Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e39312e302f32342d3234203d3e20323635333038.roa
File:                     3136382e3132312e39312e302f32342d3234203d3e20323635333038.roa (raw, json)
Hash identifier:          X36n8v+ROqrn7DXIgaMRLYXPkY/EN3jzHTBnr4TMu9g=
Subject key identifier:   38:51:BF:68:1D:51:73:0C:C3:21:DC:5C:A5:23:59:52:B5:62:4C:DC
Certificate issuer:       /CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
Certificate serial:       18BA5428BA96EB04F6F9AB24F94C48C6814660E6
Authority key identifier: 85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e39312e302f32342d3234203d3e20323635333038.roa
Signing time:             Wed 03 Jun 2026 20:48:18 +0000
ROA not before:           Wed 03 Jun 2026 20:43:18 +0000
ROA not after:            Wed 02 Jun 2027 20:48:18 +0000
asID:                     265308
IP address blocks:        168.121.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl
                          rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ba:54:28:ba:96:eb:04:f6:f9:ab:24:f9:4c:48:c6:81:46:60:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
        Validity
            Not Before: Jun  3 20:43:18 2026 GMT
            Not After : Jun  2 20:48:18 2027 GMT
        Subject: CN=3851BF681D51730CC321DC5CA5235952B5624CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:1e:c4:24:20:1c:d1:1d:b9:f9:00:5c:6b:
                    56:fe:d8:61:d8:26:5b:92:c5:4f:86:72:ab:0d:33:
                    93:16:cf:1f:be:ff:6c:5e:01:c8:fe:00:e7:f5:9b:
                    99:94:79:63:14:f2:ac:48:a4:0a:8e:30:57:39:04:
                    7f:a8:23:ee:e8:44:ff:13:9b:0c:e9:42:2c:18:69:
                    d6:dc:09:fd:52:4a:ec:5b:55:7d:ea:da:4b:20:33:
                    77:c3:3f:8c:89:b8:db:0a:bd:89:1d:73:66:90:a1:
                    53:d8:cf:48:7c:9e:dd:f5:f9:4e:e5:81:56:d5:c2:
                    e4:a1:56:ea:3c:79:07:a8:d7:07:0f:71:db:42:5b:
                    d8:ea:5e:f4:0a:80:89:45:d3:1d:d6:5b:5e:fa:bf:
                    26:b9:93:a1:19:bb:26:98:2a:f3:ba:35:1b:25:e5:
                    91:5e:65:98:ef:41:a7:79:72:c4:53:36:d5:c8:3f:
                    c7:08:e4:02:f1:1a:21:16:d9:ea:3c:9e:ba:2e:f9:
                    36:b5:39:64:49:08:24:e2:1e:3f:bd:65:25:ee:93:
                    94:a9:49:76:6b:60:02:c0:6b:4a:cc:4d:93:34:74:
                    8a:df:a7:5d:65:6b:59:3d:5a:28:3f:5e:18:01:bc:
                    6f:b5:de:30:53:12:bb:5b:f8:d6:cb:d6:05:ac:61:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:51:BF:68:1D:51:73:0C:C3:21:DC:5C:A5:23:59:52:B5:62:4C:DC
            X509v3 Authority Key Identifier:
                keyid:85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e39312e302f32342d3234203d3e20323635333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:af:6d:b4:6d:fe:a2:3c:19:8a:f0:16:16:fd:44:35:77:97:
         80:af:5a:1f:60:6a:2f:aa:bf:16:ca:52:fe:c9:b9:31:e3:8b:
         71:f0:07:1b:33:61:d7:48:6f:9a:41:50:cb:61:c2:f0:9d:3a:
         c8:83:7b:f3:08:7b:9d:71:76:7c:fa:12:e5:14:7d:3c:1d:55:
         29:60:07:94:04:ac:e2:a2:16:1e:e9:53:64:53:7c:ab:11:4b:
         ab:1f:dd:48:5d:5e:2f:26:fb:84:6a:a5:87:c6:3b:1d:1f:03:
         91:0e:74:16:84:f8:43:a4:11:7a:fd:a3:ce:f0:ce:fe:f2:f3:
         97:f5:47:02:35:d5:40:fb:fe:61:af:8f:e4:27:93:8d:47:13:
         3f:7c:39:2f:df:1f:57:e1:59:6b:23:37:24:c8:5b:ba:37:3a:
         17:86:09:04:6c:06:7e:50:56:14:eb:45:74:fb:c9:27:1e:a9:
         dd:6a:0a:47:a1:19:1c:37:80:36:76:b4:43:59:87:3c:7b:5b:
         72:5a:69:8e:98:fb:5a:57:a5:8e:b3:cf:d1:cb:71:a1:33:35:
         68:d9:51:8f:73:ad:86:15:76:ea:87:dc:b6:48:86:35:f6:e3:
         54:0c:ce:a4:1c:c0:94:1f:72:ef:ce:55:4e:5b:f7:a3:b7:5f:
         c7:14:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:04 2026 by rpki-client