Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
File:                     3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa (raw, json)
Hash identifier:          c9ye423Mb3SrMCe3Dfog211LCfuzeG299OhCCcSg9Ds=
Subject key identifier:   B1:EF:D6:E4:E4:31:8E:A8:3C:2E:82:22:08:99:03:34:FB:F8:84:86
Certificate issuer:       /CN=488C735907C82A33DD56871CC305A21B88A9B353
Certificate serial:       5C77BDCAB20ADC24F9DC851B2D78E8891FDF8470
Authority key identifier: 48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa
Signing time:             Wed 01 Apr 2026 15:18:50 +0000
ROA not before:           Wed 01 Apr 2026 15:13:50 +0000
ROA not after:            Wed 31 Mar 2027 15:18:50 +0000
asID:                     267427
IP address blocks:        164.163.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl
                          rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:77:bd:ca:b2:0a:dc:24:f9:dc:85:1b:2d:78:e8:89:1f:df:84:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488C735907C82A33DD56871CC305A21B88A9B353
        Validity
            Not Before: Apr  1 15:13:50 2026 GMT
            Not After : Mar 31 15:18:50 2027 GMT
        Subject: CN=B1EFD6E4E4318EA83C2E822208990334FBF88486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:5c:d2:5e:29:d8:de:66:9f:f6:79:9c:db:
                    c1:9b:4e:26:5e:ff:56:59:bf:91:4a:f9:93:50:4c:
                    e6:61:0d:d5:6e:6a:9c:bf:32:a3:06:95:78:1f:1a:
                    62:75:ba:d0:8a:78:7f:af:99:c7:5c:d9:4a:65:79:
                    0b:29:7d:2e:1e:fe:bc:73:db:f1:35:07:dc:c8:28:
                    02:85:7a:51:f1:fd:0c:47:01:1e:f3:e7:3f:a4:4c:
                    06:be:a7:83:fa:e8:36:28:68:f7:28:3f:1a:e8:d8:
                    c0:b0:95:c2:87:1f:61:42:a7:11:1f:81:e4:36:4b:
                    58:52:f3:2f:09:2a:e8:92:c1:a9:8a:bf:f0:dc:78:
                    8a:47:62:5e:49:c8:4d:2e:e0:1c:f5:5b:10:37:74:
                    f1:4a:21:4a:07:d8:17:b6:14:6c:3f:75:c4:54:83:
                    24:56:7d:5e:2d:f2:8c:d7:28:76:26:b8:b5:ca:33:
                    cb:81:1f:4d:c8:e3:4a:4a:43:ad:9c:06:f9:6a:3a:
                    a3:d4:d3:2c:e0:92:77:d5:97:b0:15:ac:99:8e:48:
                    04:82:96:69:3a:3e:97:03:b0:8a:fe:73:b7:10:7f:
                    1b:f8:b0:d7:23:a3:a2:59:c2:c5:2f:29:92:77:68:
                    c1:58:53:a5:2d:16:53:ff:c5:b7:bd:95:22:3a:4e:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EF:D6:E4:E4:31:8E:A8:3C:2E:82:22:08:99:03:34:FB:F8:84:86
            X509v3 Authority Key Identifier:
                keyid:48:8C:73:59:07:C8:2A:33:DD:56:87:1C:C3:05:A2:1B:88:A9:B3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/488C735907C82A33DD56871CC305A21B88A9B353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/488C735907C82A33DD56871CC305A21B88A9B353.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8cje4q5kH8RnAue8w4Ni2o3EL6Y96kssfipCeAyzjmm1/0/3136342e3136332e3230382e302f32322d3234203d3e20323637343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:91:02:9e:3e:30:16:cd:4e:71:01:3b:60:5b:d1:24:0d:56:
         ef:73:11:e8:17:a9:59:bf:39:a5:db:c0:77:c9:b8:4d:79:9a:
         31:56:05:3a:9b:05:66:e2:f4:a9:9a:7a:80:57:d2:a5:67:10:
         aa:e4:d1:bb:e6:4c:30:34:26:cb:1b:cc:11:f3:08:68:49:5c:
         4d:13:38:8c:16:4e:76:dc:d7:c3:b4:0e:51:72:a0:c7:82:ae:
         ff:cb:cd:a6:53:b3:bc:f5:96:3f:c0:fd:8a:b3:9e:0f:38:ce:
         1d:27:44:03:25:e1:36:f7:80:bb:69:48:96:97:e1:16:d7:48:
         7d:06:9e:1e:2c:f3:14:a5:98:25:3f:45:91:3f:dc:54:91:80:
         fe:c3:d7:c2:42:c8:91:be:08:1c:7e:78:7f:e4:ff:12:fd:05:
         f6:f4:83:ab:a7:fd:b8:bf:1f:79:25:9b:0e:0d:cb:de:91:a5:
         b6:e3:3d:19:b1:a3:b7:c1:dc:12:dc:6d:36:da:92:62:12:9d:
         50:36:18:8f:26:eb:66:f1:e3:1a:01:10:4b:4e:44:40:90:56:
         85:c9:1b:fd:da:e3:a2:0f:8b:3d:d5:7f:d9:d7:44:74:2e:aa:
         21:b5:df:51:77:04:7a:ea:35:bf:47:b5:b3:0b:73:8d:e0:31:
         de:0c:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:28:15 2026 by rpki-client