Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa
File:                     3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa (raw, json)
Hash identifier:          XA9ceTvb07vUlnV9erA1d0J8kgmyX0wxxjKJSR5SI2Y=
Subject key identifier:   CE:D9:96:34:79:FC:92:BF:CF:A8:8E:6B:00:86:4F:B4:B3:5A:13:89
Certificate issuer:       /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial:       59A6C9517EEC7EA24D2E4C9E2DE9C691C1D2B27C
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa
Signing time:             Mon 30 Mar 2026 16:00:48 +0000
ROA not before:           Mon 30 Mar 2026 15:55:48 +0000
ROA not after:            Mon 29 Mar 2027 16:00:48 +0000
asID:                     264915
IP address blocks:        168.228.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a6:c9:51:7e:ec:7e:a2:4d:2e:4c:9e:2d:e9:c6:91:c1:d2:b2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
        Validity
            Not Before: Mar 30 15:55:48 2026 GMT
            Not After : Mar 29 16:00:48 2027 GMT
        Subject: CN=CED9963479FC92BFCFA88E6B00864FB4B35A1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:27:e2:9a:10:72:a1:7b:a5:10:75:9b:d8:
                    90:e6:2b:0e:e7:57:15:20:a4:e4:1a:ea:a4:35:0a:
                    e3:8d:db:1e:9a:b2:d9:e8:b8:65:3b:0a:65:2d:1c:
                    58:a7:fb:2e:ed:e4:b3:ae:e0:87:2c:a9:4c:1c:cb:
                    8f:30:f4:6c:f0:84:ae:d6:7f:e0:9c:9b:1e:d5:c3:
                    8c:7d:60:05:9a:ec:7b:71:c8:fa:07:e4:c9:48:30:
                    81:f0:71:42:b3:b8:6c:25:3c:9d:94:11:a5:7d:27:
                    43:02:b4:6b:47:23:eb:e4:ff:cf:c9:d7:6b:a8:e6:
                    a7:e5:69:87:1e:35:58:d4:50:cd:df:ce:50:94:e4:
                    9f:45:12:c6:ce:ff:a6:4f:fc:f9:36:db:ce:da:0f:
                    59:13:e9:56:c0:95:af:4a:60:de:3b:20:d1:37:e6:
                    c8:c7:d6:cc:c8:c9:43:6e:d6:ca:ac:8f:c3:b0:ad:
                    0f:91:d8:c3:7e:e3:dd:07:86:e9:c8:f1:33:52:76:
                    73:d8:43:3e:f6:b7:b5:11:1d:8f:c6:98:f2:af:1e:
                    73:a9:00:dc:58:d3:d3:80:2b:0f:c1:28:4b:74:54:
                    5e:17:b2:af:45:94:3f:36:17:f3:ba:d0:b7:71:f9:
                    cb:f6:7c:a3:26:9c:9b:3b:ef:b9:ee:c0:e3:ba:c5:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D9:96:34:79:FC:92:BF:CF:A8:8E:6B:00:86:4F:B4:B3:5A:13:89
            X509v3 Authority Key Identifier:
                keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:79:fd:0e:59:f6:c6:94:8a:33:d4:3f:44:a1:38:92:06:c8:
         4b:46:29:3b:64:91:24:f4:27:8c:39:a4:4b:16:d9:3d:b3:90:
         b0:1d:0c:f0:0e:4d:0f:0c:a5:a9:5b:88:2b:dd:f0:70:c8:32:
         26:53:55:0d:74:e2:e1:d2:35:99:06:59:ed:22:82:ee:4d:67:
         45:b4:3f:76:53:a7:5d:f4:fd:9e:ee:0e:f2:b6:db:08:e2:c1:
         13:bf:ff:01:7e:be:94:b6:ba:c8:4a:22:7b:f5:74:ad:fe:6b:
         3b:59:5b:c9:ac:1c:d4:ed:79:12:a6:6e:dd:d3:4b:7d:3b:1f:
         53:0a:30:06:d7:48:e7:b4:2e:56:f0:c2:3e:6a:52:dd:85:b6:
         bd:4e:8d:f3:11:14:f1:96:ed:b9:90:0c:71:75:8e:ae:e1:34:
         c0:04:76:43:ae:45:55:c6:52:98:d6:e5:c7:44:c1:70:b7:a8:
         b3:01:4c:4d:a4:cd:34:25:3a:60:30:a1:41:2f:44:18:e8:b4:
         f0:95:e0:ea:af:9a:32:a1:30:85:f3:61:fc:fd:ad:09:cd:16:
         57:58:c8:90:8d:27:f2:eb:56:94:8a:9e:f5:c9:fd:df:63:96:
         28:9c:85:a7:b8:89:3c:d1:58:10:f7:55:37:69:4d:1a:78:c1:
         d9:1c:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:50 2026 by rpki-client