Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/3138362e302e3135312e302f32342d3234203d3e20323730353036.roa
File:                     3138362e302e3135312e302f32342d3234203d3e20323730353036.roa (raw, json)
Hash identifier:          4Hv6ZpTj/mbNYBJMvMo+ug4U4UeVF63vzbkYa/DQWCQ=
Subject key identifier:   DB:EA:5A:9F:43:E3:C0:52:47:DE:62:D3:71:8B:38:61:A5:DC:2E:66
Certificate issuer:       /CN=344CBAFD479EEC6CE6C91F225BD8237949D4CEE9
Certificate serial:       040FF2E5D6A7B36C6FC633D95F976EE70562D299
Authority key identifier: 34:4C:BA:FD:47:9E:EC:6C:E6:C9:1F:22:5B:D8:23:79:49:D4:CE:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/3138362e302e3135312e302f32342d3234203d3e20323730353036.roa
Signing time:             Fri 20 Mar 2026 13:26:02 +0000
ROA not before:           Fri 20 Mar 2026 13:21:02 +0000
ROA not after:            Fri 19 Mar 2027 13:26:02 +0000
asID:                     270506
IP address blocks:        186.0.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.crl
                          rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:f2:e5:d6:a7:b3:6c:6f:c6:33:d9:5f:97:6e:e7:05:62:d2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344CBAFD479EEC6CE6C91F225BD8237949D4CEE9
        Validity
            Not Before: Mar 20 13:21:02 2026 GMT
            Not After : Mar 19 13:26:02 2027 GMT
        Subject: CN=DBEA5A9F43E3C05247DE62D3718B3861A5DC2E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4f:2d:e7:a6:9a:79:8f:ec:23:7a:0f:4a:aa:
                    ac:68:e1:14:53:57:29:1c:09:bb:1a:7c:dc:5a:fa:
                    13:b3:6d:79:11:4d:d8:24:23:12:5c:20:83:bb:85:
                    de:11:d6:71:84:2d:38:86:b4:65:f3:76:48:3a:00:
                    81:63:fd:2a:9a:4e:63:06:00:19:5a:7b:d6:c3:af:
                    16:6b:e6:62:12:be:3f:bf:fc:41:f2:a8:95:48:19:
                    f2:4f:c5:e8:5f:09:17:4c:bd:b5:d6:e1:20:a5:91:
                    4e:61:13:b1:3e:96:c2:dc:19:dd:86:f1:d2:d7:3e:
                    e3:24:04:07:3c:75:65:78:cb:aa:35:bf:7d:e7:69:
                    38:90:ba:98:cc:db:08:c0:c8:2e:be:38:fa:3b:13:
                    f4:47:70:c9:a1:4f:e9:3b:94:9c:87:41:d9:e0:77:
                    5b:2c:1d:7e:ec:4f:00:4e:75:26:08:04:61:3d:1b:
                    28:01:1d:d3:99:ae:e7:a6:c2:f3:fb:46:29:1f:a7:
                    40:27:6b:7f:b7:a0:c0:9b:34:9e:9f:aa:fa:dc:86:
                    97:e1:a0:e5:10:24:81:7d:ac:65:ac:6e:80:3f:2a:
                    1e:1e:e4:c0:9e:5c:cc:39:1c:0f:63:ba:07:1d:01:
                    26:e4:fc:0a:97:45:55:79:95:3e:6e:fc:9a:38:91:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EA:5A:9F:43:E3:C0:52:47:DE:62:D3:71:8B:38:61:A5:DC:2E:66
            X509v3 Authority Key Identifier:
                keyid:34:4C:BA:FD:47:9E:EC:6C:E6:C9:1F:22:5B:D8:23:79:49:D4:CE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/344CBAFD479EEC6CE6C91F225BD8237949D4CEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xN4FZ8jPBc3nmgFTusRfoMqQedE3DVReZJUdyoFhS3L/0/3138362e302e3135312e302f32342d3234203d3e20323730353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:1a:ab:30:a7:5e:c3:c6:c2:58:10:b3:c1:1c:8b:06:b6:b6:
         9a:09:4d:24:7f:71:8a:d2:af:71:fb:9f:b9:77:a5:8e:b0:9c:
         51:78:66:0f:d2:55:30:85:7a:f0:d7:e5:be:3b:32:f4:05:a5:
         4e:0b:c4:14:2b:e2:66:a1:cc:f1:de:a4:96:91:81:46:10:d5:
         da:31:e7:0a:89:01:69:1a:bf:61:79:73:7b:bd:cf:16:b4:6d:
         04:6a:34:10:91:ac:51:6b:71:7c:1b:2f:a2:66:4f:0c:ea:e0:
         b5:b8:9b:4d:cb:e7:25:b3:11:68:b8:29:b3:e1:68:a5:9b:59:
         24:2b:57:e9:ed:51:ce:fd:fc:ba:01:b7:5d:91:ef:26:07:0d:
         92:fc:81:e1:85:29:58:2f:7d:62:98:e6:bc:30:b9:69:e6:07:
         d3:e5:ae:98:0b:f4:48:ff:e1:33:a8:3a:c6:c5:69:af:47:0d:
         f6:1b:3e:dc:d6:0a:54:cd:52:0b:d9:c6:8b:9b:cf:93:17:82:
         36:b8:86:68:51:3e:dc:19:4b:5e:e9:f5:00:48:71:2d:f4:20:
         f9:77:d6:fa:b5:48:e4:b3:32:1e:4f:ef:7c:a6:4b:7f:69:c9:
         17:8e:c4:a1:1f:28:98:df:d5:f3:45:c4:76:e9:dc:b6:0a:99:
         f4:dd:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:33:11 2026 by rpki-client