Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa
File:                     3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          5SOz3eESZoQwimDGffkh9bRBaEjmY6druBcbBQLKvk0=
Subject key identifier:   22:92:EF:A0:D3:1A:71:DB:64:1C:78:FF:C7:64:86:6C:CF:35:DF:FA
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       1700E2343401DAE6ECE07EAD7F632CEFCD253448
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa
Signing time:             Thu 19 Mar 2026 17:10:03 +0000
ROA not before:           Thu 19 Mar 2026 17:05:03 +0000
ROA not after:            Thu 18 Mar 2027 17:10:03 +0000
asID:                     263980
IP address blocks:        168.227.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 09:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:00:e2:34:34:01:da:e6:ec:e0:7e:ad:7f:63:2c:ef:cd:25:34:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Mar 19 17:05:03 2026 GMT
            Not After : Mar 18 17:10:03 2027 GMT
        Subject: CN=2292EFA0D31A71DB641C78FFC764866CCF35DFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:ac:5a:4e:ff:36:8c:19:1f:cf:34:ce:1a:
                    d2:fa:cf:7f:2d:33:ad:2e:55:6d:6f:84:38:bd:d8:
                    5a:fb:7e:12:00:32:07:a7:3e:b2:6d:39:40:d1:b9:
                    a1:ed:e1:3e:cc:3e:4c:f2:ac:11:de:d3:ac:90:31:
                    c3:20:3e:ff:da:2c:20:b4:6b:1f:99:b4:f4:4b:c5:
                    5c:f3:82:0b:b8:56:a7:9b:be:24:47:0d:5b:a0:f2:
                    12:f7:72:44:3d:dd:de:f5:75:cf:17:47:16:f3:73:
                    61:f0:21:5e:cc:ef:3e:20:f8:f4:be:47:00:99:2b:
                    6d:74:6e:01:d3:22:dd:d7:45:1e:2d:e2:37:54:a8:
                    00:2c:2e:1e:80:47:55:3e:1f:55:88:f6:75:5c:3b:
                    47:92:9c:f9:3f:5c:ff:3d:aa:5e:b6:65:cc:8f:5f:
                    c3:3b:aa:b9:0c:82:28:ff:b9:3e:cd:57:74:c4:48:
                    e1:2d:65:26:ec:59:d4:2b:31:8d:d2:b4:d8:12:13:
                    d9:04:d4:ab:1f:02:53:60:a5:de:a5:07:58:0f:b0:
                    58:a4:bc:4c:b2:c7:d2:29:0e:ba:88:9a:a4:81:ec:
                    e3:5f:d7:55:0d:32:bb:9c:9e:83:45:1f:15:4b:cf:
                    59:60:c3:ec:5f:47:c7:d4:68:e4:28:01:aa:2e:56:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:92:EF:A0:D3:1A:71:DB:64:1C:78:FF:C7:64:86:6C:CF:35:DF:FA
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3136382e3232372e31362e302f32322d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:39:fb:4f:9c:68:d0:1f:a1:88:20:b7:da:c3:15:8c:2c:ad:
         b6:f1:a2:f8:96:f0:66:d4:37:5e:98:38:ac:a6:5a:c9:d8:e0:
         8d:06:6f:64:f3:8d:e6:30:dd:fa:99:29:7e:d7:71:10:77:d4:
         d7:55:ca:87:6d:a1:d4:b3:5b:91:25:00:42:8e:1a:2b:8a:0c:
         ae:c5:de:0f:3a:d3:78:8f:23:ba:b4:99:fe:d4:5e:f4:0a:d5:
         ac:0e:b5:0d:3d:10:57:ab:30:b8:ab:dc:65:6d:6f:d8:df:ad:
         94:29:56:23:af:de:c5:47:a8:9e:85:42:0f:31:3e:7c:f4:bb:
         49:19:2b:1c:c9:47:cb:03:f7:22:62:03:8e:5b:9b:44:7f:30:
         eb:c4:b8:8e:d3:c6:03:e5:07:d5:4d:98:36:19:42:5e:02:f9:
         1b:01:be:dc:7b:fb:fa:22:9a:b9:9e:28:83:40:63:c2:27:92:
         dc:56:2c:de:99:d1:04:23:d9:ed:02:da:71:0a:d2:0c:2b:c7:
         b6:ac:e5:c0:e7:5b:ed:89:8c:80:14:bb:a3:1d:e9:de:9b:75:
         47:27:8b:3e:e8:18:3f:a2:e0:90:6d:5d:0d:c9:2d:23:47:fe:
         e3:cb:1d:7d:54:7e:62:fe:84:b0:0f:2b:98:a9:28:94:e1:40:
         b2:ab:87:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:01:54 2026 by rpki-client