Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32322d3232203d3e20323633323736.roa
File:                     3136382e39302e3232342e302f32322d3232203d3e20323633323736.roa (raw, json)
Hash identifier:          IcoXqweDn+ix4TScprKhP6JKa6+kutWmOe/+LXb1+aY=
Subject key identifier:   13:5E:2C:C1:5D:83:32:15:B0:68:C8:CA:4C:61:8E:57:45:4C:FB:F4
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       5477051BA20FD44D41DAD8A7825C7802D307FE48
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32322d3232203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:15 +0000
ROA not before:           Fri 10 Jul 2026 14:24:15 +0000
ROA not after:            Fri 09 Jul 2027 14:29:15 +0000
asID:                     263276
IP address blocks:        168.90.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:77:05:1b:a2:0f:d4:4d:41:da:d8:a7:82:5c:78:02:d3:07:fe:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:15 2026 GMT
            Not After : Jul  9 14:29:15 2027 GMT
        Subject: CN=135E2CC15D833215B068C8CA4C618E57454CFBF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:2b:5e:d7:50:fc:c3:be:c9:01:6b:0b:65:
                    db:00:0f:fa:3d:f9:46:94:77:2c:2c:73:0d:db:74:
                    8e:32:f2:67:22:39:32:2c:7c:56:c2:d9:a3:2a:c3:
                    e1:ce:0a:bd:02:5c:62:dc:20:fe:96:2b:24:95:eb:
                    6b:7f:1f:8b:e7:f8:4e:2e:82:4b:2e:1d:82:78:c5:
                    6b:5d:45:77:8f:7b:32:3d:eb:2f:65:d7:e1:4f:c3:
                    3c:01:9f:f1:b4:b3:13:48:5c:99:e1:6c:3f:97:53:
                    37:61:5d:7b:83:06:60:a1:4f:b7:05:7c:03:02:02:
                    5b:97:57:39:12:29:24:da:ea:e4:02:f3:58:49:15:
                    b7:9e:89:95:f3:b2:0b:d9:02:87:99:1c:41:d0:1a:
                    02:c1:e8:be:4c:a9:53:04:4e:6a:61:b0:23:9d:51:
                    64:bb:ba:57:84:d7:1b:d3:21:b1:04:0a:d0:cf:2b:
                    9b:ab:3c:fc:0c:27:1a:4a:1b:cc:80:29:9e:02:89:
                    c6:ab:98:8a:b9:87:06:9d:f7:60:72:4c:da:24:f0:
                    2c:70:10:34:2d:95:fe:55:c7:08:06:f3:5e:3e:91:
                    21:03:4f:16:76:6e:48:44:18:c0:72:10:c7:ba:b6:
                    97:7d:eb:f3:6b:31:6f:d2:d4:9a:ba:4e:5f:16:79:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:2C:C1:5D:83:32:15:B0:68:C8:CA:4C:61:8E:57:45:4C:FB:F4
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232342e302f32322d3232203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:e2:63:cd:50:8c:81:c3:a6:99:e4:ef:a9:5b:8c:87:f7:
         e4:66:76:da:a1:a2:ba:99:09:fc:08:b0:75:62:77:fa:fe:86:
         c7:bb:8b:a4:fc:17:2b:ac:34:e6:eb:0f:2a:89:13:70:04:aa:
         05:11:e1:dd:66:da:98:25:8f:29:54:ce:5c:31:2e:c3:e4:f4:
         e1:21:76:a3:7c:2b:4e:43:0f:5d:d0:82:2c:73:cc:23:ea:d5:
         0c:2a:1b:f7:a4:62:23:e7:ce:ca:4b:cd:36:36:b8:9a:fc:5f:
         63:f2:9b:72:65:46:ec:ac:20:ae:eb:93:28:75:71:f1:46:da:
         d8:a4:5e:5b:ed:05:53:c9:ee:b8:65:31:63:45:4d:cb:78:eb:
         23:cf:45:e9:b0:05:b2:34:f7:fc:a2:e1:79:31:37:67:ad:c5:
         b4:0a:c5:ff:9c:5a:7b:7f:22:6a:10:e9:d6:c5:d6:5a:3f:ec:
         52:2d:98:d0:0c:47:68:a9:ad:8e:06:34:d9:27:8b:44:c5:61:
         c5:8a:dc:27:44:24:af:09:77:63:c8:68:c2:c7:41:17:c1:1b:
         bf:a3:a9:3d:c4:83:97:f3:b3:3d:96:49:38:85:28:02:45:85:
         24:f8:3e:a0:88:78:28:b3:d8:3d:c6:cf:56:15:f4:95:43:4c:
         2b:fd:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:40 2026 by rpki-client