Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
File:                     3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (raw, json)
Hash identifier:          x1wE/e5UEa6cvf3XKi0JfIQEcyfwLsuJw3Hg1mnZtsw=
Subject key identifier:   B6:D8:22:71:9B:63:8D:D8:C1:71:72:97:8D:15:F4:C7:96:4F:A6:9E
Certificate issuer:       /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial:       765C589B787023048FBC9A1B9DFBC6C204DD4E87
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
Signing time:             Mon 30 Mar 2026 16:00:43 +0000
ROA not before:           Mon 30 Mar 2026 15:55:43 +0000
ROA not after:            Mon 29 Mar 2027 16:00:43 +0000
asID:                     264915
IP address blocks:        168.228.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5c:58:9b:78:70:23:04:8f:bc:9a:1b:9d:fb:c6:c2:04:dd:4e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
        Validity
            Not Before: Mar 30 15:55:43 2026 GMT
            Not After : Mar 29 16:00:43 2027 GMT
        Subject: CN=B6D822719B638DD8C17172978D15F4C7964FA69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:d3:af:15:33:97:4b:6e:b3:8e:1c:bd:26:
                    3b:15:c6:67:4a:8f:e9:5e:e8:7c:75:26:25:b8:7b:
                    b4:56:a7:82:f4:89:6f:64:f9:fa:b3:9c:99:a8:b3:
                    66:67:23:d5:20:fc:b0:c0:7e:5a:91:67:90:82:cc:
                    a0:53:d4:84:7e:ce:72:c9:de:22:e2:84:09:94:2b:
                    63:4c:47:a4:84:fa:c0:71:b9:31:0a:fc:8a:ca:82:
                    34:66:8e:6f:07:11:08:a9:e0:1b:41:2a:7a:46:94:
                    27:ea:f4:1f:f7:90:3e:86:19:7d:8a:4c:27:4e:3f:
                    6e:09:b3:8c:66:c1:bd:82:78:ac:0b:c2:d3:04:d6:
                    4e:a7:58:76:36:66:b6:1e:fa:23:a9:87:c8:38:26:
                    e0:49:22:6d:9b:07:6b:34:75:7a:2c:84:c9:a3:40:
                    0f:b7:3c:30:bc:62:2b:68:8f:d0:a5:25:e6:2b:9a:
                    5c:cd:7e:7b:d1:a5:c7:f6:2d:9e:2c:6a:be:d1:aa:
                    a1:c5:a8:27:28:04:7c:46:ae:a5:cd:19:a7:46:23:
                    71:08:68:8d:59:c6:c3:0d:c8:3a:d5:a6:59:00:77:
                    de:aa:5a:fb:b9:a1:82:5a:16:85:bb:2b:88:5b:25:
                    14:24:ac:fb:2e:05:5c:ff:6e:03:c4:4e:f5:8d:e0:
                    63:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:22:71:9B:63:8D:D8:C1:71:72:97:8D:15:F4:C7:96:4F:A6:9E
            X509v3 Authority Key Identifier:
                keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:6f:a5:b2:02:43:a0:87:5b:d9:13:a8:59:48:47:4b:35:14:
         61:e9:a3:62:28:1a:cd:18:92:57:31:4a:b9:4d:6f:83:30:cb:
         75:de:f0:9f:bf:fc:56:ac:5d:86:31:5a:53:ee:5a:02:51:7d:
         14:ff:95:53:95:be:00:79:89:3d:77:bc:5c:c8:dc:f5:ef:63:
         01:f8:19:d7:19:8d:6f:a1:bf:99:d4:2e:96:7b:f0:d8:32:9c:
         7a:1b:f7:08:6e:42:91:6f:ae:75:39:fc:2f:72:1a:ef:a2:6b:
         86:15:9b:f1:6a:e0:26:16:34:d9:51:fd:84:10:38:cd:4d:16:
         b2:e5:ab:05:28:18:92:94:f5:89:c5:24:3d:e8:81:88:5b:c9:
         3f:52:b1:c5:1e:a1:f2:6c:3f:02:9a:76:40:38:80:50:fe:ae:
         6d:57:8b:4d:b8:ba:40:08:66:1d:9e:3d:79:63:44:89:ed:98:
         e6:b4:8b:a7:39:68:6c:ae:e1:ca:11:58:a5:2d:83:91:35:11:
         47:30:24:a7:6b:6f:9d:9a:91:8c:63:46:18:c6:08:19:ac:28:
         35:5d:f3:e5:88:7a:b5:ee:b2:cf:3a:26:ef:24:82:c6:76:d5:
         1f:36:73:0c:96:16:cc:88:af:71:fa:ee:e2:ed:33:dd:ca:3c:
         2f:68:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:30:10 2026 by rpki-client