Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32342d3234203d3e20323635323331.roa
File:                     3136382e302e39322e302f32342d3234203d3e20323635323331.roa (raw, json)
Hash identifier:          4/CGgG0H4Ta/oGDM9wW76G1wWsi+s9JJSE4lm6LSdTs=
Subject key identifier:   27:04:DE:E4:63:55:30:F7:7A:F8:C3:92:29:75:C3:98:D3:E1:99:02
Certificate issuer:       /CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
Certificate serial:       30F3EFCDA411D333D39D515103DCEFFAE739BD41
Authority key identifier: 9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32342d3234203d3e20323635323331.roa
Signing time:             Thu 09 Apr 2026 17:00:42 +0000
ROA not before:           Thu 09 Apr 2026 16:55:42 +0000
ROA not after:            Thu 08 Apr 2027 17:00:42 +0000
asID:                     265231
IP address blocks:        168.0.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl
                          rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 20:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f3:ef:cd:a4:11:d3:33:d3:9d:51:51:03:dc:ef:fa:e7:39:bd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B68AF6DE45DCE0C211208435684C0BCFD55CC9B
        Validity
            Not Before: Apr  9 16:55:42 2026 GMT
            Not After : Apr  8 17:00:42 2027 GMT
        Subject: CN=2704DEE4635530F77AF8C3922975C398D3E19902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:6c:4b:2a:d3:48:83:5b:d7:23:52:39:68:
                    2a:64:c5:d0:04:fb:4c:31:b8:14:38:e1:3a:99:07:
                    73:a7:b6:f0:d2:be:b4:8e:da:d7:29:82:3b:b0:06:
                    34:61:b5:a6:8d:ca:cc:b5:58:b9:ac:13:3f:d3:f3:
                    c8:8c:94:31:22:22:d1:a6:35:eb:5b:8e:00:98:6c:
                    11:af:b5:ab:61:a5:b3:39:18:87:4d:18:f5:69:57:
                    1d:f4:8c:da:e0:cd:8d:17:d3:48:5d:30:fc:b0:bd:
                    83:f6:b7:0b:22:be:44:ef:3b:1a:e9:24:c4:fe:28:
                    dc:04:9b:41:4a:a2:39:9c:99:4f:74:67:72:f8:a4:
                    65:c2:31:0e:a0:35:e0:d4:c6:1c:c3:6a:c0:60:61:
                    89:c1:5b:26:71:47:0b:8e:84:bd:01:51:7d:fc:c2:
                    04:d2:a2:1e:e2:27:94:4e:56:0e:7b:3f:e3:6f:7e:
                    5f:3a:b7:2c:4f:5b:02:62:3c:46:4d:1f:8d:15:9f:
                    09:c8:6e:3d:0a:f8:50:a5:77:0e:51:dc:fd:06:4f:
                    cb:83:a1:6a:30:d6:cf:03:5a:b1:4c:34:53:a4:00:
                    87:f2:99:1a:6d:ca:50:04:7f:b7:54:86:cb:d9:38:
                    4b:b4:9b:e4:14:3c:fe:f8:67:cd:bd:e6:62:88:38:
                    83:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:04:DE:E4:63:55:30:F7:7A:F8:C3:92:29:75:C3:98:D3:E1:99:02
            X509v3 Authority Key Identifier:
                keyid:9B:68:AF:6D:E4:5D:CE:0C:21:12:08:43:56:84:C0:BC:FD:55:CC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B68AF6DE45DCE0C211208435684C0BCFD55CC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJDYyDr5ce6JLqj3auqfC13Q6jMKncGx1Vnw7usq3jfW/0/3136382e302e39322e302f32342d3234203d3e20323635323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:63:20:07:df:ee:c2:9d:69:4b:dc:a9:c9:13:3f:ee:8c:
         6e:ee:70:ea:1c:36:38:f4:4b:3d:53:44:86:be:4c:0f:fe:ad:
         8f:90:ae:d2:c8:1b:1e:3b:5f:0c:c2:ed:7e:8d:31:38:73:48:
         f3:56:b5:2a:3f:2a:0d:0d:7f:31:b1:00:6b:2e:34:61:60:50:
         19:23:43:d7:98:69:cd:3b:c8:fb:56:fc:b4:3b:d0:aa:af:0f:
         32:73:1e:ee:a8:96:b9:18:ae:13:8c:46:8f:da:97:2b:8a:43:
         4e:ab:d7:27:1c:31:d7:bc:53:f5:f3:a4:c6:f1:b1:50:aa:c6:
         8b:3c:84:9e:e2:d7:6b:b0:ec:7d:7e:55:8d:35:f7:b7:af:80:
         a0:46:0a:83:fd:f9:f6:f6:00:17:b8:50:53:bd:bc:a8:b8:41:
         4a:7d:82:64:76:7d:aa:b0:95:3b:13:72:7f:27:ac:67:d7:9c:
         5a:f0:c3:92:d4:9b:a1:10:f5:08:96:58:dc:3b:d2:61:3b:9b:
         dd:e9:44:d2:9a:fb:54:b5:76:0e:78:bd:0e:62:39:c8:4a:65:
         db:e3:4d:ac:a4:4b:ca:f5:9f:9f:aa:b8:60:91:b6:6f:28:e2:
         d9:cc:c2:5e:7e:4a:92:73:52:e2:ad:1e:b3:51:f6:ae:1b:66:
         35:b2:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 21:42:23 2026 by rpki-client