Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
File:                     3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa (raw, json)
Hash identifier:          gpxq9dPp07FkIxkAcw4L9W1dG+CpDQzjaatp2V8fFVw=
Subject key identifier:   CA:7D:B9:FE:73:F9:7F:83:35:35:0A:0E:F9:2B:C5:47:BF:09:DA:8E
Certificate issuer:       /CN=DB055820B43AFF7A7173228557B8758637A96D68
Certificate serial:       66E3282CAA3A7B562822885B61D20A4C32218798
Authority key identifier: DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa
Signing time:             Fri 03 Apr 2026 18:16:33 +0000
ROA not before:           Fri 03 Apr 2026 18:11:33 +0000
ROA not after:            Fri 02 Apr 2027 18:16:33 +0000
asID:                     265487
IP address blocks:        168.197.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl
                          rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 04:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e3:28:2c:aa:3a:7b:56:28:22:88:5b:61:d2:0a:4c:32:21:87:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB055820B43AFF7A7173228557B8758637A96D68
        Validity
            Not Before: Apr  3 18:11:33 2026 GMT
            Not After : Apr  2 18:16:33 2027 GMT
        Subject: CN=CA7DB9FE73F97F8335350A0EF92BC547BF09DA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:68:ad:22:3f:a8:02:16:39:a6:be:56:ee:
                    d4:28:3c:1e:56:24:e9:fd:81:3a:ed:62:a3:96:cb:
                    28:69:ba:ab:12:25:3a:76:a7:40:5f:5e:d5:aa:55:
                    c0:db:1a:6d:7f:a0:9e:eb:78:5e:f1:99:48:42:4f:
                    90:31:cb:a0:1d:23:a1:d2:0b:67:09:02:cd:e1:3e:
                    ff:79:3a:52:6d:77:1a:f3:9f:d1:93:9d:33:65:9b:
                    81:c2:57:04:0b:83:4c:7c:a4:d1:26:c5:59:ea:c5:
                    08:49:dd:10:47:f8:b5:f2:b0:31:85:d2:04:f9:2a:
                    aa:ca:17:f9:b7:36:8e:cb:61:b7:db:d7:ea:b0:4d:
                    74:d9:8f:ab:f8:00:90:61:e6:95:b8:be:55:a1:9c:
                    bf:2f:7c:77:f9:21:16:2d:eb:66:cf:6a:2e:1c:83:
                    2b:91:47:b3:c2:22:49:20:ff:25:87:6b:b9:f2:83:
                    ab:77:cc:41:2c:9c:58:ae:4d:60:31:35:78:67:63:
                    58:c1:7d:1d:cf:3f:24:a9:b6:8c:20:b5:e1:3d:01:
                    24:dc:62:65:87:72:7c:11:76:22:68:7c:b2:85:50:
                    1e:11:70:73:a1:05:5b:3a:45:98:5c:4f:88:d3:85:
                    50:37:5e:2d:8b:19:f5:cf:0f:6f:9f:02:90:55:df:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:B9:FE:73:F9:7F:83:35:35:0A:0E:F9:2B:C5:47:BF:09:DA:8E
            X509v3 Authority Key Identifier:
                keyid:DB:05:58:20:B4:3A:FF:7A:71:73:22:85:57:B8:75:86:37:A9:6D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/DB055820B43AFF7A7173228557B8758637A96D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB055820B43AFF7A7173228557B8758637A96D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/3136382e3139372e3134342e302f32322d3234203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:2b:22:18:a8:9e:78:91:41:96:e0:db:6c:99:d9:51:4b:
         60:23:e5:84:a1:f7:42:52:29:7a:00:8b:68:3f:e8:88:c6:9f:
         9d:13:84:8b:3d:07:a3:a5:7b:5c:09:17:b8:46:81:39:bd:42:
         39:3d:70:91:57:e2:23:bf:d7:35:1f:4b:ad:9f:ff:09:d7:b1:
         bd:69:cc:70:5d:68:d2:97:12:5e:68:ea:21:5a:28:f4:48:c8:
         f2:59:69:91:ac:df:b4:7f:e4:29:a5:2b:79:74:eb:56:82:14:
         86:23:e2:9b:e1:e6:19:f3:51:6b:c1:1d:b8:d6:49:a8:05:76:
         fd:7f:ca:ed:f0:79:f9:e0:e4:71:10:3c:61:1e:4f:b6:eb:5f:
         b3:74:40:fd:c2:9a:33:a3:03:47:94:7f:ae:2e:9a:ff:85:3a:
         87:fc:c5:a3:df:1d:3e:6e:25:67:c7:2a:97:35:76:e4:8f:26:
         32:4a:2e:ed:68:62:3d:41:a3:b4:52:3d:b9:94:1f:cc:76:dc:
         2c:19:01:10:0a:ec:f8:1e:f1:07:6b:42:1e:9f:16:ed:3c:47:
         7c:6a:e6:96:ce:d4:00:79:4e:d8:8d:53:f6:0e:58:a3:d5:9e:
         ee:65:33:3c:e2:da:8e:42:63:57:a9:5a:3a:13:39:e0:7a:7d:
         72:0a:09:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:07:56 2026 by rpki-client