Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
File:                     3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa (raw, json)
Hash identifier:          Y7wWmCKJQWPPPvEuNiGWiJC32jLM3Rj077YoMp/O8rQ=
Subject key identifier:   4E:92:70:C8:88:32:A7:49:F3:51:B3:18:0A:69:F7:C1:DB:F8:1F:BA
Certificate issuer:       /CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
Certificate serial:       534FD1B1390561302A4CD9541A5B2CEDFC5C4208
Authority key identifier: 8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa
Signing time:             Sat 21 Mar 2026 21:20:13 +0000
ROA not before:           Sat 21 Mar 2026 21:15:13 +0000
ROA not after:            Sat 20 Mar 2027 21:20:13 +0000
asID:                     266178
IP address blocks:        192.144.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl
                          rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4f:d1:b1:39:05:61:30:2a:4c:d9:54:1a:5b:2c:ed:fc:5c:42:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90
        Validity
            Not Before: Mar 21 21:15:13 2026 GMT
            Not After : Mar 20 21:20:13 2027 GMT
        Subject: CN=4E9270C88832A749F351B3180A69F7C1DBF81FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:f9:f5:fb:29:97:5d:ef:61:8c:ee:40:6b:
                    f0:cc:49:08:69:f9:0a:57:11:f7:d8:2f:bd:9e:12:
                    d1:ee:9b:e1:d0:9d:e6:09:13:e5:f9:07:f8:54:4e:
                    59:44:57:be:51:c8:c2:e4:42:9b:85:02:22:06:25:
                    9e:f4:d2:9b:7d:fe:a5:ca:dd:15:ec:03:90:a9:64:
                    38:e3:09:d7:d1:7e:fb:6d:71:96:87:7b:43:9c:13:
                    64:53:5b:0f:5a:d0:6d:0c:5a:81:f9:87:f3:34:3c:
                    cc:16:f3:d4:22:dd:e8:a4:5f:71:8d:07:32:d6:a2:
                    fd:0a:95:5f:bf:a1:44:ec:39:a6:7c:59:ab:86:9c:
                    48:b0:ed:21:17:74:3c:8a:93:a4:20:45:65:a4:10:
                    3c:1d:fd:5c:83:bd:87:a3:b8:84:5b:f3:12:71:4f:
                    81:73:7a:ad:d2:5c:d6:f7:62:b3:a5:b2:8e:7e:f3:
                    8b:07:87:03:fb:ed:92:1b:56:fd:85:64:c2:6b:4f:
                    90:62:89:bc:3c:b3:3a:2a:5c:b7:da:7b:ca:ba:85:
                    0f:13:23:e5:fe:eb:4b:f7:b4:e2:a3:8f:bc:79:b0:
                    ad:dc:70:5d:73:3e:34:02:0d:50:67:84:fc:1f:37:
                    bf:96:8d:a6:dc:52:ee:c1:68:25:b4:6f:44:7d:34:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:70:C8:88:32:A7:49:F3:51:B3:18:0A:69:F7:C1:DB:F8:1F:BA
            X509v3 Authority Key Identifier:
                keyid:8B:B2:3F:B0:F3:8F:7C:DE:17:85:2D:C6:1B:D2:34:DC:EB:C3:BB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BB23FB0F38F7CDE17852DC61BD234DCEBC3BB90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31ECeNa6JFrQNNySZguSi82Sz114gA5jRxQYM2Por1qQ/1/3139322e3134342e36342e302f32342d3234203d3e20323636313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:34:df:91:eb:df:04:a2:95:d6:7f:16:bd:95:ac:b2:73:a8:
         7a:87:27:41:76:fe:b1:52:39:8d:c2:16:ef:93:24:60:7b:39:
         2d:29:a6:73:c3:e0:5c:eb:56:1f:5b:35:ca:a0:04:62:a8:4b:
         ed:68:00:45:3f:23:5d:02:4e:63:bc:9c:02:77:21:f0:85:4b:
         2d:16:47:27:39:45:c1:b7:c4:1e:1b:f7:98:c1:3e:2f:ff:b4:
         24:96:c1:8f:40:10:02:a5:46:86:a6:12:c0:ab:2d:0c:f3:d6:
         59:dd:7e:e4:c9:e5:c1:82:5f:59:e4:63:55:50:67:46:aa:43:
         38:e4:35:fc:dc:e8:66:4a:b3:61:f4:53:e0:7e:b8:74:50:30:
         d5:c2:07:a1:ae:d7:c4:22:0a:0e:e6:ba:1b:8a:6d:87:5e:6e:
         ec:21:76:87:e8:b3:d7:4b:99:a7:b6:10:71:24:0e:ea:fa:ea:
         15:b6:ae:17:ea:cf:60:52:11:99:b6:f7:68:e8:d4:e2:17:d2:
         8d:78:63:a7:48:d0:41:f7:83:36:c3:d3:dc:ab:5b:1e:c8:65:
         52:9c:90:05:b6:10:12:1f:d5:8a:15:b9:78:cc:69:63:59:d5:
         72:95:37:88:50:29:28:b0:92:48:a4:87:9f:c5:a6:c1:1a:9c:
         1a:4e:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:37:31 2026 by rpki-client