Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
File:                     3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          Mu1YGjkmOLtykyczlMWScn7ZdZlFyJWcSqmEN0kmmnQ=
Subject key identifier:   C2:89:79:58:90:4F:40:3A:E7:86:72:2C:56:EF:88:5B:5C:65:48:67
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       49A94E75CE730B0569CE303A440424FB715B5B67
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:12 +0000
ROA not before:           Tue 19 May 2026 12:33:12 +0000
ROA not after:            Tue 18 May 2027 12:38:12 +0000
asID:                     263641
IP address blocks:        168.205.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a9:4e:75:ce:73:0b:05:69:ce:30:3a:44:04:24:fb:71:5b:5b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:12 2026 GMT
            Not After : May 18 12:38:12 2027 GMT
        Subject: CN=C2897958904F403AE786722C56EF885B5C654867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:59:2f:f5:0b:f7:ef:9b:c4:3e:66:28:8d:
                    d6:c1:49:2c:0f:a2:4e:56:77:52:2c:2a:47:80:c0:
                    47:26:b4:21:0d:28:2a:bf:e5:ac:6b:d6:fc:45:3f:
                    8b:36:df:a2:52:60:47:49:33:51:2a:da:69:15:ff:
                    04:aa:06:5e:5a:b6:a3:08:60:dd:29:2e:06:6e:28:
                    ff:40:e3:8b:14:ee:bb:65:6f:8b:25:7f:8a:ba:b7:
                    91:f7:ab:5d:fe:b9:94:d9:c9:38:f8:b5:75:27:32:
                    c5:2f:74:0f:03:fa:79:44:a7:fb:90:4d:28:08:36:
                    6c:1f:06:9d:ba:39:35:ce:28:d1:1d:7b:b2:18:cf:
                    98:0e:f2:3e:6f:38:b6:2a:78:1f:65:a0:9f:b5:72:
                    41:ef:06:d5:82:93:55:31:cb:b9:2f:b7:c4:f3:47:
                    47:f3:ea:03:eb:e0:3a:91:6c:9b:e4:6f:64:d7:a5:
                    93:ab:13:1a:bc:b1:29:0c:d2:d1:7c:37:13:6d:9a:
                    c0:7a:ba:8c:4a:b8:ea:4b:a5:4b:54:5b:ff:cc:96:
                    7a:07:70:5e:6f:0c:37:3b:9a:92:9a:98:07:8a:7e:
                    3c:21:46:2b:0d:c3:22:99:0f:9a:7a:f7:71:8a:a0:
                    6f:77:da:7d:61:b4:71:88:df:5c:d3:ee:de:f3:28:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:89:79:58:90:4F:40:3A:E7:86:72:2C:56:EF:88:5B:5C:65:48:67
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3136382e3230352e36322e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:03:6e:49:7b:e8:62:53:3d:de:7b:3d:9b:75:9b:07:cb:
         5f:c8:a2:2f:97:72:13:71:53:ce:6a:5e:07:a0:9f:83:64:85:
         e5:c9:67:5e:dd:dd:72:0b:a9:7f:7c:9f:bd:56:63:fb:b1:5a:
         3b:2f:41:ce:8d:12:11:ae:da:3d:9e:52:c1:b7:28:aa:6d:e7:
         11:82:90:62:f9:fe:09:0e:de:5c:48:8d:b2:10:fc:6f:11:a2:
         17:81:99:91:32:5f:ff:67:b7:d4:e8:9b:0f:fc:c3:fc:bf:e2:
         13:e4:7c:3e:42:5e:f8:44:9b:56:86:1b:4c:a0:a0:b3:9b:6e:
         ea:48:5b:e9:1f:59:8c:be:0e:fb:d0:44:52:e6:c6:7a:a8:a5:
         b4:e6:f0:0b:55:bd:ba:c2:bb:78:10:1f:8a:78:6b:a6:63:5c:
         75:93:48:cc:3e:37:bf:0a:75:8c:4b:9c:ff:cb:59:a6:26:e9:
         dd:74:78:49:90:12:0d:15:f4:d2:47:ea:78:e8:7a:00:56:ba:
         2a:6f:ab:02:8a:62:5d:61:57:3b:f2:a3:d9:61:43:26:c5:e3:
         e0:7d:51:d4:3a:25:db:76:4a:55:af:5d:cd:2e:90:af:aa:6a:
         fc:0f:09:58:81:9b:c8:66:c1:79:30:b5:da:90:da:70:0f:0b:
         ae:1f:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:30:24 2026 by rpki-client