Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa
File:                     3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa (raw, json)
Hash identifier:          JZiKmnnSzm9lJ5CzrF0TTyNoIpdjjAXq9b9rAhCzgKk=
Subject key identifier:   3F:32:33:F4:75:53:AE:3B:05:CD:D3:C8:48:19:4F:74:64:96:2A:90
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       54007414F77C25267491CD6A5A45F6087C45959D
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa
Signing time:             Thu 07 May 2026 18:01:18 +0000
ROA not before:           Thu 07 May 2026 17:56:18 +0000
ROA not after:            Thu 06 May 2027 18:01:18 +0000
asID:                     265281
IP address blocks:        168.90.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:00:74:14:f7:7c:25:26:74:91:cd:6a:5a:45:f6:08:7c:45:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: May  7 17:56:18 2026 GMT
            Not After : May  6 18:01:18 2027 GMT
        Subject: CN=3F3233F47553AE3B05CDD3C848194F7464962A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:63:d5:c0:0f:59:c2:0f:3e:8a:64:41:a6:
                    4c:94:93:27:f5:d0:24:ef:48:18:c0:38:83:40:0b:
                    1b:fd:a1:a4:e5:27:bc:76:4b:9e:36:6e:1a:14:ed:
                    7d:f0:35:14:3d:97:7d:fa:c0:8c:fa:26:60:42:af:
                    e2:a4:41:db:16:98:7d:02:19:9c:40:c7:12:f9:bb:
                    53:7e:1c:6e:11:5f:3c:be:dc:a1:0c:00:3d:1a:8c:
                    6d:b9:22:b0:8a:82:20:5d:30:f8:ff:b1:10:69:ac:
                    33:1b:42:8e:8c:b5:67:67:4a:c5:d3:46:b9:60:9a:
                    5d:e4:90:fd:df:97:07:2a:a8:ad:81:00:d9:52:a6:
                    50:a1:27:67:a2:16:df:54:cb:89:fa:33:38:83:4a:
                    63:fc:b6:70:0c:94:e3:30:fb:dc:de:0c:ef:07:cb:
                    fb:18:22:f1:64:20:4e:ee:a8:3e:d9:4d:ff:a2:d3:
                    e4:58:5c:d4:8a:2d:c1:73:07:55:df:a4:7f:79:61:
                    df:37:a9:af:8d:e5:1f:b3:53:38:4c:91:9c:e2:b2:
                    81:eb:18:71:8f:2b:13:98:22:ad:97:c0:87:9a:cd:
                    ae:cc:0e:7e:2e:20:84:28:e2:12:82:01:70:7f:7d:
                    9e:bf:a5:3a:09:c3:a8:f2:20:34:20:99:e0:3a:b1:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:33:F4:75:53:AE:3B:05:CD:D3:C8:48:19:4F:74:64:96:2A:90
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/3136382e39302e3139322e302f32342d3234203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:10:e3:2b:70:5f:e1:7f:75:90:2a:be:a9:3f:f3:00:d5:d4:
         f5:17:95:e4:14:7f:57:52:e4:55:b3:b3:ee:61:92:0c:6a:61:
         22:23:6f:d7:70:8c:51:27:7e:54:75:be:be:b2:34:eb:3c:d0:
         05:14:44:e1:9f:3a:63:35:32:37:7f:05:75:bc:33:51:00:0a:
         27:e4:e5:f5:dd:b3:92:98:f5:1b:3e:1b:dd:b3:8f:b7:df:35:
         5a:d2:36:a8:9e:d9:87:38:e9:b5:62:4f:40:03:a8:48:3b:00:
         9c:99:fb:90:f1:1e:4c:fa:b2:ac:70:3a:c9:31:c5:d5:05:d6:
         d7:85:4d:60:de:34:d8:a8:44:7a:2c:0e:75:9c:cd:3e:2a:23:
         83:f9:10:1d:44:bd:95:f4:5b:e8:71:47:90:4f:0d:a5:ab:a8:
         c9:a2:d1:26:3e:7a:18:f3:15:23:9c:17:3e:13:c1:40:8b:2e:
         c0:46:c1:24:11:2c:37:68:49:21:96:23:e2:ad:a3:95:17:7e:
         27:c0:96:6c:7f:dc:2a:e9:ef:47:1c:d4:e7:fe:30:b5:d7:6d:
         3a:00:0f:3b:09:1f:33:07:b5:22:dc:f3:a0:4c:cc:c9:8d:ab:
         41:17:77:d6:6e:65:8c:b0:39:96:8b:18:c5:64:4c:72:b7:8d:
         31:3d:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:06:47 2026 by rpki-client