Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa
File:                     3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa (raw, json)
Hash identifier:          5RrrkPoo8NknjAW9jNBPXmwc7uZGM/MeOqDtKkQqBo8=
Subject key identifier:   BE:81:6E:7E:09:24:21:F8:87:43:A9:7D:A1:86:E9:DA:28:12:6D:45
Certificate issuer:       /CN=00A0649BEB784D778983813CFFD9D01F42F24C95
Certificate serial:       6C139C90939291612048CE7BAB87AC16439E529D
Authority key identifier: 00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa
Signing time:             Wed 11 Mar 2026 13:18:16 +0000
ROA not before:           Wed 11 Mar 2026 13:13:16 +0000
ROA not after:            Wed 10 Mar 2027 13:18:16 +0000
asID:                     264939
IP address blocks:        168.228.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl
                          rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 06:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:13:9c:90:93:92:91:61:20:48:ce:7b:ab:87:ac:16:43:9e:52:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00A0649BEB784D778983813CFFD9D01F42F24C95
        Validity
            Not Before: Mar 11 13:13:16 2026 GMT
            Not After : Mar 10 13:18:16 2027 GMT
        Subject: CN=BE816E7E092421F88743A97DA186E9DA28126D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:17:69:b7:2f:73:20:65:ce:e5:e2:ad:30:7f:
                    59:a0:d3:a7:77:09:f1:36:b5:ab:35:37:d6:6d:4f:
                    4a:c0:75:ca:f9:03:b4:50:46:38:10:df:85:12:8f:
                    eb:71:8a:33:6a:40:bf:f8:80:fe:8d:ed:69:5e:85:
                    3f:73:4f:6e:ea:be:54:ef:27:4d:f0:1e:f3:9b:f3:
                    58:17:3d:2e:01:43:68:f7:9c:1e:ed:86:d9:2f:25:
                    fc:8c:15:00:06:ac:c2:d5:dd:68:dd:23:72:8d:12:
                    e9:3f:b2:19:35:55:cb:fd:21:be:0a:db:ca:fa:0c:
                    1b:f9:ba:79:28:40:e9:62:3d:4c:11:12:6a:5a:f6:
                    ca:17:fb:39:03:45:78:55:b1:84:c8:95:04:f3:19:
                    22:b0:1d:cf:36:56:8e:70:5c:c4:11:de:bc:1c:2d:
                    aa:83:e7:55:58:09:7b:c6:7e:b3:23:ec:20:f8:23:
                    d1:96:60:e2:92:6a:f7:76:57:24:44:3a:51:da:e0:
                    4e:f5:f3:da:44:db:68:35:03:63:10:a8:ab:9d:e4:
                    56:48:46:e8:57:c5:fe:50:ba:51:b3:c3:31:e6:b7:
                    b1:7a:db:39:97:30:cb:12:8c:68:35:cc:ec:2e:e8:
                    b8:85:61:93:05:6f:35:6a:a8:fe:74:2b:c7:cb:a6:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:6E:7E:09:24:21:F8:87:43:A9:7D:A1:86:E9:DA:28:12:6D:45
            X509v3 Authority Key Identifier:
                keyid:00:A0:64:9B:EB:78:4D:77:89:83:81:3C:FF:D9:D0:1F:42:F2:4C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/00A0649BEB784D778983813CFFD9D01F42F24C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00A0649BEB784D778983813CFFD9D01F42F24C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NzZkbKpGUAxoPYb6UVWApf2hQkKxRRurSBaK1J8EvyW/0/3136382e3232382e3135352e302f32342d3234203d3e20323634393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:f0:8f:99:cb:64:78:bd:e8:09:30:15:ea:af:ca:6a:9c:
         1c:dd:65:57:75:36:87:24:72:0b:6e:2e:3b:a7:86:c6:64:7c:
         66:c3:86:dd:ec:1e:fe:74:f0:da:ef:60:9e:a1:80:d0:c8:1f:
         28:f5:60:6a:71:73:b4:8f:7a:4b:b1:e2:a8:f4:10:19:54:e3:
         27:8a:fb:ef:a0:b2:a2:37:2c:9b:c2:5f:c2:7d:4e:af:13:7b:
         7a:c7:fa:7b:24:a1:0d:19:fe:f3:ef:e1:a4:fd:34:73:7c:b8:
         ad:e0:12:9a:31:f6:7c:fe:df:4f:9f:85:57:e0:3d:e4:4e:c3:
         19:71:9d:1a:56:90:80:1d:63:a0:81:17:06:df:a0:49:d8:f9:
         47:6a:68:07:1a:b8:60:70:33:ec:ba:fd:71:d0:6e:15:68:77:
         7a:c7:b7:68:dc:ff:93:3d:31:6d:71:ad:b3:00:f2:60:c3:55:
         b0:57:b6:0f:a2:40:cc:8d:9f:bb:5a:66:2f:4a:4d:20:80:b5:
         21:2f:23:99:b7:23:85:12:37:b8:e9:71:1b:5c:74:b5:3b:a0:
         ad:de:64:e5:dd:4c:ec:e6:50:80:8e:b3:bc:fe:f1:f0:d3:aa:
         4b:ef:e6:2c:01:30:19:48:85:eb:c0:91:49:6e:f5:8f:bd:70:
         a8:d3:92:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:14:35 2026 by rpki-client