Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa
File:                     3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa (raw, json)
Hash identifier:          MQ02hcdMe+cs6ELfIIeEK2d+GxWcYHSho1HzlA/TyZU=
Subject key identifier:   40:77:35:6C:D1:C4:9B:74:7B:11:E8:CB:96:AD:D1:8E:C4:A8:EE:88
Certificate issuer:       /CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
Certificate serial:       38C752105D12953BDB51BC22244534728A8B6B55
Authority key identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa
Signing time:             Mon 30 Mar 2026 22:47:54 +0000
ROA not before:           Mon 30 Mar 2026 22:42:54 +0000
ROA not after:            Mon 29 Mar 2027 22:47:54 +0000
asID:                     264508
IP address blocks:        167.249.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl
                          rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 20:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:52:10:5d:12:95:3b:db:51:bc:22:24:45:34:72:8a:8b:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
        Validity
            Not Before: Mar 30 22:42:54 2026 GMT
            Not After : Mar 29 22:47:54 2027 GMT
        Subject: CN=4077356CD1C49B747B11E8CB96ADD18EC4A8EE88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:a3:b9:11:6d:ba:b0:60:5f:44:a5:ea:8d:
                    fa:b8:19:17:19:01:c2:d2:a9:51:b0:66:fa:96:53:
                    d9:09:c6:8f:94:f8:3a:8c:53:b3:ea:a0:d6:28:eb:
                    42:34:dd:b1:b5:47:9b:32:ad:21:d2:d2:51:7a:fd:
                    43:e6:ee:a4:95:05:4d:97:87:9c:74:6b:b9:c0:63:
                    7e:d7:e3:51:03:03:97:38:cb:5e:6e:5f:76:b3:78:
                    b5:34:f5:5c:e5:41:01:3d:5c:5a:bd:27:df:64:60:
                    ab:de:46:8d:c5:e8:d0:fc:84:10:9b:94:01:17:72:
                    8b:dc:26:bb:c0:b3:1f:34:a2:6e:78:e8:83:39:e7:
                    b5:a7:f5:04:e2:1c:84:b5:98:91:e4:91:54:55:aa:
                    d6:16:63:7b:f0:3b:17:ff:b7:42:92:75:ea:2c:7c:
                    be:20:cb:a3:a2:36:05:f8:43:22:c0:8c:5a:3e:3a:
                    7c:ba:b6:c1:e5:1d:d8:15:88:b1:cd:40:c8:a6:00:
                    4b:d3:6e:8f:20:87:2b:ff:f3:fd:9a:0b:56:0a:47:
                    62:53:2a:fa:68:2d:c7:9a:77:59:86:01:4b:b4:0e:
                    68:75:11:f9:89:72:a6:56:79:9d:77:a0:b2:c7:29:
                    44:46:f6:a4:f6:cd:3b:a1:d5:cf:e0:a3:de:bf:fd:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:35:6C:D1:C4:9B:74:7B:11:E8:CB:96:AD:D1:8E:C4:A8:EE:88
            X509v3 Authority Key Identifier:
                keyid:E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136372e3234392e36342e302f32322d3234203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:06:a6:d6:1a:11:14:7c:5f:cd:f9:69:cd:bd:14:0a:11:
         31:20:ae:22:93:ee:2b:57:fb:5b:64:69:5f:00:bb:ed:00:96:
         8a:2a:09:6d:fc:fa:bc:e5:31:b9:68:66:d7:0e:7d:16:ec:d4:
         f2:d0:21:d6:89:fe:1e:f8:0a:47:77:8c:0c:39:dc:d9:b7:58:
         5c:07:14:6a:67:4a:d3:98:17:71:83:f9:9b:07:93:b5:07:d5:
         2b:88:60:4e:ee:bb:55:13:85:a9:f7:cd:76:f7:7f:95:f8:c8:
         22:59:f7:a7:79:df:9f:b6:19:52:63:92:99:98:d4:84:74:d4:
         b0:45:4b:62:7f:7a:55:4b:59:84:9f:aa:73:cc:f4:94:bc:99:
         fb:21:7c:e9:a2:45:b2:2d:e1:6c:3d:b6:3b:67:61:f5:39:93:
         ff:ad:f7:67:c2:b9:ff:01:08:5c:09:ea:77:5d:de:8c:9e:bd:
         0e:01:c7:ed:fb:4c:12:14:18:df:b1:10:c1:b5:85:55:7d:da:
         88:7e:51:b4:1c:93:c6:5d:10:28:6f:b7:a1:59:55:b3:e4:70:
         bf:5c:c0:bf:6c:25:e9:2a:06:ef:ef:6a:87:37:8f:e1:dd:12:
         c1:23:6a:ea:e0:ac:f1:df:8a:06:5c:eb:33:23:e2:0a:04:3b:
         a1:ec:33:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:29:42 2026 by rpki-client