Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa
File:                     3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa (raw, json)
Hash identifier:          9VBLcVXe17JikWKarQQdghQH6bgdJfM6aedE9J310oc=
Subject key identifier:   EC:AC:6B:4C:8C:B6:16:71:17:9E:ED:FD:FE:36:05:2A:1A:89:18:56
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       4EEF064CCA99E347FD9A1EE41323A890394F0223
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa
Signing time:             Mon 09 Mar 2026 15:42:07 +0000
ROA not before:           Mon 09 Mar 2026 15:37:07 +0000
ROA not after:            Mon 08 Mar 2027 15:42:07 +0000
asID:                     265979
IP address blocks:        164.163.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl
                          rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ef:06:4c:ca:99:e3:47:fd:9a:1e:e4:13:23:a8:90:39:4f:02:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: Mar  9 15:37:07 2026 GMT
            Not After : Mar  8 15:42:07 2027 GMT
        Subject: CN=ECAC6B4C8CB61671179EEDFDFE36052A1A891856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:87:5c:7b:13:ab:ca:e1:0e:d0:88:98:df:
                    3f:9d:8c:bf:9a:8c:30:a6:5d:31:7c:95:15:ea:37:
                    20:95:bd:15:82:04:c2:d8:97:8f:31:aa:2e:b6:f1:
                    b0:ee:f5:38:8d:03:a8:45:5b:d2:92:6b:1e:ce:d7:
                    52:38:2a:19:c9:79:01:12:54:84:c0:78:8b:5d:79:
                    09:66:2a:b5:d5:c4:56:eb:bb:ba:c6:93:fb:d1:2b:
                    56:b9:bb:83:b2:b6:f4:04:69:c8:bd:e7:51:3a:c3:
                    64:39:2c:1d:82:06:49:88:5b:7b:9a:af:17:cb:b3:
                    21:0e:1e:0a:99:6e:8a:78:12:82:83:ac:e4:86:7b:
                    28:f8:67:a3:97:46:70:91:c3:f8:1a:b4:cd:ea:94:
                    e4:8a:43:d2:79:55:e0:2b:85:8d:bc:2f:a1:6a:1a:
                    4e:29:2b:87:f8:5e:25:80:95:81:e1:23:c8:90:f2:
                    f8:d0:0a:41:95:52:ee:b8:49:20:87:c4:d0:f8:1d:
                    a0:e0:15:35:3b:64:8f:69:32:80:ee:99:e6:fb:30:
                    f5:ff:52:27:17:0e:5a:1e:b9:e9:ab:51:93:6b:08:
                    a4:2a:64:6a:89:30:c2:db:62:b0:97:07:c3:84:e1:
                    ee:f4:b0:2c:0b:d4:0d:5f:cd:5a:06:6b:d4:c0:ce:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:6B:4C:8C:B6:16:71:17:9E:ED:FD:FE:36:05:2A:1A:89:18:56
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32332d3233203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:69:e3:bc:94:a6:4e:81:f5:f2:3d:c3:f1:19:1e:cd:b3:bf:
         ea:40:d3:ee:a2:54:3f:70:c3:a1:5b:9e:59:38:3f:70:45:7f:
         d7:14:af:09:19:c3:3b:bd:28:c8:3c:11:36:83:1d:f4:b6:72:
         44:31:de:d3:6d:06:d1:37:d7:31:31:03:dd:f1:81:a3:a3:09:
         5b:ef:69:41:af:84:ab:bb:b0:9d:cc:d4:c0:af:3e:2c:32:24:
         f1:11:a5:41:a4:d2:3e:51:f4:a9:28:f5:0d:9c:52:6f:98:2c:
         3c:25:d7:80:d4:87:4d:91:47:d0:e4:51:a2:ff:e9:d4:b3:6c:
         0f:e6:eb:2a:9f:8a:9e:9f:52:28:2e:00:fd:32:d8:10:5a:7e:
         e7:ae:c7:fc:c8:21:e1:c4:a1:c1:88:9d:27:a0:04:cc:eb:b4:
         db:2d:76:b9:6f:9e:c4:74:c6:48:46:fc:5b:0d:99:dc:79:b2:
         b4:63:94:a9:73:16:64:ba:4a:63:da:f5:cf:48:df:c7:60:90:
         7e:ff:89:07:2c:fc:80:8b:e6:cf:e3:33:73:bb:bb:7a:c4:3c:
         37:7d:73:78:9f:4e:01:08:4c:d1:a2:d5:9f:17:bb:d7:50:43:
         07:99:db:dd:1b:9c:96:91:1b:03:7d:cb:62:28:77:00:6e:5e:
         91:26:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:09:26 2026 by rpki-client