Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa
File:                     3136382e302e3130382e302f32322d3332203d3e20323632373931.roa (raw, json)
Hash identifier:          +0TGYMIcDhl5aLBECUrknisOaOtR3GqNryOkyFS71fE=
Subject key identifier:   33:61:23:D3:75:D8:3D:C4:D7:5F:8D:BE:89:3B:EB:06:C6:FD:DD:66
Certificate issuer:       /CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
Certificate serial:       759B7122FB4050E2F6DD125481D62325BB8E72AC
Authority key identifier: B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa
Signing time:             Mon 23 Mar 2026 18:06:42 +0000
ROA not before:           Mon 23 Mar 2026 18:01:42 +0000
ROA not after:            Mon 22 Mar 2027 18:06:42 +0000
asID:                     262791
IP address blocks:        168.0.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl
                          rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9b:71:22:fb:40:50:e2:f6:dd:12:54:81:d6:23:25:bb:8e:72:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
        Validity
            Not Before: Mar 23 18:01:42 2026 GMT
            Not After : Mar 22 18:06:42 2027 GMT
        Subject: CN=336123D375D83DC4D75F8DBE893BEB06C6FDDD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:9a:24:96:55:ab:28:0a:e2:39:e6:c1:d4:
                    82:b7:5d:e3:fb:db:b6:65:5a:58:5c:30:55:f2:be:
                    f1:a9:04:00:f5:22:3a:ad:e1:05:c9:0b:f3:49:68:
                    62:83:3c:27:ca:ed:23:0d:91:20:9f:a7:01:2f:8b:
                    89:a2:0d:d4:02:e3:ba:72:3f:4e:75:94:08:86:1f:
                    a2:ea:01:f7:07:4c:8b:3f:a4:93:a5:f2:04:1e:29:
                    52:ed:7e:1e:ad:a2:30:05:68:1f:64:16:f7:68:56:
                    da:ea:6e:da:36:4e:82:ad:65:57:19:05:dd:ae:62:
                    50:07:5e:b6:9f:9d:73:19:c5:64:b0:77:ce:67:b6:
                    ee:0e:c9:7f:ad:fa:22:d5:2d:05:e6:2f:0e:e6:8b:
                    d5:7f:6d:f2:54:46:f1:d0:7d:ea:63:0d:60:65:a8:
                    c7:12:a2:4e:32:5f:55:5e:78:51:01:63:7a:f5:45:
                    3e:95:61:9b:86:74:25:7f:13:58:03:07:e6:c5:66:
                    86:4b:cb:c4:0c:d0:31:99:14:e7:1e:84:17:cd:b5:
                    62:d4:9a:94:57:d3:2d:aa:90:0e:86:44:18:91:29:
                    25:7e:b4:c5:6a:d3:6a:e4:66:8a:33:e3:93:15:ec:
                    ff:8c:f2:d4:f1:3f:f4:74:9a:89:32:ff:ce:fa:17:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:61:23:D3:75:D8:3D:C4:D7:5F:8D:BE:89:3B:EB:06:C6:FD:DD:66
            X509v3 Authority Key Identifier:
                keyid:B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3136382e302e3130382e302f32322d3332203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:57:3b:92:d5:b1:72:3a:b3:7b:39:3b:04:4f:34:6c:97:ba:
         dd:cb:2c:e2:92:20:3d:31:c2:54:3b:63:b9:8c:a7:96:2e:8d:
         bc:38:cc:1e:21:9a:76:61:96:fd:7e:77:c4:54:34:c6:0f:40:
         c9:aa:cf:d6:6b:52:a1:85:42:14:f1:ef:0f:17:b0:94:d3:fd:
         05:fa:a0:d6:d3:8e:4b:90:06:83:25:ff:ba:de:c2:a8:19:67:
         25:55:1b:cd:80:82:9e:36:18:3a:8b:ad:53:6c:d3:8c:d1:3b:
         0d:b3:d6:31:e4:e8:27:e8:ae:13:99:6c:4c:26:61:5a:1f:8f:
         e8:13:5d:b5:e1:02:68:03:1b:df:4b:e9:82:35:b0:09:03:ac:
         25:97:19:27:ba:13:38:7f:68:18:9e:fd:a4:29:f1:34:2b:c5:
         70:c8:52:83:4d:b1:76:4b:87:50:aa:61:4b:9c:be:fd:fd:71:
         f7:ef:85:b5:a3:79:fe:28:18:e6:4c:f2:04:83:4f:72:89:f7:
         b3:ca:4d:3a:4a:9b:31:2a:1e:9d:cd:03:fc:97:b8:25:ef:58:
         64:37:32:1e:3e:d5:62:4c:4a:22:a2:86:3a:26:41:4e:2e:cb:
         2f:19:87:59:96:5f:44:4c:18:02:19:28:ce:1b:7f:37:35:70:
         a4:a5:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:24 2026 by rpki-client