Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
File:                     3136382e3232382e33362e302f32322d3234203d3e203631373934.roa (raw, json)
Hash identifier:          BMAg3ibIVRYLCoqExOWsLZtAF5dysyAFetZC85c5ZKw=
Subject key identifier:   68:63:0A:8B:0E:44:13:42:27:AB:AE:22:B7:3F:BF:B1:41:E8:4B:D7
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       044F7C066F1A617B860D5B0F85AD377C91032D2E
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa
Signing time:             Wed 01 Apr 2026 19:08:41 +0000
ROA not before:           Wed 01 Apr 2026 19:03:41 +0000
ROA not after:            Wed 31 Mar 2027 19:08:41 +0000
asID:                     61794
IP address blocks:        168.228.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 15:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4f:7c:06:6f:1a:61:7b:86:0d:5b:0f:85:ad:37:7c:91:03:2d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr  1 19:03:41 2026 GMT
            Not After : Mar 31 19:08:41 2027 GMT
        Subject: CN=68630A8B0E44134227ABAE22B73FBFB141E84BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:32:cc:a7:ac:ec:c7:01:5b:29:a4:ed:5b:
                    e0:b0:86:35:8b:f1:5b:f7:d6:12:1e:22:eb:42:c3:
                    3b:19:05:ed:cc:e3:54:73:fe:39:a9:cd:1c:23:62:
                    2a:4b:d5:ce:e0:ff:d5:33:04:7d:a0:07:d6:91:01:
                    d8:5f:68:1e:72:a5:91:aa:4f:84:f8:6b:de:b2:9d:
                    f8:61:e4:94:e1:cd:67:d2:bf:cf:a5:ae:18:79:86:
                    89:70:1c:2c:9e:ce:26:be:6c:cb:c0:c5:83:44:0e:
                    38:fe:4f:b1:58:27:1d:66:b4:06:ba:64:21:b2:6d:
                    32:ba:76:2b:c9:fc:de:f7:76:d1:21:3a:c1:18:5a:
                    53:3f:af:89:c6:a5:f4:e4:43:9a:f6:5a:81:a1:36:
                    65:25:45:c1:67:ed:aa:be:f9:f3:53:fe:23:18:c1:
                    db:5c:b8:84:f3:00:55:4f:24:3c:2d:05:f5:3d:85:
                    6b:ba:d5:01:cf:54:48:1e:57:7d:e3:e7:21:2a:cd:
                    73:f6:bb:20:bc:26:e4:eb:3f:59:48:de:fb:7d:ca:
                    e1:4b:d2:14:c9:84:97:93:ec:06:a1:3d:39:f0:17:
                    4e:8d:07:d1:f3:a7:e4:27:f1:98:38:29:6a:b5:51:
                    86:2e:e1:84:f4:1a:b4:7a:cb:e3:34:fa:c5:ea:be:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:63:0A:8B:0E:44:13:42:27:AB:AE:22:B7:3F:BF:B1:41:E8:4B:D7
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/3136382e3232382e33362e302f32322d3234203d3e203631373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:51:a5:9f:49:67:9f:01:8d:a2:b6:78:83:43:bc:b4:74:e6:
         8a:df:9d:d7:f4:a9:dd:1f:38:66:57:36:f3:aa:1b:a6:ca:ea:
         e8:82:35:3d:0b:0e:5c:d9:73:56:cf:e9:c7:77:8b:a4:79:10:
         24:c6:0f:1f:eb:c5:19:65:32:f6:65:d8:fe:36:6c:6c:da:ec:
         27:3a:0d:6b:7c:5e:b3:76:41:1c:4e:0e:cc:70:44:ed:f9:73:
         39:1f:6c:00:70:73:2f:90:90:46:20:91:49:ae:3d:4a:9b:33:
         07:fd:57:1f:51:90:bd:a6:f2:19:6d:19:ba:a9:d7:82:bf:c8:
         2e:df:c4:76:db:9a:e5:02:ce:91:b6:bf:15:bd:f8:f2:33:9b:
         93:ce:5c:3f:8c:bd:5b:1a:b2:ed:36:64:65:ec:14:e3:be:4f:
         d0:69:00:a9:29:31:7f:6c:7f:35:62:6d:42:ee:a5:8c:6c:52:
         53:dc:3f:13:2d:13:0a:40:d4:5b:fe:64:81:64:79:e1:b7:bf:
         97:3b:66:91:74:b3:7c:bc:4c:3c:2f:ef:21:29:b5:55:2f:59:
         dc:7e:1d:1f:76:6d:98:4a:a0:77:ba:4d:77:72:70:97:6e:c6:
         dc:dd:a8:22:a8:c6:b7:62:44:da:28:62:95:d5:5f:05:c4:d3:
         98:3c:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:19:21 2026 by rpki-client