Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa
File:                     3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa (raw, json)
Hash identifier:          rq3y4RttG2L9488tEaSTdDTOZ4sdNc346Zwgnj3dgWA=
Subject key identifier:   6C:5B:4E:5A:AD:25:FD:80:28:20:07:1B:73:8E:28:07:35:66:09:7D
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       4D15E85F5474866C777B4B92031C4AB5C4E1672E
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa
Signing time:             Wed 11 Mar 2026 13:18:16 +0000
ROA not before:           Wed 11 Mar 2026 13:13:16 +0000
ROA not after:            Wed 10 Mar 2027 13:18:16 +0000
asID:                     264939
IP address blocks:        168.228.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 07:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:e8:5f:54:74:86:6c:77:7b:4b:92:03:1c:4a:b5:c4:e1:67:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Mar 11 13:13:16 2026 GMT
            Not After : Mar 10 13:18:16 2027 GMT
        Subject: CN=6C5B4E5AAD25FD802820071B738E28073566097D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:e8:b9:71:54:db:25:43:1f:ae:b5:d6:6a:
                    81:d5:0f:20:00:44:74:55:30:93:da:76:0f:e5:5f:
                    7d:30:5a:79:9c:85:c6:b6:c2:29:ac:c4:c5:b9:fb:
                    ad:30:c7:64:13:6b:f2:fc:05:d4:38:6f:af:0d:c2:
                    bd:04:ae:f0:c8:94:2c:49:64:f1:93:fc:88:8e:6d:
                    13:33:1b:91:e1:85:2d:45:68:ef:b7:ab:69:62:c3:
                    bd:ee:5e:90:bf:74:cd:29:cb:da:32:08:e5:bc:13:
                    53:a6:2e:e6:52:f0:7e:a8:f3:2a:d7:43:00:9b:39:
                    5b:9e:0f:5d:42:eb:ed:31:57:e8:c6:fb:6f:f5:fe:
                    dd:6c:fe:27:1b:d5:6f:07:84:cc:de:8d:50:f6:c5:
                    98:4e:31:d9:71:88:87:f3:53:cc:78:d4:bf:74:b0:
                    7a:c6:61:36:0c:c6:16:10:c4:98:84:7d:8d:86:ae:
                    fb:0f:81:67:78:99:b5:fc:a0:2a:6d:84:b6:fb:22:
                    c9:c3:d8:b6:67:f8:0d:35:ae:1c:2f:e3:13:39:8f:
                    5c:bf:e5:86:9a:35:11:c9:36:57:f4:b4:86:6f:fe:
                    06:3c:80:e7:1a:68:ec:fa:cf:2b:84:0a:f2:d1:58:
                    58:4f:0d:be:0b:a3:0d:53:0c:d3:f4:9e:32:ce:5d:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:4E:5A:AD:25:FD:80:28:20:07:1B:73:8E:28:07:35:66:09:7D
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135342e302f32342d3234203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:62:05:96:b7:a4:46:03:de:03:45:82:b4:6e:13:e7:06:48:
         c0:d5:7c:2a:4e:61:a1:ff:30:b5:db:77:ad:d8:8f:0c:f0:38:
         a6:de:93:7a:c5:aa:38:70:68:ee:5a:93:98:31:27:20:7b:0b:
         11:f0:4b:80:2e:f5:85:ac:32:17:20:cb:99:05:71:58:1b:eb:
         da:70:fa:31:8a:92:72:dd:3a:d4:1b:85:a5:ac:73:b4:51:a5:
         81:b6:56:35:14:05:cc:e4:0a:66:2a:d9:90:ec:75:b2:67:2d:
         e5:b6:6e:37:c8:f1:0c:53:7d:54:b9:67:f2:56:f8:64:65:c1:
         3d:b7:2d:2c:c0:8f:f1:28:9c:22:d0:e3:2e:cf:14:da:39:a3:
         88:27:ee:6b:88:d0:a1:7e:85:ac:ef:b1:73:8b:3d:c2:6c:59:
         36:66:3d:c4:c2:e4:b3:e7:0e:b1:18:2b:3a:12:c9:11:f6:bf:
         c6:45:7a:f4:9b:34:4d:fe:b1:68:a9:f0:b2:cd:8f:a1:26:a7:
         c4:e9:8f:7d:45:c6:57:c7:97:fe:b2:d2:a9:19:e7:23:99:cc:
         e8:56:b9:8c:e8:e0:38:7d:4a:19:d3:50:aa:8e:79:ed:1e:86:
         33:45:f8:4b:8e:d8:c9:94:cf:c5:28:74:9a:7d:2e:37:fb:21:
         e9:8e:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:35:46 2026 by rpki-client