Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa
File:                     3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          ai09cEWEIDSaLPd5itCAO9xDz8okbPyQF+4OUn/5qq4=
Subject key identifier:   39:AA:36:13:60:48:B7:8C:1E:A9:71:F9:49:5E:19:D0:31:C4:68:95
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       5785CC72758BB1C984711BCECFFCF34E437D7D14
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:09 +0000
ROA not before:           Tue 19 May 2026 12:33:09 +0000
ROA not after:            Tue 18 May 2027 12:38:09 +0000
asID:                     263641
IP address blocks:        168.205.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 18:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:85:cc:72:75:8b:b1:c9:84:71:1b:ce:cf:fc:f3:4e:43:7d:7d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:09 2026 GMT
            Not After : May 18 12:38:09 2027 GMT
        Subject: CN=39AA36136048B78C1EA971F9495E19D031C46895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:94:e2:c9:32:90:ba:ea:c0:61:63:dd:9c:
                    ce:a7:15:f1:74:88:b2:27:c3:b7:e0:bf:53:10:a1:
                    0f:85:2a:0f:86:cd:d4:20:14:ba:97:7f:25:d9:1c:
                    02:6a:53:ee:0e:5c:3d:fc:4d:a1:b7:cd:61:11:49:
                    73:7e:b0:72:fc:88:71:ce:a6:f7:ff:ba:ee:9e:cb:
                    60:5f:78:86:83:44:53:18:05:3a:d7:14:cc:2d:68:
                    76:69:45:76:9c:35:1c:92:2d:ea:48:91:5d:af:3c:
                    4c:22:7e:49:53:68:6a:5c:9b:a8:bf:6c:fa:19:f6:
                    a4:61:c4:cd:d7:b1:f4:34:10:54:f0:33:da:7a:d1:
                    43:41:44:93:17:07:fe:07:c4:49:76:78:24:37:9c:
                    31:14:f4:89:f1:f3:f1:d3:1b:2e:c8:d8:c5:4c:0e:
                    c4:7c:3e:1f:3d:df:f4:18:88:f1:22:6e:57:18:05:
                    b5:10:f6:f3:21:7c:0d:17:bb:7b:af:90:0f:8b:ad:
                    4c:df:b8:eb:82:ac:eb:68:e4:0f:eb:90:a7:c7:a3:
                    ee:9f:51:ba:c3:e9:aa:5a:29:1b:89:27:b5:57:74:
                    11:30:f2:0e:97:20:3f:77:d2:d4:e3:97:f8:5f:07:
                    cc:8e:37:bf:e0:ae:60:57:c1:af:12:24:94:e2:1f:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AA:36:13:60:48:B7:8C:1E:A9:71:F9:49:5E:19:D0:31:C4:68:95
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36312e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:50:1b:9f:02:50:44:fa:26:b1:1e:a3:31:5b:64:11:dd:
         d7:b9:b7:63:62:00:91:3f:a3:25:79:a4:46:b9:9d:c3:f3:3b:
         40:03:01:71:27:55:e2:58:4a:43:a7:ad:ad:71:83:e5:be:e1:
         d0:98:b2:47:61:b9:47:53:11:76:94:a5:00:04:36:e4:8b:fe:
         8d:04:57:de:22:59:45:e7:a9:dc:c7:c1:03:e2:77:52:27:15:
         07:2e:98:80:e6:2e:eb:ab:06:62:08:81:db:ff:fc:4a:38:9e:
         1e:55:58:54:a5:03:73:49:15:e9:af:7d:23:60:63:0c:22:63:
         26:76:3a:8d:d8:88:cf:2f:9c:c2:07:7e:40:e6:bc:43:b5:db:
         23:47:a4:9f:a4:a5:40:4c:56:7b:6d:7e:bd:0e:0b:96:7d:bc:
         64:d9:cc:b1:70:78:01:25:6e:cb:49:75:bd:0a:b3:e1:80:f9:
         aa:f4:29:4c:1e:0a:8e:55:40:28:b6:03:d1:7c:5f:04:23:a9:
         d8:e5:f8:9c:4a:cc:a7:c2:a1:25:14:b0:29:97:3e:0d:f6:fd:
         b6:24:e4:65:4e:2a:77:5f:bb:42:f1:5e:44:e1:cd:4f:5f:08:
         ce:d4:59:ce:bf:60:d6:60:51:bb:01:14:8d:b4:2b:8a:8c:af:
         a3:49:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 18:01:57 2026 by rpki-client