Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
File:                     3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa (raw, json)
Hash identifier:          RQ87hl3gQhBw0xcQ/kj+e50Z4gy2P4YDMdTxCdwNzeQ=
Subject key identifier:   B3:4C:97:25:CE:DA:DC:CB:1B:1E:61:CF:00:48:AB:DC:12:C7:B1:28
Certificate issuer:       /CN=201586C3B2FAAB19793753205A59418C57047C4D
Certificate serial:       72235B9C535A47933263C3DAEFA3E98DE986EDD7
Authority key identifier: 20:15:86:C3:B2:FA:AB:19:79:37:53:20:5A:59:41:8C:57:04:7C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa
Signing time:             Mon 06 Apr 2026 21:17:27 +0000
ROA not before:           Mon 06 Apr 2026 21:12:27 +0000
ROA not after:            Mon 05 Apr 2027 21:17:27 +0000
asID:                     264887
IP address blocks:        168.227.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.crl
                          rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:5b:9c:53:5a:47:93:32:63:c3:da:ef:a3:e9:8d:e9:86:ed:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201586C3B2FAAB19793753205A59418C57047C4D
        Validity
            Not Before: Apr  6 21:12:27 2026 GMT
            Not After : Apr  5 21:17:27 2027 GMT
        Subject: CN=B34C9725CEDADCCB1B1E61CF0048ABDC12C7B128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:0f:66:5f:44:4d:14:58:c3:e6:20:8b:a6:
                    f2:73:86:5c:dc:62:eb:66:74:96:19:b9:26:3b:3c:
                    e2:5b:d0:49:58:83:70:2e:39:1d:48:5c:57:cd:2b:
                    da:e5:be:05:07:30:e4:23:4e:0e:ee:13:4c:ab:0c:
                    2f:12:c7:8f:07:54:26:ab:ca:95:e1:1e:cc:f5:64:
                    3c:03:e5:91:d2:c8:21:b3:d4:3e:38:45:62:7f:46:
                    72:1d:63:4d:d2:60:70:26:3c:10:ef:a3:53:34:be:
                    9e:97:c0:bf:14:42:c2:53:ce:a7:96:be:90:90:0e:
                    b8:f1:9e:ea:8b:0b:2a:c3:12:7e:79:19:44:b8:65:
                    b7:15:58:87:ad:a1:51:57:6b:a0:2e:a3:06:b6:cd:
                    28:be:03:04:6b:f3:af:9b:86:1c:4a:b4:13:24:f5:
                    d7:24:3e:93:ac:03:42:e9:36:53:b0:72:f9:22:c7:
                    98:a1:63:3a:90:5d:37:66:4d:70:6b:9e:05:a2:d8:
                    94:dd:55:1b:63:8a:d5:41:f5:55:e9:34:7c:77:a4:
                    7c:fa:61:e2:03:16:c8:ee:6b:04:9a:a0:e9:5c:3d:
                    d6:96:84:8d:b6:f3:07:50:5c:17:43:da:4c:db:4a:
                    45:e2:b5:09:8f:68:5c:06:73:27:bc:b5:4f:89:d7:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4C:97:25:CE:DA:DC:CB:1B:1E:61:CF:00:48:AB:DC:12:C7:B1:28
            X509v3 Authority Key Identifier:
                keyid:20:15:86:C3:B2:FA:AB:19:79:37:53:20:5A:59:41:8C:57:04:7C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/201586C3B2FAAB19793753205A59418C57047C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/201586C3B2FAAB19793753205A59418C57047C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8deUDt1CowYk8CTEDdE97NL1zZW8EUW4yCiBFhB94HYL/0/3136382e3232372e3138342e302f32322d3332203d3e20323634383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:88:8c:6c:cd:24:d5:ef:9b:b5:2c:c0:e8:29:d5:ce:15:b1:
         68:5d:81:1b:d4:dc:c2:50:13:8a:21:90:ee:ff:7f:9b:f0:f4:
         a8:b4:6f:c5:72:bf:39:cf:52:57:03:a6:ea:7b:2f:3c:94:76:
         4d:61:4a:ca:5d:c8:92:a3:48:63:19:23:74:a4:52:88:0a:89:
         2b:24:de:77:e1:f9:12:f8:f4:a1:79:d4:12:b4:58:9c:e9:61:
         83:89:12:13:98:85:bb:67:47:bd:f3:c6:d6:e1:c4:7b:7c:a1:
         9a:9f:6d:3c:8b:83:4c:87:26:f9:a2:3c:8a:09:65:e4:b5:5b:
         0d:49:e5:d9:50:7a:64:cd:ad:9e:35:9d:f4:b0:2d:2a:fb:90:
         f7:78:f7:0b:0e:ae:2e:e3:c2:0e:1e:91:27:84:38:61:17:03:
         2b:0c:9b:8a:19:30:f1:c6:26:6a:a2:d0:c6:db:6d:1e:13:c9:
         5b:8a:16:b6:23:0f:e5:cc:84:14:bf:a1:cf:a2:15:57:37:9d:
         4b:93:fa:4c:1b:19:51:9a:c2:86:d6:f9:d1:0b:a8:53:5c:10:
         1d:28:01:cf:b7:ae:bd:dd:f6:0e:15:6b:32:8a:b7:94:07:b0:
         fa:7b:b5:ef:3b:23:6c:be:f4:df:a7:7e:a2:65:e6:26:ab:35:
         92:2c:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:30 2026 by rpki-client