Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa
File:                     3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa (raw, json)
Hash identifier:          KZQG8wj6TYi2CfzKF/1jrVXB3jmUvEl7aUcEi8vWMUQ=
Subject key identifier:   09:33:18:14:80:56:7A:C8:AE:E5:D4:31:67:8C:18:D1:B4:F9:37:93
Certificate issuer:       /CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
Certificate serial:       6B568BE00139B1A37B7F9EA92CF517B559629CC3
Authority key identifier: 97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa
Signing time:             Mon 30 Mar 2026 16:00:47 +0000
ROA not before:           Mon 30 Mar 2026 15:55:47 +0000
ROA not after:            Mon 29 Mar 2027 16:00:47 +0000
asID:                     264915
IP address blocks:        168.228.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:56:8b:e0:01:39:b1:a3:7b:7f:9e:a9:2c:f5:17:b5:59:62:9c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97A621E397E2627D02EB77E74594261CF2F5C6EC
        Validity
            Not Before: Mar 30 15:55:47 2026 GMT
            Not After : Mar 29 16:00:47 2027 GMT
        Subject: CN=0933181480567AC8AEE5D431678C18D1B4F93793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:0a:6f:db:c2:1c:ea:b8:93:12:a2:05:d8:
                    72:ab:7b:cf:4a:f6:1a:97:8f:8c:08:c8:36:5b:63:
                    69:23:71:e2:d6:ef:b2:c0:27:e6:4a:96:cb:5f:39:
                    77:11:55:01:da:62:bf:2d:f1:dd:41:b1:b3:7d:87:
                    21:ce:7c:21:44:bf:4c:3e:2b:0e:29:bd:c1:02:cf:
                    71:cf:57:bb:6e:6b:ba:64:95:6c:70:a9:89:f5:21:
                    13:e9:8f:ca:98:00:87:8d:3f:18:8e:2a:b7:8a:38:
                    06:c1:ad:fb:eb:5e:6c:85:a6:bf:59:47:5d:e3:d4:
                    72:5e:a5:46:d4:a3:51:1f:a5:36:ca:b8:ac:f9:82:
                    d5:81:aa:e2:02:bf:16:14:9f:88:cd:90:1a:e7:4c:
                    e2:04:44:f8:a0:40:db:b0:4c:ac:95:7c:9d:45:8e:
                    b0:71:cf:d3:57:af:e1:83:fd:66:98:1b:ff:6a:a8:
                    f6:dd:c0:77:61:be:9d:75:41:f0:15:58:bc:91:1e:
                    29:dd:0e:da:ad:ea:cc:ca:4e:3d:cf:7e:8e:b2:b0:
                    a7:7a:b9:85:34:10:d0:36:f1:99:94:33:d9:36:11:
                    78:81:46:7c:47:3f:c2:a3:17:67:d7:b5:f8:7c:a8:
                    9b:2b:64:8e:c7:8e:2e:04:f3:36:75:37:9f:8c:50:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:18:14:80:56:7A:C8:AE:E5:D4:31:67:8C:18:D1:B4:F9:37:93
            X509v3 Authority Key Identifier:
                keyid:97:A6:21:E3:97:E2:62:7D:02:EB:77:E7:45:94:26:1C:F2:F5:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/97A621E397E2627D02EB77E74594261CF2F5C6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97A621E397E2627D02EB77E74594261CF2F5C6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/3136382e3232382e3232322e302f32342d3234203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:ef:dd:46:a1:a6:16:92:50:b9:f0:f0:b8:09:3c:82:0f:78:
         2e:19:4d:31:72:0b:d3:4d:e1:f9:fe:af:15:eb:34:0a:1c:0b:
         64:81:44:3b:16:48:76:d4:e3:e1:2b:7f:29:a6:3e:1a:65:ab:
         f9:cd:90:4a:a7:5d:85:ea:cb:63:e1:32:f1:34:f3:71:8d:31:
         03:a2:09:d7:a4:d5:8f:2c:97:1c:e6:a9:8a:cc:3a:66:8a:7f:
         0c:f9:70:3d:46:9a:26:52:a5:1b:bd:e1:e1:37:6a:7f:d7:70:
         bf:f8:f4:03:3e:49:44:54:fa:eb:55:6a:58:19:a3:97:cc:21:
         b6:41:48:7b:60:ef:0c:e1:e8:6e:78:d3:ea:aa:83:f7:f5:7c:
         4a:a0:d6:06:1c:d9:5f:e8:58:94:a0:d8:04:40:fb:86:0e:e5:
         9f:b3:a4:63:02:3a:2c:93:a1:0e:ae:da:e0:52:9d:c5:1f:95:
         d7:c6:ac:6a:6d:66:07:55:4f:1b:c0:82:9d:d3:2c:ac:cc:e5:
         d7:36:30:dd:82:c4:25:a7:84:61:c3:7d:27:3d:84:75:0e:10:
         0e:2d:f5:c9:7a:d6:85:45:03:bf:e6:a9:3a:13:71:62:bf:d0:
         64:ac:93:27:62:f4:5b:39:c8:d6:dd:23:4a:93:32:df:33:33:
         3e:e7:f6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:42 2026 by rpki-client