Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
File:                     3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          nlmsgBDVTx/tMO3FQUSqKeREUHI+0OYkUA2tP8mrU8w=
Subject key identifier:   67:D8:4A:96:A1:D9:A3:CA:82:96:9A:59:FC:16:73:44:D2:3F:5D:34
Certificate issuer:       /CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
Certificate serial:       28134EFF59B574DFDEF2EBB481F131E0C2708033
Authority key identifier: 6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa
Signing time:             Wed 08 Apr 2026 15:30:48 +0000
ROA not before:           Wed 08 Apr 2026 15:25:48 +0000
ROA not after:            Wed 07 Apr 2027 15:30:48 +0000
asID:                     263518
IP address blocks:        168.197.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:13:4e:ff:59:b5:74:df:de:f2:eb:b4:81:f1:31:e0:c2:70:80:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
        Validity
            Not Before: Apr  8 15:25:48 2026 GMT
            Not After : Apr  7 15:30:48 2027 GMT
        Subject: CN=67D84A96A1D9A3CA82969A59FC167344D23F5D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:eb:d9:72:05:ae:e5:76:1c:60:a2:a3:4e:
                    be:2e:36:1f:93:73:0b:df:5b:45:97:a3:fb:97:c5:
                    4d:64:b4:5a:00:6e:21:b1:19:73:ec:80:fa:14:1d:
                    a5:a0:50:f8:9d:3b:6d:86:4d:c0:b6:58:4c:67:a0:
                    03:b2:ce:79:c5:51:8d:ed:e7:b4:8b:85:14:e1:72:
                    c5:63:f0:c3:ac:c9:8b:a8:33:ef:2d:d4:da:78:7c:
                    44:3c:4f:d6:f7:4a:34:ee:44:83:a6:05:11:52:74:
                    b3:60:61:0f:a9:3a:ac:0f:dd:a2:8e:10:ba:23:46:
                    8d:31:9c:71:c6:da:a8:92:e4:cb:25:c9:64:75:63:
                    c8:e7:a6:95:ce:36:fd:8c:c8:2c:36:58:07:0a:6e:
                    1d:fe:96:bd:21:75:f0:7b:62:a1:ba:92:42:c0:c9:
                    72:48:d4:d3:fb:30:25:50:04:5a:1e:98:c5:0d:7c:
                    e6:b4:0c:84:02:54:73:97:74:8a:ab:b3:08:e2:38:
                    8e:64:f2:40:f3:88:55:94:e2:b5:b7:fc:99:c1:3b:
                    26:77:aa:ba:3f:bd:31:c2:fb:2a:94:aa:c2:29:e4:
                    8c:c8:a3:7f:9f:ef:7a:d6:d3:95:23:9d:37:61:48:
                    c3:98:a6:2f:32:c9:dd:c3:99:78:08:3c:da:29:f5:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D8:4A:96:A1:D9:A3:CA:82:96:9A:59:FC:16:73:44:D2:3F:5D:34
            X509v3 Authority Key Identifier:
                keyid:6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3136382e3139372e38372e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:04:05:d2:28:2b:94:29:4b:4a:15:5c:aa:34:78:2f:84:fb:
         85:c0:7e:ad:9c:8c:98:7d:17:27:36:3a:45:ba:06:24:1f:74:
         6e:d2:5c:a0:48:a5:3c:5b:bf:78:f9:be:ee:91:78:d3:55:fd:
         51:9c:ce:fa:7b:ca:88:35:95:6c:27:68:63:af:7e:3e:b0:64:
         35:13:ac:f5:32:3a:9f:96:4b:40:54:e9:85:bb:c8:67:38:2e:
         d7:37:53:bc:ac:9e:96:42:77:4f:76:16:88:24:f1:0b:43:50:
         78:69:50:65:77:f4:ca:72:aa:dc:5b:6f:78:b4:b0:9c:f1:8e:
         66:5a:ca:8d:bb:64:9b:c7:c6:ab:a4:7a:c3:b9:2e:df:6c:8d:
         e8:e6:2a:90:c7:5a:7b:05:a1:84:be:d8:80:ba:d5:17:71:15:
         4b:b1:8f:15:45:d2:99:fe:70:d0:73:d0:1a:ce:b1:d8:a3:eb:
         8b:d9:f8:b4:e0:6c:84:6e:06:2f:ba:b7:9e:be:0d:dc:7c:c1:
         58:6b:b6:e9:d8:41:d4:ad:bf:63:8f:2f:4d:e4:d6:23:c0:38:
         17:9c:fa:09:7b:09:ae:04:9f:8f:47:93:d7:a3:d4:1b:d5:65:
         49:0d:b0:2b:6a:9d:e6:73:3f:06:d9:b9:46:60:79:4a:58:6b:
         78:63:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:03 2026 by rpki-client