Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136372e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136372e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          aQuNN91MVVLr2TnH+bmT6/Ka3bmfxSpVGLdAkB63+9Y=
Subject key identifier:   04:5A:54:15:EF:6F:39:D5:F3:B1:A9:36:47:6C:70:32:21:94:39:BD
Certificate issuer:       /CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
Certificate serial:       3AA245BED32EE4D4DBBB7261CF601B93CF02C065
Authority key identifier: 92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136372e302f32342d3234203d3e20323635343638.roa
Signing time:             Mon 30 Mar 2026 18:18:45 +0000
ROA not before:           Mon 30 Mar 2026 18:13:45 +0000
ROA not after:            Mon 29 Mar 2027 18:18:45 +0000
asID:                     265468
IP address blocks:        168.196.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a2:45:be:d3:2e:e4:d4:db:bb:72:61:cf:60:1b:93:cf:02:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
        Validity
            Not Before: Mar 30 18:13:45 2026 GMT
            Not After : Mar 29 18:18:45 2027 GMT
        Subject: CN=045A5415EF6F39D5F3B1A936476C7032219439BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:9d:d5:1e:c2:5b:73:88:1a:83:09:65:2e:
                    16:05:ed:16:a7:f0:cf:8c:db:85:7a:0c:1e:55:49:
                    1e:f4:a0:23:cd:e9:51:f1:9c:39:9a:9d:d4:5e:88:
                    77:b5:2b:f2:f8:d4:9e:31:03:ac:f6:33:70:b9:d9:
                    dd:56:a0:f6:5a:3f:12:ae:e8:87:83:ad:9d:c9:b1:
                    bf:dc:59:55:e8:5d:58:cd:72:50:a5:c4:cd:be:76:
                    0a:42:e1:2d:61:e9:ed:57:46:57:fd:6c:07:a8:35:
                    9c:f3:53:c8:7d:f0:41:cc:04:a1:49:26:fa:fe:03:
                    60:a0:6c:74:34:c6:53:56:a6:03:fa:b0:e0:5a:c6:
                    a2:53:43:6d:8a:f5:5c:b5:32:db:0b:e1:00:5d:b5:
                    bc:cf:92:ad:dc:47:cd:04:6c:c3:41:8f:22:21:2b:
                    01:14:8c:23:1a:f6:dd:e9:62:df:ed:38:c1:ef:3c:
                    49:17:f8:50:6d:da:d1:a7:a2:34:2b:89:26:c0:ea:
                    71:c6:60:77:ed:bc:13:e8:d3:2b:d5:f4:23:32:ca:
                    09:2a:e7:7b:db:ba:bd:eb:cc:40:1a:96:8b:b6:79:
                    5e:ea:63:0b:3b:96:bc:2e:8f:c6:8a:d0:f9:5f:5b:
                    28:7b:a5:e6:8d:a9:0a:fb:b6:f5:e1:b7:a4:68:54:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:54:15:EF:6F:39:D5:F3:B1:A9:36:47:6C:70:32:21:94:39:BD
            X509v3 Authority Key Identifier:
                keyid:92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136372e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f1:d1:d4:31:d4:09:ee:6e:1d:ef:3e:5d:76:cc:b9:b9:4c:0e:
         3a:77:3e:cd:70:a5:b8:ed:1a:08:ae:3d:cf:d3:55:fb:24:83:
         b1:dc:1c:21:59:ce:52:95:a7:1a:ab:5c:c2:1a:ee:53:e3:ca:
         0a:c6:97:9b:24:0f:8c:6b:98:6f:00:64:e1:70:bb:ac:22:30:
         2a:0e:11:2e:82:6a:3d:13:0b:1a:93:4e:48:a4:1d:36:8f:ae:
         a0:dd:15:96:ce:16:e0:fc:0a:18:6a:3a:8e:49:0c:af:04:9f:
         12:87:53:e6:7d:9f:8f:1c:16:b9:e9:49:60:33:20:b0:10:d9:
         d5:c4:08:7a:ba:2a:3a:a8:aa:0c:2e:3f:05:82:8f:de:07:ec:
         a8:7f:e4:e4:8a:e1:59:80:8e:4c:67:fd:43:23:67:8e:81:0f:
         03:5a:c3:5c:36:30:93:fa:ac:c2:11:d8:b8:73:69:69:80:2c:
         0b:14:d2:ac:91:c4:de:25:a5:51:c2:2f:72:5d:18:c6:f1:35:
         c5:65:ee:ea:a2:a4:6d:72:76:cb:87:30:5c:5a:ec:c2:8a:65:
         a7:25:b9:95:8f:57:8d:48:f6:60:fa:3b:69:dd:df:18:c6:c0:
         9f:69:31:77:c8:bc:36:fd:47:d6:56:8b:8d:ee:ec:8a:cd:1a:
         49:18:af:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 12:52:43 2026 by rpki-client