Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa (raw, json)
Hash identifier:          N1Q3dBMYwaqDjq9iMWLA/qB9jtLwuxQGpIWw1E3Vlow=
Subject key identifier:   82:D1:87:C2:38:2C:62:05:67:AF:D2:33:61:4D:66:86:A0:1E:04:A2
Certificate issuer:       /CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
Certificate serial:       26BC46192138AAC80FC8D84A3F320EF6582FEF87
Authority key identifier: 6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa
Signing time:             Wed 08 Apr 2026 15:30:47 +0000
ROA not before:           Wed 08 Apr 2026 15:25:47 +0000
ROA not after:            Wed 07 Apr 2027 15:30:47 +0000
asID:                     263518
IP address blocks:        168.197.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bc:46:19:21:38:aa:c8:0f:c8:d8:4a:3f:32:0e:f6:58:2f:ef:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
        Validity
            Not Before: Apr  8 15:25:47 2026 GMT
            Not After : Apr  7 15:30:47 2027 GMT
        Subject: CN=82D187C2382C620567AFD233614D6686A01E04A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:56:2e:11:a9:0d:8c:1f:e0:18:8c:7c:41:
                    5c:45:bb:eb:49:8b:82:2a:18:f4:20:22:f6:7e:fc:
                    c7:ca:9f:97:fd:54:b4:6f:41:7b:bd:12:95:c4:d9:
                    d7:76:15:ad:98:56:ee:f5:5b:86:32:4e:a3:82:b2:
                    d4:69:71:07:a2:06:8d:4f:8b:34:27:a1:74:bf:0b:
                    43:05:83:dc:1e:35:21:60:a8:2b:a3:6c:6a:a7:5a:
                    b7:a4:90:1d:b6:93:bc:11:6c:86:46:6f:49:5a:70:
                    6a:8b:26:37:9c:46:87:0a:e1:35:cf:bd:43:10:4e:
                    87:79:4f:d9:cd:b1:02:ec:ce:03:96:8a:7a:51:74:
                    3d:74:cd:f1:0d:51:8a:9f:1d:c0:c0:04:50:88:b2:
                    e2:32:17:47:0f:c9:b6:6f:08:fd:9d:07:e2:69:ca:
                    63:3f:65:c9:7a:e4:4c:68:c9:d6:8a:e7:a7:71:66:
                    c9:28:24:0e:f1:e5:b6:12:ae:79:ee:c6:90:e9:b9:
                    1f:21:26:64:cf:e3:ae:86:e9:ba:26:28:04:02:64:
                    97:af:81:cc:25:8c:57:cf:11:40:12:42:57:d4:33:
                    f2:7a:87:ee:06:eb:af:ce:05:0a:b7:08:1b:e0:c5:
                    e5:34:bc:3d:78:b8:ba:c9:09:ed:30:a2:c1:a0:c1:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D1:87:C2:38:2C:62:05:67:AF:D2:33:61:4D:66:86:A0:1E:04:A2
            X509v3 Authority Key Identifier:
                keyid:6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38342e302f32322d3232203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:02:93:38:d4:3a:d8:82:8a:2d:d6:e3:bd:62:3b:38:65:20:
         b7:73:1a:8b:b5:e5:6c:bd:f5:47:ac:a6:bb:a0:6d:c1:2c:f1:
         d2:1d:d8:b8:f6:54:d1:8b:dd:ce:a1:f4:93:81:61:fe:0d:0d:
         f8:97:06:b8:cf:f1:45:c0:9a:1c:c8:ab:e7:51:32:55:00:98:
         82:5d:1c:7b:d7:58:07:08:8e:fa:a5:4e:95:21:48:8d:40:ac:
         5e:80:4b:8c:4f:2d:3f:1e:68:1b:6c:40:77:1c:4b:7b:af:d9:
         78:6c:3f:69:a6:a8:7b:8a:89:d4:ae:8c:90:a4:02:88:c2:3c:
         14:6b:a6:83:b7:15:28:7c:40:8c:65:72:da:ff:f4:bd:7f:46:
         56:09:15:f2:b6:37:f9:f5:9f:97:55:da:af:8e:00:4f:03:dd:
         50:8d:34:33:4b:ff:ed:1d:52:84:44:37:d0:fb:c7:cf:d4:9c:
         9f:0f:59:d5:94:cf:f6:f2:fc:93:53:c5:9c:cc:0b:aa:09:0a:
         d2:38:e1:ef:bf:c4:f5:12:a6:3e:a2:56:4d:20:be:fc:d5:6e:
         a7:af:30:dc:d2:da:0e:4c:1b:c6:61:a6:70:09:03:7f:a4:8a:
         a2:23:be:27:53:14:b7:28:93:1f:e7:44:80:bb:be:b2:8b:46:
         09:30:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:04 2026 by rpki-client