Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa (raw, json)
Hash identifier:          FqKgb9ZbZ0htZs6O/WqlGs2omXtqqsYDPv5O8vCV2vc=
Subject key identifier:   A5:EC:25:82:84:F3:06:34:7E:CE:A8:4C:32:77:21:52:07:F8:8E:71
Certificate issuer:       /CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
Certificate serial:       51179F7DFE4BA7C1EE73E4057E035DFE2EB03DD6
Authority key identifier: 92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa
Signing time:             Mon 30 Mar 2026 18:18:45 +0000
ROA not before:           Mon 30 Mar 2026 18:13:45 +0000
ROA not after:            Mon 29 Mar 2027 18:18:45 +0000
asID:                     265468
IP address blocks:        168.196.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:17:9f:7d:fe:4b:a7:c1:ee:73:e4:05:7e:03:5d:fe:2e:b0:3d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
        Validity
            Not Before: Mar 30 18:13:45 2026 GMT
            Not After : Mar 29 18:18:45 2027 GMT
        Subject: CN=A5EC258284F306347ECEA84C3277215207F88E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:ba:a8:d1:36:9d:7d:4e:15:6c:c8:56:23:
                    2b:a5:71:f9:3e:ff:5d:59:b5:fb:b1:35:94:f1:45:
                    7e:d6:30:a4:03:6c:6c:04:c6:57:95:1e:ae:ab:be:
                    2b:83:14:5f:c4:82:8f:07:54:53:83:d2:f6:65:b3:
                    a9:41:c1:62:ab:e8:1b:f6:6a:e2:59:50:0c:49:4e:
                    8c:2c:e6:df:1e:a0:66:5b:62:c0:5e:9a:c1:78:50:
                    c6:d3:3d:a9:de:6e:fe:96:77:d7:38:02:2b:22:50:
                    bb:50:c1:0f:64:06:f8:59:23:89:14:7b:00:26:52:
                    14:b9:df:fc:9c:09:8f:a1:a9:35:b5:27:8e:43:d6:
                    51:3c:bc:3a:a9:6b:43:a3:fd:bd:15:5b:14:e3:01:
                    df:d6:83:06:29:59:78:24:90:5b:fd:85:03:05:1c:
                    f1:da:da:53:d9:36:b7:93:fc:59:ba:c9:4e:29:75:
                    ca:8a:c9:3b:22:cd:51:1f:a6:7a:e0:a5:5c:6f:c8:
                    2e:d3:fc:bf:4a:37:03:0f:03:1c:81:84:d8:df:8b:
                    ae:18:6a:e4:05:54:d2:91:9a:f8:fe:bb:c4:5d:92:
                    c0:15:16:46:72:a2:02:82:c7:78:51:d9:09:37:ba:
                    3b:b2:02:eb:ff:11:44:44:17:c5:f3:25:a7:44:eb:
                    2f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:25:82:84:F3:06:34:7E:CE:A8:4C:32:77:21:52:07:F8:8E:71
            X509v3 Authority Key Identifier:
                keyid:92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32322d3232203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:08:03:c3:54:78:ee:b3:9c:52:bd:c8:78:4e:83:75:02:2f:
         47:13:58:42:58:f4:b4:bf:ce:7e:68:2d:21:af:73:ce:c8:04:
         c2:ac:cf:03:e6:71:b7:ae:6e:82:d5:ef:23:e6:55:9b:de:f4:
         5a:a3:5b:32:4d:d1:bc:41:ce:e1:25:13:b4:98:99:d6:31:f1:
         b4:54:aa:7f:d4:ff:dc:9c:35:98:ab:dc:66:4c:86:76:7c:91:
         8a:31:dc:1d:6a:a6:fb:42:88:e6:fc:2f:53:27:6d:7d:d4:05:
         10:b4:0d:1d:6a:aa:64:5c:c3:d8:6a:89:a6:68:af:7f:53:d1:
         d5:30:9e:90:21:a9:26:d3:6e:e3:4b:15:ac:fb:8b:12:7e:f7:
         bc:57:8d:c2:60:47:0b:a6:b3:5c:10:ce:02:94:64:1d:54:37:
         32:fc:c0:04:89:72:95:88:8b:7d:ca:36:4f:e4:a8:f7:21:a3:
         6c:f8:2f:2f:5e:46:72:75:62:f4:75:2d:58:f9:2c:11:96:2d:
         2c:d2:18:80:d0:4f:15:da:a8:a4:d5:3d:34:0c:76:db:e1:37:
         97:6f:6c:1a:36:1c:91:74:12:dd:1b:ec:72:54:ea:2c:ed:be:
         42:62:44:a5:36:f1:82:ce:5f:c0:e0:a4:4e:73:dd:4f:0d:c6:
         d6:9e:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:49 2026 by rpki-client