Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/3136382e39302e3231362e302f32332d3233203d3e20323635323936.roa
File:                     3136382e39302e3231362e302f32332d3233203d3e20323635323936.roa (raw, json)
Hash identifier:          SGbXudjZdSorTdYtGXBlSQ0sk0a8o0KR3sVcAN8Kz6s=
Subject key identifier:   20:24:52:BF:FF:5E:65:36:E6:45:F2:EA:39:6A:DE:7C:8F:72:38:90
Certificate issuer:       /CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
Certificate serial:       2CFAEE85D6D89F2C4C951E2CC0411C009D0443D2
Authority key identifier: 45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/3136382e39302e3231362e302f32332d3233203d3e20323635323936.roa
Signing time:             Tue 03 Mar 2026 13:17:39 +0000
ROA not before:           Tue 03 Mar 2026 13:12:39 +0000
ROA not after:            Tue 02 Mar 2027 13:17:39 +0000
asID:                     265296
IP address blocks:        168.90.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl
                          rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:fa:ee:85:d6:d8:9f:2c:4c:95:1e:2c:c0:41:1c:00:9d:04:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4558F98135571FEE633FDB904DA7FA506AF85CEA
        Validity
            Not Before: Mar  3 13:12:39 2026 GMT
            Not After : Mar  2 13:17:39 2027 GMT
        Subject: CN=202452BFFF5E6536E645F2EA396ADE7C8F723890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:61:af:9b:22:02:f8:d7:b4:79:08:9c:b8:
                    1e:68:81:f2:29:db:e4:70:a9:96:5e:a0:c2:3f:5a:
                    41:a3:d3:a1:ac:fc:6d:df:7c:b9:87:17:21:a7:69:
                    49:31:18:3c:5e:c1:f4:2f:56:c7:ec:69:52:73:a8:
                    35:2d:47:91:7f:82:6b:b8:4e:aa:07:2a:a2:9a:07:
                    2d:8f:02:c3:29:5d:f5:a6:59:35:06:c7:bc:db:f3:
                    48:3c:90:44:54:87:f3:57:f1:ce:52:0f:e0:10:99:
                    cd:1f:69:a3:58:2a:ef:56:f9:14:a2:92:96:11:8f:
                    fc:04:1e:0b:06:46:e0:98:2b:ed:33:94:00:3b:21:
                    be:6d:e1:5a:ba:48:07:20:71:52:aa:94:63:b3:09:
                    2e:36:c4:99:ac:f4:ca:07:aa:fc:1e:0a:17:39:4e:
                    c3:19:22:cc:24:74:59:e4:12:f2:b9:e8:86:ed:fa:
                    16:34:6e:ec:6c:32:ca:ff:40:8c:76:c8:64:04:5d:
                    95:f9:4e:af:b0:00:1c:e4:70:5e:d4:b7:2e:ad:20:
                    8c:77:89:37:32:d8:dd:be:83:cd:cc:5b:ee:ec:3f:
                    4a:a4:37:5f:54:75:8c:b1:aa:6d:4e:94:71:9d:dd:
                    4b:93:4f:c3:f3:05:54:5f:fe:f4:86:4d:81:61:90:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:52:BF:FF:5E:65:36:E6:45:F2:EA:39:6A:DE:7C:8F:72:38:90
            X509v3 Authority Key Identifier:
                keyid:45:58:F9:81:35:57:1F:EE:63:3F:DB:90:4D:A7:FA:50:6A:F8:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/4558F98135571FEE633FDB904DA7FA506AF85CEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4558F98135571FEE633FDB904DA7FA506AF85CEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZVsvD2oq3MF22vSFDH6PRfXkcwXMQXndYPxD7BQUVm2/0/3136382e39302e3231362e302f32332d3233203d3e20323635323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:b0:6d:1d:31:e1:e0:70:b9:d7:3b:99:e3:3b:dc:1b:5f:
         4c:3a:65:53:d0:37:72:38:e4:8b:b6:07:ee:33:7f:5e:32:47:
         7d:78:36:3a:91:66:53:d5:13:cc:33:f8:de:ea:a0:a4:98:d1:
         92:89:53:ed:24:2e:e8:c3:e4:c6:79:64:fc:a3:92:15:23:d8:
         e5:52:77:56:f4:69:ee:3b:e5:77:85:aa:a0:d4:f8:2f:53:a7:
         e4:e0:d7:d7:68:d8:be:b7:13:94:05:c1:28:3a:0b:b3:64:9c:
         22:f2:58:1e:d5:48:5c:b7:c3:d8:d4:03:90:02:09:c8:05:2b:
         06:8c:66:6a:78:a1:08:06:2d:71:ce:eb:10:ec:e8:24:d2:54:
         05:61:00:0b:57:36:8b:a0:3a:68:69:36:0e:9f:46:63:69:8a:
         8b:c5:23:1c:de:5a:78:f3:1c:cd:fc:72:d7:e3:29:de:5e:ea:
         57:f2:1e:68:ba:66:9f:6c:e0:af:1b:39:66:40:11:56:fd:50:
         6f:fd:82:c3:b4:56:42:f9:28:fe:04:df:a8:90:58:9e:0d:88:
         20:14:0c:07:62:4f:7c:10:6f:ef:18:29:fe:f2:b2:b4:d9:df:
         4f:84:b8:b5:cb:38:95:d6:d9:07:ad:93:20:1b:26:33:31:ac:
         c9:7d:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:40 2026 by rpki-client