FR2NqPYw/0/3139312e33362e3231362e302f32312d3231203d3e20323730353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:9c:25:6b:ed:a4:01:10:18:17:dd:22:a6:e6:df:ad:10:
         97:13:b2:05:b5:ac:a0:d5:40:d3:40:5d:6d:b0:a9:fa:f8:33:
         74:0b:cf:17:55:0e:75:08:1f:ce:f4:35:e9:c7:ba:c1:5a:10:
         f9:09:81:0c:46:67:c6:16:83:1a:7e:1f:af:cf:77:0b:07:4f:
         39:4c:ce:9a:6a:4c:4d:37:72:7b:41:55:87:ac:21:29:eb:f8:
         af:e5:ea:db:a9:34:a3:60:0d:49:06:1d:9a:21:0b:bd:79:0a:
         55:45:f7:cf:bb:93:3c:61:8a:d2:93:f4:10:2b:28:8d:c5:62:
         63:5b:6a:d7:ce:83:f8:db:ef:6a:b6:ec:ac:14:d7:3e:49:e0:
         ca:97:3a:a1:4d:4a:84:f7:e0:c7:5d:7e:17:3f:ab:ed:2d:53:
         bb:bc:ce:9a:c4:1e:fb:9f:74:77:ec:b7:87:45:10:7a:a6:56:
         f9:a5:cb:fa:d9:b3:6d:49:f5:53:80:f6:ca:26:66:94:4d:42:
         37:9a:9d:11:d6:6e:16:ed:88:e7:2c:2a:43:0a:49:87:07:51:
         04:a7:70:47:ae:35:ae:52:c2:d3:20:fe:1a:62:e1:d8:f2:69:
         d1:3c:43:ef:6b:9b:4b:bd:ef:0b:6b:68:eb:98:86:37:cf:b2:
         be:38:76:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:59:23 2026 by rpki-client