Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa
File:                     3136382e3139362e342e302f32322d3234203d3e20323634353038.roa (raw, json)
Hash identifier:          Spp7WNW9i/dBZzV5+lh4hjHWGwVkInrnav9272ArTQ0=
Subject key identifier:   C8:7B:E2:2E:03:F5:E6:73:41:60:62:7C:B1:BA:6E:F7:36:7B:40:A4
Certificate issuer:       /CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
Certificate serial:       528892F3A59CEA3D875D1FD6115C5A6AE16FB998
Authority key identifier: E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa
Signing time:             Mon 30 Mar 2026 22:47:54 +0000
ROA not before:           Mon 30 Mar 2026 22:42:54 +0000
ROA not after:            Mon 29 Mar 2027 22:47:54 +0000
asID:                     264508
IP address blocks:        168.196.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl
                          rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 20:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:88:92:f3:a5:9c:ea:3d:87:5d:1f:d6:11:5c:5a:6a:e1:6f:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A
        Validity
            Not Before: Mar 30 22:42:54 2026 GMT
            Not After : Mar 29 22:47:54 2027 GMT
        Subject: CN=C87BE22E03F5E6734160627CB1BA6EF7367B40A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:a2:02:3b:ae:b4:4d:91:59:ff:27:70:f8:
                    65:1e:f2:12:ef:ed:dc:99:fe:84:83:f1:e9:28:73:
                    88:b6:13:42:80:27:c6:3a:d9:20:2f:d9:fe:18:79:
                    e5:72:2b:c7:92:7a:1d:fa:86:cb:06:1c:35:ad:46:
                    a9:13:38:00:59:05:8a:f9:d4:ba:90:f0:a9:ae:6b:
                    b6:39:ac:7a:2e:97:6c:ed:b0:c4:34:f2:5d:5e:6e:
                    01:ee:5b:4e:f9:af:85:4f:c9:27:0e:76:58:e7:3f:
                    75:1e:78:ef:0d:89:22:7d:d8:b1:26:a0:9a:48:6f:
                    6b:e0:d4:08:9b:bd:84:24:5c:6d:72:3f:98:aa:42:
                    b2:31:20:cf:88:2c:e2:1e:0c:7c:8e:42:ca:a3:5d:
                    52:bc:68:38:ce:cd:53:5f:a3:0d:cd:ab:b6:05:c6:
                    2a:ba:6d:00:33:00:9d:5b:84:bd:ea:2e:e2:ca:c1:
                    29:47:5a:14:19:95:ab:a4:40:dc:ca:8e:a0:b4:3f:
                    d6:5e:67:1b:b4:ab:4d:ef:1b:2c:ac:88:d8:7a:0b:
                    05:03:93:8f:40:de:9d:55:9e:64:52:53:b9:40:82:
                    5d:be:82:8f:d6:ae:22:65:d0:a8:61:44:e7:67:16:
                    1a:17:3a:59:94:39:53:2f:ec:81:55:6d:8e:c3:a4:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:E2:2E:03:F5:E6:73:41:60:62:7C:B1:BA:6E:F7:36:7B:40:A4
            X509v3 Authority Key Identifier:
                keyid:E7:D1:90:A6:B0:6E:0C:CD:D0:31:1C:10:E2:F5:FA:64:61:CC:7D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7D190A6B06E0CCDD0311C10E2F5FA6461CC7D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/SdGCz1A4FjgJw1gQ7592GA25bKoWSP2cVtKEBjXsdtw/0/3136382e3139362e342e302f32322d3234203d3e20323634353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:25:58:8e:98:28:25:8a:08:79:f0:92:b1:ec:da:de:0a:95:
         38:b6:37:8c:f1:78:d4:6f:bb:8b:80:2c:2a:f8:ea:2f:3b:03:
         18:b0:c0:e4:d3:d7:2c:64:d3:f6:4b:4d:a2:0e:4a:96:1b:91:
         8a:fb:7b:9a:7e:81:44:a9:a9:1a:57:70:86:65:63:78:11:5b:
         4a:15:dd:14:9e:76:00:0e:57:37:c4:4e:6c:03:47:ff:b2:e1:
         4a:20:9a:c6:ef:e0:03:43:00:b5:a7:92:25:8b:ab:97:b4:1e:
         30:4d:89:fc:7d:d6:5a:df:f4:dc:2a:bd:ce:91:51:94:27:e1:
         f0:57:d8:65:cb:27:9f:a6:a0:aa:7c:e5:39:31:be:4f:73:a2:
         88:8e:c6:d0:87:76:2d:0a:d5:89:09:0a:4c:3e:20:dd:8c:a6:
         78:6c:e7:6e:8a:5a:68:4f:f4:84:a3:7a:82:bc:1b:e7:e8:df:
         ec:be:99:34:80:df:1e:1b:d7:17:d2:6a:ea:01:c3:09:6f:e8:
         c2:4b:2c:19:1e:57:f9:d1:55:fa:cc:20:26:c6:31:06:7b:f5:
         b3:75:f1:78:ef:8b:e5:b7:cc:3e:30:8f:19:7a:82:be:6f:84:
         11:81:65:bd:ed:a2:1f:2d:53:cd:c3:70:5a:66:07:47:75:bc:
         a4:ba:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:29:45 2026 by rpki-client