Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235342e302f32332d3233203d3e20323635393739.roa
File:                     3136342e3136332e3235342e302f32332d3233203d3e20323635393739.roa (raw, json)
Hash identifier:          ICvNapKQkxDn/PETWyzql3Dn1CEcNkCCeqgHluQ0/Mc=
Subject key identifier:   3F:14:C1:CF:BB:4D:EB:27:A4:B8:B1:DD:45:F2:55:00:C8:73:D2:8A
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       66475409C6C016550C90685DC0CC3FADE01E1590
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235342e302f32332d3233203d3e20323635393739.roa
Signing time:             Mon 09 Mar 2026 15:42:07 +0000
ROA not before:           Mon 09 Mar 2026 15:37:07 +0000
ROA not after:            Mon 08 Mar 2027 15:42:07 +0000
asID:                     265979
IP address blocks:        164.163.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl
                          rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 18:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:47:54:09:c6:c0:16:55:0c:90:68:5d:c0:cc:3f:ad:e0:1e:15:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: Mar  9 15:37:07 2026 GMT
            Not After : Mar  8 15:42:07 2027 GMT
        Subject: CN=3F14C1CFBB4DEB27A4B8B1DD45F25500C873D28A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8a:2d:bc:7f:76:5f:35:be:05:1d:65:00:7b:
                    29:11:de:28:ff:64:99:54:7b:64:33:6f:b2:30:58:
                    43:06:f5:63:9c:aa:a3:20:ba:a2:23:1d:e0:30:1b:
                    7c:9f:b6:ec:11:06:1d:07:b3:c8:13:34:cf:2b:1c:
                    28:5e:57:21:24:07:8b:61:da:4b:a1:0d:19:55:d6:
                    e0:da:c8:db:df:b6:0f:97:ca:64:4f:58:29:aa:8b:
                    42:ca:28:f9:8e:99:c2:52:8e:f0:a0:b5:13:4c:14:
                    c5:05:c9:c9:05:bb:75:42:3a:ce:87:d9:59:2c:b3:
                    5b:f7:16:19:07:40:2d:a5:fa:e7:6f:7b:5e:96:9a:
                    de:30:71:f8:76:56:28:a5:8f:74:72:5e:18:54:14:
                    d7:60:e9:df:e7:44:d2:47:be:70:2c:bc:29:c1:10:
                    c5:bc:08:02:44:27:56:8e:b5:43:58:c0:80:41:b3:
                    1b:f2:b4:b9:96:5f:6e:a5:bc:d0:a8:d5:30:e4:1f:
                    a9:4b:e2:58:68:ba:2b:ab:e7:a3:a9:f0:6b:b5:1c:
                    6e:b9:59:87:b1:ec:b8:e5:b3:54:0b:ae:8a:2b:1f:
                    f9:16:be:b8:f5:27:f5:65:94:d3:6f:56:1e:9e:89:
                    d4:1a:4c:38:d8:c7:83:a1:1e:8d:9c:cf:c6:e8:42:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:14:C1:CF:BB:4D:EB:27:A4:B8:B1:DD:45:F2:55:00:C8:73:D2:8A
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235342e302f32332d3233203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:98:d3:7a:d7:80:fd:4d:a9:a9:61:83:5d:c3:8f:d7:2f:d4:
         de:53:c8:a2:ea:6b:c0:d6:52:9e:72:ea:ab:c8:56:e8:e9:d2:
         af:e5:d5:b8:68:3c:04:fb:47:d7:99:39:2b:4f:85:73:aa:74:
         9b:10:75:c6:ce:7e:14:20:10:fe:72:6c:0c:f4:7b:aa:2d:62:
         63:78:d1:8d:12:14:4c:0d:f6:c0:9a:57:29:79:e4:fe:1c:31:
         f8:aa:b8:f7:b4:f5:ea:c1:35:e1:c4:b1:a2:51:39:6e:86:ec:
         96:8f:27:fb:1d:13:c2:5c:d4:b0:17:33:b4:a1:6e:3d:6d:11:
         7a:ef:57:22:5d:82:ef:b2:b2:a7:54:f7:51:3c:a4:14:e1:21:
         b1:62:20:3f:3c:69:d4:3e:51:67:0e:eb:50:2e:ed:94:e8:d7:
         c8:6b:95:bf:bc:81:4a:a4:9d:ef:7a:13:eb:41:02:46:93:3a:
         71:27:c4:88:a4:c0:5c:aa:a4:ca:8d:2b:99:44:e8:cf:1b:b9:
         b5:f9:bd:b7:dc:bb:8e:1b:7d:de:64:04:21:eb:38:cd:ad:45:
         cc:7d:74:6e:77:a8:fc:1d:a9:e6:54:dc:1e:2f:70:e3:67:28:
         8a:93:22:4a:85:4e:20:e3:44:db:17:8e:e7:fb:42:3e:c3:02:
         a6:36:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:11:03 2026 by rpki-client