Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
File:                     3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa (raw, json)
Hash identifier:          k1wPHfbugC+h5O4VBfJqx5AGeHtHcuUKy62LpKBBYe0=
Subject key identifier:   9B:05:4F:C5:20:87:92:FE:97:F0:F2:C2:1B:03:DA:F4:15:1E:F0:F6
Certificate issuer:       /CN=A960C53655301FFD4C5766FAACD2ABA1E43125C0
Certificate serial:       1E8FF6EEC536710C4FFB98188E9A6E6A52EA2A10
Authority key identifier: A9:60:C5:36:55:30:1F:FD:4C:57:66:FA:AC:D2:AB:A1:E4:31:25:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A960C53655301FFD4C5766FAACD2ABA1E43125C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa
Signing time:             Wed 02 Sep 2026 18:21:58 +0000
ROA not before:           Wed 02 Sep 2026 18:16:58 +0000
ROA not after:            Wed 01 Sep 2027 18:21:58 +0000
asID:                     265246
IP address blocks:        167.250.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/A960C53655301FFD4C5766FAACD2ABA1E43125C0.crl
                          rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/A960C53655301FFD4C5766FAACD2ABA1E43125C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A960C53655301FFD4C5766FAACD2ABA1E43125C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 01:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8f:f6:ee:c5:36:71:0c:4f:fb:98:18:8e:9a:6e:6a:52:ea:2a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A960C53655301FFD4C5766FAACD2ABA1E43125C0
        Validity
            Not Before: Sep  2 18:16:58 2026 GMT
            Not After : Sep  1 18:21:58 2027 GMT
        Subject: CN=9B054FC5208792FE97F0F2C21B03DAF4151EF0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:75:b5:ab:86:e6:82:a6:66:ba:66:51:56:
                    d4:55:6e:cd:56:67:e3:1e:2a:30:f4:aa:98:5b:c4:
                    47:33:48:f0:96:57:82:5c:fd:0f:ce:88:76:d5:2e:
                    a1:ea:54:3f:e7:73:75:52:e6:cf:cb:d0:41:6b:4e:
                    c6:08:90:78:15:65:07:2b:ca:7c:e1:46:31:4b:bd:
                    a7:f3:cc:7f:43:fd:7b:13:28:25:43:45:26:44:5c:
                    d7:f8:e7:90:c6:79:e5:14:6e:a9:1a:b6:f2:10:15:
                    92:bd:c7:20:bb:ad:21:82:e7:10:46:41:16:69:6a:
                    5c:62:09:65:de:4b:00:71:f8:d5:ae:40:59:48:f2:
                    32:21:b5:e6:60:15:af:68:fa:22:9b:07:23:65:c8:
                    73:5d:85:3e:d0:79:58:1b:42:61:a0:97:91:cb:10:
                    0a:cc:87:75:98:d7:99:2a:05:30:15:fb:46:ec:2b:
                    5f:42:d0:fa:62:70:60:ee:01:c9:ec:db:29:e7:e5:
                    a3:77:36:36:17:7b:62:65:3e:d3:7c:40:84:c9:af:
                    e5:18:dc:df:cf:ef:df:ac:a7:fb:34:a5:b1:71:ea:
                    02:af:f7:85:53:f5:be:46:54:ed:89:4b:6f:23:92:
                    c5:9b:11:21:fb:cf:92:00:92:32:02:b7:21:20:c7:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:05:4F:C5:20:87:92:FE:97:F0:F2:C2:1B:03:DA:F4:15:1E:F0:F6
            X509v3 Authority Key Identifier:
                keyid:A9:60:C5:36:55:30:1F:FD:4C:57:66:FA:AC:D2:AB:A1:E4:31:25:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/A960C53655301FFD4C5766FAACD2ABA1E43125C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A960C53655301FFD4C5766FAACD2ABA1E43125C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/0/3136372e3235302e3132382e302f32322d3234203d3e20323635323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:12:f4:8b:c5:7e:b6:c1:35:ed:93:0b:0f:fc:c7:b6:9e:a5:
         82:b1:83:b0:51:e5:fd:b2:4a:48:12:d2:ca:30:ec:32:17:61:
         20:c5:4f:05:f3:6a:d4:cf:d3:7e:82:7d:05:ad:b6:8d:13:4c:
         30:b5:15:02:57:88:15:6e:4f:2d:35:24:12:7e:7c:cb:82:f3:
         91:e9:07:38:50:79:4a:8a:dc:18:a9:61:20:5c:61:95:59:c8:
         df:0d:81:fd:fe:04:65:ad:46:55:b6:2b:06:ed:d4:8c:e2:ab:
         95:91:9e:43:eb:fc:b9:e3:ea:62:9a:78:b8:78:2d:ea:89:0a:
         08:a8:89:81:3f:e3:a6:6e:97:a9:63:7e:84:f8:81:74:bf:c0:
         d1:a8:21:87:e1:49:7f:a4:6d:db:15:54:e9:2e:64:15:02:34:
         d9:4f:e8:e2:ad:e5:b6:d5:1e:31:3b:ff:41:8b:6f:93:10:54:
         40:64:ac:b3:6a:52:2d:25:94:22:34:df:f3:93:a8:a9:21:8e:
         d4:49:7c:e6:1d:d4:cb:21:36:b3:6e:fa:00:5a:65:1a:86:b2:
         67:6b:f4:f5:38:6d:be:e2:d5:32:c1:91:26:c4:e9:55:c1:45:
         7c:9b:b3:79:d0:83:df:30:39:53:4f:7e:dc:9f:94:83:f3:8c:
         90:11:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:13:57 2026 by rpki-client