Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa
File:                     3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa (raw, json)
Hash identifier:          oniBtrs0kL0WGvf1ADIywYZozyDF24WTOlGvw3uJa80=
Subject key identifier:   94:F5:3C:DA:4D:5D:F4:C2:09:18:F7:9D:38:E1:91:96:B0:CB:B6:10
Certificate issuer:       /CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
Certificate serial:       0361BE66B8645812D5FE8E5D89500F74C937B605
Authority key identifier: B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa
Signing time:             Mon 23 Mar 2026 18:06:48 +0000
ROA not before:           Mon 23 Mar 2026 18:01:48 +0000
ROA not after:            Mon 22 Mar 2027 18:06:48 +0000
asID:                     262791
IP address blocks:        186.233.192.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl
                          rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:61:be:66:b8:64:58:12:d5:fe:8e:5d:89:50:0f:74:c9:37:b6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45
        Validity
            Not Before: Mar 23 18:01:48 2026 GMT
            Not After : Mar 22 18:06:48 2027 GMT
        Subject: CN=94F53CDA4D5DF4C20918F79D38E19196B0CBB610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:73:38:a8:9f:53:c7:42:17:ca:86:19:ad:
                    81:1a:e4:a1:cf:3f:60:77:b9:fe:af:86:47:1a:38:
                    b6:90:76:a2:40:7e:44:16:d5:e3:1a:51:17:54:9f:
                    15:3b:ed:b1:83:f4:b9:33:53:5b:85:1e:58:a5:44:
                    45:9f:c6:bc:e1:b8:0a:0b:61:f8:e8:2b:24:2f:6b:
                    29:4c:47:9d:4f:78:32:99:98:4a:b0:16:40:05:2b:
                    80:f6:72:00:f6:3c:94:10:1d:b1:dc:20:5b:e8:e1:
                    20:87:9f:42:18:35:76:11:14:32:a6:d1:1d:30:59:
                    df:8a:3a:c3:4d:e0:95:ba:39:46:26:dc:d8:ed:9f:
                    30:1a:d3:c1:af:f5:b1:93:81:5e:61:33:ed:6f:ce:
                    5d:4f:1a:fe:58:5f:e8:f5:74:f8:87:3d:e7:9f:56:
                    14:a0:a3:9a:20:45:ec:ad:be:2c:c4:c7:52:71:2c:
                    46:4f:f3:fa:d3:55:b6:33:50:18:de:26:41:ab:57:
                    3b:87:a3:c4:e3:91:a6:57:e0:3d:ae:0e:2d:cf:c2:
                    04:43:3c:9e:43:ea:46:24:9d:2e:d3:4b:37:13:41:
                    02:13:d8:13:bc:4e:c9:87:a9:38:1c:8e:ac:f8:ca:
                    6c:cb:5e:c0:dc:ab:5e:4d:f0:d9:91:1a:73:9e:bf:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:3C:DA:4D:5D:F4:C2:09:18:F7:9D:38:E1:91:96:B0:CB:B6:10
            X509v3 Authority Key Identifier:
                keyid:B4:C6:D9:C5:D3:16:DB:9E:C1:38:99:C3:8C:CD:C3:13:6A:C1:FD:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4C6D9C5D316DB9EC13899C38CCDC3136AC1FD45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/3138362e3233332e3139322e302f32312d3332203d3e20323632373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:dc:a5:32:0e:2c:bc:99:51:c3:d0:48:2e:ca:1a:2e:6a:88:
         08:d9:3a:00:e7:62:42:93:e6:3a:e0:15:41:ae:de:d8:be:e4:
         de:90:f6:8a:77:e0:48:1a:c5:7b:b7:31:c1:14:fd:18:94:5b:
         18:60:d0:b8:f4:cb:39:c5:71:95:02:1e:a3:07:61:3b:79:e9:
         f2:d2:72:00:69:dc:86:7c:63:bf:ae:69:9e:c0:d4:81:66:e3:
         6f:34:7e:ae:d4:f5:62:5f:ad:35:4d:b2:e2:b4:93:86:84:dc:
         b5:6f:9d:cd:01:9a:23:77:8a:fe:b6:56:53:02:53:75:2e:81:
         39:c4:58:8d:f3:db:e8:70:0d:87:97:8c:df:f2:6f:c0:a8:ef:
         dc:3f:f5:53:b4:27:33:1c:18:b0:94:9c:cb:c8:db:86:8f:3c:
         91:a6:fe:1a:39:c8:30:af:3b:6d:f8:1b:35:a9:3a:88:4d:b1:
         02:a1:5b:9e:2a:29:95:fd:5e:04:2c:58:5c:46:dc:93:c9:ab:
         85:26:56:82:53:ee:21:26:c6:8b:69:16:2b:f3:b9:85:8c:29:
         fa:51:53:f8:fd:35:5e:93:3e:07:8e:23:44:ca:3d:3e:c3:b2:
         11:e3:b0:d4:c3:e6:5e:e9:ed:20:f3:83:b4:bc:c7:f2:27:75:
         83:ab:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:02:21 2026 by rpki-client