Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa
File:                     3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa (raw, json)
Hash identifier:          k1oaqnNqsQljTunpi9H90BbBNCyCL2jMBqr8N1Tir+4=
Subject key identifier:   6E:30:2E:73:72:7D:40:81:73:2E:7D:87:68:01:FE:3D:2E:38:1B:DF
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       50614267FDB3B3B8DC192A4E1A34E9A8562E89DD
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa
Signing time:             Wed 11 Mar 2026 13:18:17 +0000
ROA not before:           Wed 11 Mar 2026 13:13:17 +0000
ROA not after:            Wed 10 Mar 2027 13:18:17 +0000
asID:                     264939
IP address blocks:        168.228.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:61:42:67:fd:b3:b3:b8:dc:19:2a:4e:1a:34:e9:a8:56:2e:89:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Mar 11 13:13:17 2026 GMT
            Not After : Mar 10 13:18:17 2027 GMT
        Subject: CN=6E302E73727D4081732E7D876801FE3D2E381BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:f3:bd:99:ad:73:1b:ed:5e:b2:67:f2:20:
                    80:03:1d:b6:28:9f:59:72:ba:03:e8:62:28:fb:76:
                    b7:8c:00:3c:a3:34:80:06:26:a6:e6:6b:3c:63:04:
                    49:3d:d6:8a:62:e9:94:a1:13:1c:84:e0:c0:05:8e:
                    fa:f1:99:38:ef:aa:19:66:b4:49:57:75:b0:f3:90:
                    b1:16:c7:9b:82:96:5d:e7:07:97:f3:bf:e6:e5:7b:
                    00:b6:7e:39:a0:e1:60:a7:96:bd:41:eb:12:a4:7b:
                    73:27:e1:f5:98:33:43:f5:2a:5f:d2:ed:07:7a:44:
                    c8:29:63:92:39:1d:20:55:2b:00:e1:18:5c:68:e4:
                    6d:b6:24:a5:40:ba:2c:9e:09:65:bf:08:20:62:bf:
                    bd:e7:dc:18:8c:57:7e:39:63:c1:67:92:ec:ea:0d:
                    e8:d0:ce:86:a4:27:f5:dd:ea:21:a0:24:20:1d:83:
                    03:d2:8a:64:74:42:4f:5c:65:83:6f:7b:6b:66:54:
                    dc:e7:9e:d3:45:56:00:9a:b3:63:0f:38:0b:61:da:
                    0d:b6:02:e5:bd:68:a5:a7:a8:4d:e4:77:20:12:34:
                    f2:36:15:3c:30:11:1d:a7:9b:ec:43:f1:f4:a1:2f:
                    af:a4:e4:2a:b6:06:f0:30:2b:95:a3:a9:cf:a8:4e:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:30:2E:73:72:7D:40:81:73:2E:7D:87:68:01:FE:3D:2E:38:1B:DF
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135332e302f32342d3234203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:18:9f:6c:2d:c6:0d:79:c3:9f:65:c2:a0:cb:cd:45:e1:
         b5:60:88:6d:e6:fa:5f:f0:bf:12:26:ab:6a:75:02:78:93:64:
         95:9a:03:ad:03:1c:5e:1d:29:73:9b:a3:ea:55:25:d0:ee:d4:
         ee:dc:0b:1d:c7:c0:98:f6:14:52:9a:39:7b:a7:08:09:cb:59:
         e8:a3:d1:a8:ef:49:d1:60:55:f7:c5:92:c2:b3:7d:7e:fd:f4:
         d7:1a:f0:e3:30:f3:27:ab:b3:f9:57:45:fb:f1:b5:01:4b:52:
         35:89:21:fc:71:f8:91:00:2c:0e:f8:a5:65:25:b7:6b:7c:e3:
         d6:b0:67:0a:3a:4a:5a:63:17:a2:87:0f:f5:7a:d6:53:94:5a:
         7f:ff:95:95:39:fc:24:f5:0c:d3:7e:a5:a9:a2:1e:c1:d6:62:
         79:94:c7:6d:9e:6c:94:cd:61:9e:fe:c0:f9:d3:ff:53:19:17:
         0a:19:8e:b4:b8:4f:30:14:f0:f1:32:3d:78:75:1d:2d:f6:b3:
         40:31:84:8f:91:f8:af:9a:0f:4b:04:07:df:b0:8e:62:e3:23:
         1f:51:3c:82:dd:04:4f:8b:57:7a:f6:94:51:bd:bd:ba:c8:54:
         1c:92:7d:22:f4:d3:3f:21:eb:09:37:9c:4f:30:49:02:c9:0a:
         13:9e:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:40:27 2026 by rpki-client