Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136362e302f32332d3233203d3e20323730333036.roa
File:                     3139302e3131322e3136362e302f32332d3233203d3e20323730333036.roa (raw, json)
Hash identifier:          muIH4YfQPHy4hJyjDPzb8LffwoH9TNl338J751T3KV8=
Subject key identifier:   DA:57:14:9B:4F:DB:78:30:66:E7:F3:E2:8D:D6:1A:AD:53:A1:E6:2E
Certificate issuer:       /CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
Certificate serial:       41BB5874C35892EBDC861C64DA08E3A6D1D8ADA4
Authority key identifier: F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136362e302f32332d3233203d3e20323730333036.roa
Signing time:             Sat 04 Apr 2026 17:01:30 +0000
ROA not before:           Sat 04 Apr 2026 16:56:30 +0000
ROA not after:            Sat 03 Apr 2027 17:01:30 +0000
asID:                     270306
IP address blocks:        190.112.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl
                          rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bb:58:74:c3:58:92:eb:dc:86:1c:64:da:08:e3:a6:d1:d8:ad:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
        Validity
            Not Before: Apr  4 16:56:30 2026 GMT
            Not After : Apr  3 17:01:30 2027 GMT
        Subject: CN=DA57149B4FDB783066E7F3E28DD61AAD53A1E62E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:9b:ca:7b:aa:13:fa:ca:d2:1b:ad:44:b9:
                    cd:2d:f9:52:80:8b:d0:f0:1e:7a:15:89:5d:02:82:
                    9b:6e:ad:bc:d1:e8:5a:cd:2e:1c:05:71:f4:b2:c5:
                    5c:21:15:6a:08:5d:8a:96:34:23:a3:7f:ea:ad:51:
                    f5:f5:69:7a:db:f2:1b:15:fb:e3:25:d0:4f:be:de:
                    f2:b4:91:0d:f2:ff:36:19:0d:0b:a5:31:e9:bf:a3:
                    53:64:95:1c:24:5b:29:53:f3:a0:db:6f:ab:22:c6:
                    55:55:3a:23:96:ba:d0:ed:38:1b:79:0b:af:64:8c:
                    07:d7:a4:c5:ce:20:56:95:b3:58:83:99:72:1a:ae:
                    ff:4e:a2:ad:8e:57:13:5c:c8:1f:ec:70:a5:39:25:
                    68:6e:9d:7e:30:ee:af:5a:f0:87:7c:f0:9f:c4:a9:
                    fc:cc:58:3a:8e:2a:02:b9:bf:07:9b:4f:2f:65:33:
                    82:3f:16:d6:26:4a:bc:dd:be:42:5e:bc:d5:b9:10:
                    37:38:36:d0:40:67:da:c8:3f:be:61:06:ef:dc:33:
                    03:89:78:2e:46:cf:f7:69:5f:41:7a:89:87:32:37:
                    47:02:0c:30:52:6b:79:f1:63:60:b4:16:58:23:6b:
                    c9:d1:22:8a:c2:75:f3:40:5b:e0:57:a6:a2:e2:8c:
                    13:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:14:9B:4F:DB:78:30:66:E7:F3:E2:8D:D6:1A:AD:53:A1:E6:2E
            X509v3 Authority Key Identifier:
                keyid:F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/3139302e3131322e3136362e302f32332d3233203d3e20323730333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:2a:1e:de:14:33:58:f2:5e:a7:04:dc:78:2b:d2:8d:73:
         e2:1e:8f:20:e7:28:7f:ff:b7:5b:ad:05:1e:d8:96:57:97:23:
         19:aa:8b:33:0d:5b:fe:db:b5:34:dd:a4:96:3c:36:c4:71:11:
         be:ae:0d:50:2d:38:3b:a5:96:77:e9:d6:a2:c0:c3:70:e2:05:
         06:d0:76:02:f2:f2:64:83:5e:a7:56:11:bb:ee:ad:a3:bf:b4:
         19:55:96:8a:84:aa:76:a8:e6:98:14:8d:ad:93:10:a3:07:8f:
         2f:ae:57:6b:99:75:cd:2e:03:38:87:76:30:75:a2:cd:06:9c:
         9f:bf:1d:d6:9a:ae:46:b2:39:40:87:31:9d:f2:e3:b0:55:16:
         36:57:45:59:83:63:dd:f7:a9:e1:a9:a0:a7:de:69:46:96:7e:
         b3:4c:36:53:17:3b:77:2a:e4:6d:68:cd:28:19:00:53:33:02:
         c5:ef:5e:6f:cc:8c:18:ac:ae:d0:d2:15:59:b6:a6:4a:f5:9f:
         87:49:7c:9a:11:83:cd:d7:91:41:e7:3e:2f:10:76:26:9c:c8:
         58:25:ea:ed:32:bb:71:0a:ab:1f:f2:2b:1b:4b:1a:d7:3c:b9:
         99:89:40:e4:29:7a:e0:40:0c:ad:86:d4:5a:bd:f9:5d:4a:58:
         32:ab:ef:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:55:25 2026 by rpki-client