Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa
File:                     3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa (raw, json)
Hash identifier:          bO5LOh5tf83j1iA04EYYIrlYZ/gKg1FrwYVSs1cRGmg=
Subject key identifier:   26:03:1C:F8:E6:70:51:B4:80:7E:93:08:96:CC:FF:84:1B:2D:BC:F6
Certificate issuer:       /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
Certificate serial:       2CEF0D5838E139FF742F66942B6BF88810979073
Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa
Signing time:             Mon 31 Aug 2026 23:11:31 +0000
ROA not before:           Mon 31 Aug 2026 23:06:31 +0000
ROA not after:            Mon 30 Aug 2027 23:11:31 +0000
asID:                     274486
IP address blocks:        186.195.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 Oct 2026 04:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ef:0d:58:38:e1:39:ff:74:2f:66:94:2b:6b:f8:88:10:97:90:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
        Validity
            Not Before: Aug 31 23:06:31 2026 GMT
            Not After : Aug 30 23:11:31 2027 GMT
        Subject: CN=26031CF8E67051B4807E930896CCFF841B2DBCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:31:20:f7:ac:79:7b:50:0c:0d:24:62:6d:
                    fc:13:c1:31:05:4c:97:54:08:df:a2:ef:86:44:cf:
                    d7:b4:a8:8f:5e:2d:80:10:e2:86:9f:8a:6f:bc:88:
                    34:dc:2d:fa:74:2e:4b:c0:37:65:d7:8b:0e:3f:f8:
                    4c:e2:5b:94:cf:6e:be:ef:5b:2d:df:0e:15:89:47:
                    2a:48:5f:55:f9:74:9b:16:7a:f8:23:35:15:08:ed:
                    d5:97:cd:fb:2b:b7:8c:95:68:6d:04:ac:fc:eb:74:
                    93:50:c4:5f:31:06:b1:2c:78:e3:fa:48:ed:44:45:
                    07:49:a5:b8:62:f1:dd:fb:4f:dd:3f:d9:e6:75:94:
                    d1:c7:13:af:b1:10:a3:06:91:75:ef:a9:01:84:bb:
                    c2:75:70:db:7c:a6:24:5c:7e:df:41:3a:97:c7:ae:
                    8c:e0:3e:26:a9:3f:10:73:30:56:13:65:a0:2d:32:
                    20:63:7e:d4:cb:ea:92:4c:96:43:eb:97:d0:33:be:
                    1f:3e:18:f8:b4:c7:cf:fd:fb:38:da:c0:9b:56:59:
                    f3:fe:c7:13:12:18:4a:09:db:66:11:3b:9a:91:c4:
                    69:d0:26:d6:6d:90:a4:09:88:49:a2:fd:f9:52:ba:
                    e2:b1:f3:c8:9e:da:a7:3a:1c:8f:7d:23:98:12:be:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:1C:F8:E6:70:51:B4:80:7E:93:08:96:CC:FF:84:1B:2D:BC:F6
            X509v3 Authority Key Identifier:
                keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:18:64:b6:6e:15:1f:66:4f:12:9b:fd:8b:be:91:35:7f:e3:
         6b:b5:e4:c7:c6:22:ad:cd:b9:fc:aa:77:bb:ed:86:81:e5:b5:
         12:ed:12:d3:59:e0:80:8a:7d:92:9d:33:c6:5d:5a:be:3c:84:
         d5:ec:10:da:e7:4a:ff:d0:e8:3b:d3:95:f5:45:04:bf:a4:9c:
         c3:0b:d5:e4:53:fd:e8:d5:7d:62:1d:8f:e9:82:62:c9:48:b9:
         5f:d4:f2:26:03:6b:ba:c4:28:dc:0e:33:09:89:fb:a9:a8:dc:
         8b:d9:92:ec:1e:47:89:17:ba:80:45:2a:0c:1f:fe:10:60:e3:
         62:58:6a:41:e6:89:c0:06:1f:bb:29:40:42:62:9c:ea:1e:b3:
         48:b5:67:ae:91:03:c3:02:53:78:79:87:b9:21:fd:b1:21:ae:
         62:16:ac:77:fd:75:6c:ae:78:f2:10:38:1a:70:70:6e:dc:03:
         03:a1:0a:dd:97:84:4b:61:be:9e:2d:57:29:10:4a:d7:a2:2a:
         5d:0e:6d:8c:5a:aa:72:b2:59:d3:ea:d5:20:8b:5f:8e:63:d9:
         7e:00:7a:00:09:69:f6:c0:17:75:cf:d3:d1:1b:f3:3a:0f:7e:
         76:1e:30:c9:02:61:ec:57:91:74:8c:40:76:65:00:43:d6:cc:
         4a:0e:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:33:29 2026 by rpki-client