Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa
File:                     3136382e3232382e382e302f32322d3332203d3e20323634393030.roa (raw, json)
Hash identifier:          itpfrUUbpGHSNewWbf2p5B1XtZoxOwLmbR3Y6G9iFYI=
Subject key identifier:   8A:3B:34:DE:59:A4:26:38:CF:97:88:B1:24:8D:C5:C8:40:3B:1B:90
Certificate issuer:       /CN=B9184DBAB131ECA85F8F91549B3B52C12458AF0C
Certificate serial:       14D3310875B6E439DF17E596C3A18398ABE9591F
Authority key identifier: B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa
Signing time:             Mon 23 Mar 2026 19:03:20 +0000
ROA not before:           Mon 23 Mar 2026 18:58:20 +0000
ROA not after:            Mon 22 Mar 2027 19:03:20 +0000
asID:                     264900
IP address blocks:        168.228.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d3:31:08:75:b6:e4:39:df:17:e5:96:c3:a1:83:98:ab:e9:59:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9184DBAB131ECA85F8F91549B3B52C12458AF0C
        Validity
            Not Before: Mar 23 18:58:20 2026 GMT
            Not After : Mar 22 19:03:20 2027 GMT
        Subject: CN=8A3B34DE59A42638CF9788B1248DC5C8403B1B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:fc:46:94:96:50:44:3d:ce:53:4b:81:c0:
                    27:c3:93:85:06:7b:45:6b:30:c5:f8:4f:a9:80:9a:
                    6d:79:cd:43:7c:a7:7b:ee:f3:19:1a:70:b3:f1:7b:
                    07:52:37:1d:00:d5:17:2e:ec:ea:f6:99:a0:36:67:
                    ce:a1:5b:fa:85:d1:bf:03:e0:4e:77:48:f1:88:9a:
                    ee:af:24:5a:35:c5:a0:dc:bc:b6:75:00:6f:f5:13:
                    d3:bc:44:8f:db:d2:60:0f:40:c2:3b:76:20:ed:5a:
                    e7:da:5b:ef:97:df:c7:9f:64:ca:c1:49:67:09:4d:
                    d0:dc:cd:55:45:9b:d4:57:46:47:f1:c2:c0:7a:ea:
                    21:4c:20:9e:2c:1f:06:60:ce:27:7e:d5:b0:c9:f7:
                    ea:a1:d9:65:1c:b6:95:99:b4:92:7e:c7:07:82:98:
                    09:b4:bc:f8:19:17:79:e1:1a:81:69:0b:39:55:ba:
                    6c:02:7e:d2:8a:33:b7:57:bc:67:88:3d:90:38:6a:
                    59:e3:ee:de:1b:93:cc:2e:24:bf:f2:ff:1a:a0:ab:
                    c8:70:77:df:98:31:e2:f2:1d:70:71:3c:12:4e:41:
                    93:de:73:36:3c:00:39:1f:02:25:ac:46:40:47:06:
                    bc:29:39:74:93:20:08:8d:ae:af:12:4f:eb:5f:04:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:34:DE:59:A4:26:38:CF:97:88:B1:24:8D:C5:C8:40:3B:1B:90
            X509v3 Authority Key Identifier:
                keyid:B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3136382e3232382e382e302f32322d3332203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:46:8d:3a:d6:78:95:b1:a6:43:c2:5c:c8:18:36:98:cb:
         fb:00:2e:8f:35:3f:4b:87:ed:65:60:cd:c2:d8:e8:a8:a3:ea:
         65:c5:db:23:e7:6a:64:93:ee:34:fa:43:50:f1:88:9f:99:eb:
         fd:2d:1d:19:68:72:0c:71:33:39:af:c4:63:3f:64:bb:76:af:
         3a:aa:80:db:c4:99:5d:c3:d2:b0:61:a5:7f:cd:47:00:02:38:
         d7:0f:22:0e:9f:77:7c:51:3c:92:9f:ce:02:14:8e:b9:8e:6d:
         46:77:14:c1:c9:3a:07:3c:c8:68:ff:4b:46:bd:d0:fe:02:c7:
         39:0e:57:bc:53:a4:12:f1:09:d9:21:bf:b5:fe:c0:24:82:33:
         e8:2d:b0:8d:f4:ce:15:36:7c:dc:f6:c4:3d:3c:59:53:57:85:
         12:99:45:4c:27:10:dd:7a:43:4d:3b:d2:1a:43:68:67:92:43:
         69:a0:fd:cf:12:e7:27:60:46:48:f9:46:44:9e:66:cb:3e:71:
         2e:75:34:c9:c1:d5:fb:ec:ea:61:37:89:4c:7e:58:79:18:dd:
         05:ff:d2:34:0b:25:ac:b0:f0:c3:70:8c:7f:04:24:9c:82:81:
         c9:5e:a0:8b:c2:6a:71:0a:e0:fb:d0:35:a5:57:b6:6c:0f:fe:
         f2:de:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:18 2026 by rpki-client