Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa
File:                     3136382e3232382e362e302f32332d3233203d3e20323634383939.roa (raw, json)
Hash identifier:          +Dqx8cLDbtVjxvDzkSG5WmtSlfEWfj/5qbmV2R5FfcQ=
Subject key identifier:   51:B3:44:3D:DA:69:F0:22:8D:19:DB:45:85:9E:55:EB:30:30:C1:64
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       5A4A8005466597CDFEAC58A199E17AF63F071F2F
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa
Signing time:             Thu 17 Sep 2026 19:00:19 +0000
ROA not before:           Thu 17 Sep 2026 18:55:19 +0000
ROA not after:            Thu 16 Sep 2027 19:00:19 +0000
asID:                     264899
IP address blocks:        168.228.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 00:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:80:05:46:65:97:cd:fe:ac:58:a1:99:e1:7a:f6:3f:07:1f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Sep 17 18:55:19 2026 GMT
            Not After : Sep 16 19:00:19 2027 GMT
        Subject: CN=51B3443DDA69F0228D19DB45859E55EB3030C164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:70:87:0e:ed:5b:a6:78:1c:30:ba:1d:a0:
                    43:df:73:54:10:94:c5:55:40:65:45:8c:42:ce:01:
                    e8:b1:8f:40:37:78:55:ca:9a:e5:1e:45:35:61:c6:
                    96:27:cf:15:18:5e:8c:e5:9a:fb:2f:ff:8a:02:34:
                    5d:bd:61:20:a8:47:4d:0d:be:1e:f5:dd:39:ce:51:
                    d3:dc:ab:4d:70:30:d5:26:da:73:4b:f3:ba:8c:cc:
                    d6:5a:ca:77:2a:dd:37:e8:2f:6b:3c:11:60:b7:24:
                    83:91:1d:5e:99:bc:8f:e5:fc:27:ac:bf:29:8d:b4:
                    16:3b:0e:e0:66:fa:0c:d6:09:25:ad:cb:82:7d:0f:
                    00:a5:26:53:ab:7f:41:e4:75:00:3f:f6:3f:a1:30:
                    e5:e1:5c:2d:ae:ae:3b:2c:d1:a7:02:38:6e:0a:9a:
                    2d:6f:90:f3:0d:0f:7f:26:a9:ff:ca:69:ed:b7:96:
                    ce:c4:f9:d3:66:5f:8f:3f:9f:ae:d3:4e:65:72:8e:
                    e3:ac:c3:65:ba:73:11:e3:12:94:a3:36:5c:da:d7:
                    13:01:f5:56:7e:c1:20:03:80:0d:c2:fa:80:66:4b:
                    2b:99:b0:04:99:a3:65:80:bc:e8:2c:04:da:cf:32:
                    ec:0f:56:f8:b4:ac:ff:f3:c3:a9:f8:80:36:87:75:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B3:44:3D:DA:69:F0:22:8D:19:DB:45:85:9E:55:EB:30:30:C1:64
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32332d3233203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:ee:69:d5:a5:9e:c2:09:1b:30:02:6e:2b:94:03:c2:ee:55:
         9b:6e:72:f9:7a:a4:57:b4:a4:13:ac:23:b0:f5:39:c6:50:00:
         88:5d:76:88:f4:b9:ef:c7:e0:e6:9c:13:77:b4:1f:07:42:a2:
         62:19:3f:82:7f:bd:74:13:db:75:e1:95:3f:04:6e:ab:4a:4d:
         46:34:e9:17:c3:14:28:74:17:4b:0d:8e:64:2b:fa:4b:22:ae:
         a0:d4:02:45:5e:90:d0:7e:2c:90:57:d7:a2:c7:7c:c2:8a:1b:
         22:c7:a0:8c:96:01:4f:4b:6e:76:c5:8a:63:db:e2:36:3a:0c:
         91:7d:00:14:12:c6:78:fd:5e:aa:6b:a7:41:3c:52:5a:bf:95:
         1c:51:bd:a3:12:20:bb:31:e1:41:74:ea:23:09:d9:d3:db:a9:
         28:b8:5b:c7:9b:e1:d1:ef:91:28:7e:d8:f4:ca:62:77:c2:5e:
         0f:11:1c:59:46:c3:ec:d6:f6:bd:57:b9:d9:27:c4:e1:c9:2f:
         30:39:2e:b3:b9:e7:db:39:a7:cf:5e:35:95:4a:63:5d:6e:8e:
         22:c5:7f:76:5b:51:81:ed:e3:71:e3:12:ea:77:49:6a:1c:1c:
         3c:04:79:81:70:6f:6a:09:aa:b5:7f:a8:dc:c9:42:52:ff:8d:
         38:f6:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----