Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa
File:                     3136382e3138312e35362e302f32322d3332203d3e203532393536.roa (raw, json)
Hash identifier:          ut6fa60POg9cfSGFJ8xm0smMZs+QqAsU7VO8vpZEmPo=
Subject key identifier:   8D:9D:81:BC:13:A0:3E:F1:15:5F:2E:86:2A:CF:49:EF:9E:74:0C:A9
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       46B7803454DE9553DE539C2ED033CB994BDA6413
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa
Signing time:             Wed 06 May 2026 16:07:36 +0000
ROA not before:           Wed 06 May 2026 16:02:36 +0000
ROA not after:            Wed 05 May 2027 16:07:36 +0000
asID:                     52956
IP address blocks:        168.181.56.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b7:80:34:54:de:95:53:de:53:9c:2e:d0:33:cb:99:4b:da:64:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: May  6 16:02:36 2026 GMT
            Not After : May  5 16:07:36 2027 GMT
        Subject: CN=8D9D81BC13A03EF1155F2E862ACF49EF9E740CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:83:3e:56:62:25:37:46:70:2e:1d:76:6a:
                    ba:d5:df:da:eb:e4:35:3a:12:93:8d:f5:12:06:94:
                    07:5e:1a:99:3f:e1:36:d3:fa:f9:63:b4:52:8f:36:
                    06:70:f0:fb:68:a5:85:41:87:02:1f:89:49:ae:3f:
                    96:a4:cc:ea:11:4a:6c:c3:97:45:bc:2e:9b:ee:a6:
                    71:47:10:44:4c:4f:0a:a4:17:1f:10:a1:a0:66:1e:
                    87:bf:b9:12:d5:79:df:f5:35:73:9b:3e:9e:9d:b4:
                    1f:20:3b:fb:44:07:33:f4:74:b9:ea:a4:e0:91:77:
                    80:cb:1b:52:16:5c:ea:7a:8b:96:c6:9a:d5:13:29:
                    07:d0:a2:84:cb:f4:df:64:f1:db:77:cd:9b:a7:e8:
                    7f:30:fd:7b:1e:bc:e7:de:8b:9a:e4:72:51:28:17:
                    5f:b4:55:6a:c5:26:f0:31:49:09:cb:54:d4:5b:c3:
                    c8:eb:7d:88:17:58:ab:15:81:ff:08:00:1d:42:a7:
                    9a:55:c4:59:74:3c:43:94:db:74:c2:7b:68:44:93:
                    81:a0:1d:78:1f:b2:39:2d:02:c6:4f:79:1b:26:72:
                    2b:52:83:fd:8c:f6:39:9b:66:63:4b:1a:aa:4f:93:
                    33:10:fa:60:5c:f4:d0:60:e0:a5:97:ca:0d:81:56:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:81:BC:13:A0:3E:F1:15:5F:2E:86:2A:CF:49:EF:9E:74:0C:A9
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3136382e3138312e35362e302f32322d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:07:ae:12:3b:b6:8d:a3:a1:42:aa:0c:56:d7:8c:64:6f:
         02:a5:a4:a5:bf:70:74:86:32:e2:aa:e9:bb:5e:1c:25:91:30:
         af:59:98:11:f2:13:bc:4d:cc:fe:eb:1b:aa:96:a9:7c:ae:63:
         05:23:d6:57:30:83:e7:bd:60:6b:96:6d:bb:be:d4:30:4e:df:
         ca:e4:90:10:fd:20:e0:0c:82:ab:26:f0:91:b1:b3:42:4e:82:
         8c:57:52:57:26:61:9b:ab:33:1f:97:32:c1:00:ea:7d:dc:d8:
         cf:cb:36:3c:88:94:af:86:3b:f5:83:19:84:46:1a:0c:b5:3e:
         27:cc:b4:6c:c8:12:c2:fb:3c:57:29:df:31:7d:1f:3e:71:b3:
         7a:dd:0c:e0:16:05:2a:89:ee:6f:d6:ef:0e:4b:78:0d:0e:e8:
         17:ae:3c:5f:ae:c5:c0:74:af:3a:ba:64:00:86:26:04:1f:36:
         83:31:3b:13:f6:47:d8:0c:54:36:e7:66:a9:8a:b2:87:87:fe:
         ea:21:0b:09:ec:0d:5b:84:32:49:cd:98:24:90:54:d9:6b:14:
         f5:4d:36:7b:bc:3a:dc:e5:f8:b8:07:d2:ac:5c:17:63:7d:3c:
         72:8b:85:9c:b3:0e:50:f1:3a:f4:77:79:30:2f:ef:35:24:b9:
         37:e6:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:38:54 2026 by rpki-client