Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa
File:                     3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa (raw, json)
Hash identifier:          6MEEjuwAhyFTLNk4Q+BvEXNqivIoIK7p3XzuqXYSJYc=
Subject key identifier:   01:61:0A:84:EE:D1:60:05:29:46:6B:21:A2:BE:EF:CF:8A:E9:27:2C
Certificate issuer:       /CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
Certificate serial:       64BF03F3DCCFE0FD2A214624C47C21B5442C789E
Authority key identifier: 7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa
Signing time:             Thu 17 Sep 2026 09:15:09 +0000
ROA not before:           Thu 17 Sep 2026 09:10:09 +0000
ROA not after:            Thu 16 Sep 2027 09:15:09 +0000
asID:                     266009
IP address blocks:        181.191.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl
                          rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bf:03:f3:dc:cf:e0:fd:2a:21:46:24:c4:7c:21:b5:44:2c:78:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F26572E5BEE74A9546D5DB49A0AD8194F5BF810
        Validity
            Not Before: Sep 17 09:10:09 2026 GMT
            Not After : Sep 16 09:15:09 2027 GMT
        Subject: CN=01610A84EED1600529466B21A2BEEFCF8AE9272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:a4:a5:a7:ac:fb:e5:bc:a2:a0:0f:02:39:
                    ac:fe:03:bb:aa:f6:ad:cd:79:fd:98:4d:e4:5e:83:
                    4e:bf:f8:3b:f0:8c:76:92:85:04:3b:13:fa:be:25:
                    f2:93:26:4d:07:99:31:a3:a1:56:3e:7a:ae:9f:b5:
                    b5:25:b3:63:26:e9:f1:25:97:fc:a0:5e:66:e9:a1:
                    20:3e:01:28:2e:75:5b:27:89:fd:ab:3f:08:f7:4c:
                    b0:1e:1c:a9:a9:c5:52:dd:87:f0:86:be:eb:63:53:
                    5b:16:a6:94:ef:c1:16:6a:c9:34:91:f0:44:e5:06:
                    80:2f:e4:0a:c1:99:48:3a:8a:c1:d2:9b:cb:8c:7d:
                    ae:7a:ee:3a:9b:ff:34:e3:86:80:77:86:00:d5:6a:
                    a4:da:78:95:3f:db:02:33:8b:e0:de:90:00:38:bb:
                    7f:6b:3e:2a:1a:aa:d4:b4:2d:96:95:61:fc:0a:0c:
                    9d:4f:25:b3:ae:a1:17:9c:35:85:7f:46:5c:2a:b7:
                    5a:92:00:f6:51:d5:84:d8:b6:f3:00:24:55:db:66:
                    70:66:d9:d8:8b:b5:8b:f7:79:88:dd:6c:64:7c:91:
                    27:aa:80:ab:56:60:39:a2:ea:ce:0a:33:b6:5e:f5:
                    08:07:83:4d:d9:f4:3a:36:2e:bf:0c:aa:df:e2:92:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:0A:84:EE:D1:60:05:29:46:6B:21:A2:BE:EF:CF:8A:E9:27:2C
            X509v3 Authority Key Identifier:
                keyid:7F:26:57:2E:5B:EE:74:A9:54:6D:5D:B4:9A:0A:D8:19:4F:5B:F8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F26572E5BEE74A9546D5DB49A0AD8194F5BF810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/3138312e3139312e3130362e302f32342d3234203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:a4:18:0e:4d:72:02:4c:31:63:52:30:d9:18:d6:0a:30:
         db:9b:f3:ae:bb:de:2e:79:82:ec:ba:34:43:cb:36:da:77:aa:
         e6:2a:31:39:9b:ca:80:48:59:b2:2a:dd:14:28:ff:54:dc:8b:
         04:51:3e:81:04:03:2d:06:fc:f0:49:03:6a:82:76:9d:d2:47:
         46:0c:5e:21:fe:1f:48:f7:81:58:72:de:78:2f:c7:da:56:00:
         14:d2:47:da:20:11:e6:34:f6:64:1b:9e:f9:fd:93:ee:9b:36:
         84:be:9e:52:7f:e3:ca:9b:c5:a9:f5:52:9e:9b:af:61:56:3a:
         1a:62:6d:4d:37:ef:9e:a5:36:d6:92:ee:0f:b9:02:de:12:2f:
         e3:23:d7:2e:be:0b:02:80:26:b0:48:66:8f:eb:49:67:f7:20:
         33:3f:ec:e2:3c:95:ea:ee:de:89:86:ac:d1:9d:f1:4e:44:bd:
         e0:55:d2:9a:0a:0e:b3:f1:8a:e1:5e:a9:97:01:d1:fd:0c:81:
         67:27:31:75:78:07:50:26:f8:e6:c1:19:ff:0a:74:e9:a9:39:
         24:3d:89:7b:c8:fa:ad:60:aa:58:1f:a8:35:b6:71:b6:3c:3e:
         1b:1d:1a:b8:5d:34:3a:f4:b8:59:4c:49:a6:32:86:49:ef:ea:
         43:c7:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:47:46 2026 by rpki-client