Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa
File:                     3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          pWBZ+m53HKxPcXKOENCuptpWlX6cZCNtzhBXZaklrgw=
Subject key identifier:   27:F0:63:86:8A:38:48:C7:E9:49:05:48:D2:90:90:B6:2D:1D:8F:37
Certificate issuer:       /CN=9314D53106A385E776432E46329AA22CC6980F59
Certificate serial:       68543B6506FEA3A4CA52C0AB0B4A656076F9B775
Authority key identifier: 93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa
Signing time:             Wed 20 May 2026 17:48:08 +0000
ROA not before:           Wed 20 May 2026 17:43:08 +0000
ROA not after:            Wed 19 May 2027 17:48:08 +0000
asID:                     263656
IP address blocks:        168.197.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:54:3b:65:06:fe:a3:a4:ca:52:c0:ab:0b:4a:65:60:76:f9:b7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9314D53106A385E776432E46329AA22CC6980F59
        Validity
            Not Before: May 20 17:43:08 2026 GMT
            Not After : May 19 17:48:08 2027 GMT
        Subject: CN=27F063868A3848C7E9490548D29090B62D1D8F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:62:5f:b8:b5:cc:e3:b9:b6:9e:59:c3:5c:
                    72:dc:7f:a9:e9:0f:4f:ca:6a:7a:0d:e5:10:1f:05:
                    f2:e0:b6:c5:de:5d:98:92:c3:84:b5:37:8f:f1:bc:
                    53:b4:4c:f5:59:4e:3e:94:69:97:51:2c:80:5a:5d:
                    ca:2d:bb:32:4c:f3:08:ed:54:b1:8a:b8:4e:65:dd:
                    5e:c3:3e:cb:c0:76:b2:db:7e:b7:0f:9a:17:dd:c8:
                    34:a7:b9:5e:f1:74:6a:1f:dd:5a:3e:a7:33:64:a5:
                    ca:cd:dd:b7:96:52:08:a1:de:c3:25:29:f4:7d:ab:
                    41:2f:dd:b7:ab:ac:32:5b:d1:c7:10:1a:4f:8d:d7:
                    1e:72:60:43:d7:ac:63:0c:a9:98:e7:3e:c1:b3:2f:
                    ee:ac:a6:10:83:4b:f0:b1:14:9d:8e:29:01:f1:df:
                    09:cb:42:69:ef:31:f7:7c:d7:c4:6c:79:8e:3a:8f:
                    43:6d:4b:6b:77:ac:85:26:b1:72:30:d3:8d:0d:b0:
                    e7:72:87:46:58:30:47:e2:08:f7:35:4b:24:ab:88:
                    0e:8e:2a:dd:10:69:78:4d:2d:5c:48:41:d5:86:83:
                    84:bd:f8:91:1e:2b:de:8a:18:2f:1e:77:bc:c5:77:
                    88:fc:25:aa:7a:1f:79:25:c4:3b:d3:c0:1f:62:b2:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F0:63:86:8A:38:48:C7:E9:49:05:48:D2:90:90:B6:2D:1D:8F:37
            X509v3 Authority Key Identifier:
                keyid:93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3136382e3139372e37362e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:67:6d:63:35:b5:ad:d6:6f:6e:c3:2a:93:0a:2b:89:8a:b6:
         fb:3e:40:54:72:84:67:a3:0e:87:66:40:a6:15:1e:40:c7:aa:
         86:3b:b1:6f:36:c2:9b:fe:ff:31:44:6b:7f:80:8e:c4:96:59:
         ca:f8:f7:4c:ae:a0:cc:bd:92:0a:ff:d7:27:25:26:64:95:3b:
         f6:7a:cb:05:d6:5b:ac:2a:c0:8a:00:1f:a1:d4:5d:c0:33:6c:
         f8:e5:ea:d3:e3:03:d1:3f:9b:09:f0:f1:1a:46:c7:db:08:f5:
         5f:4c:d2:82:18:b1:3a:5d:32:35:af:eb:e2:e9:8f:a8:47:84:
         a2:42:3e:d3:e3:d8:f0:38:e4:5e:e7:62:50:cf:3c:46:1b:15:
         4e:97:e6:a5:8d:9d:7b:78:d6:b6:6e:d1:d4:f0:8b:34:f0:d4:
         6e:d2:f8:29:4c:3c:69:32:59:e2:8e:20:86:04:70:97:ab:66:
         5f:4b:dd:45:fd:af:e4:79:6c:90:0b:2f:dd:0b:36:01:9d:b4:
         09:bf:9e:ca:d9:9d:61:97:e0:b0:92:bb:25:87:de:c6:bd:c4:
         d7:91:1f:81:51:0a:9c:83:52:4b:1b:68:58:3a:cb:42:ab:a5:
         9b:13:0b:51:8d:89:8d:63:de:48:43:f5:2c:6b:33:4a:c1:91:
         49:72:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:01 2026 by rpki-client