Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
File:                     3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa (raw, json)
Hash identifier:          BpXoV2KVW07AZlqBarBWOdwKBd/q8p9bMr+SSqitjvU=
Subject key identifier:   98:39:45:AD:D9:25:5B:F0:32:6C:A1:D0:F7:B5:F8:16:15:F7:EB:3D
Certificate issuer:       /CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
Certificate serial:       10C1944CB97A0E18F3B727CFE2C0410D88B437E8
Authority key identifier: B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa
Signing time:             Tue 10 Mar 2026 11:03:44 +0000
ROA not before:           Tue 10 Mar 2026 10:58:44 +0000
ROA not after:            Tue 09 Mar 2027 11:03:44 +0000
asID:                     264936
IP address blocks:        168.232.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 15:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:94:4c:b9:7a:0e:18:f3:b7:27:cf:e2:c0:41:0d:88:b4:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3
        Validity
            Not Before: Mar 10 10:58:44 2026 GMT
            Not After : Mar  9 11:03:44 2027 GMT
        Subject: CN=983945ADD9255BF0326CA1D0F7B5F81615F7EB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:ed:40:2a:bd:24:c1:90:db:ae:af:56:a6:
                    5b:16:58:9f:53:0b:7d:2d:23:d3:d2:df:44:98:2e:
                    82:0c:27:62:a2:12:7d:28:e7:71:93:08:bc:3e:0c:
                    4b:a7:2e:18:9d:90:95:2c:12:44:f1:f1:c9:36:a4:
                    c3:82:36:ae:2e:3a:17:7d:89:c0:8f:43:37:9e:47:
                    44:07:c9:61:bc:43:9c:f7:22:00:12:29:be:8b:60:
                    9c:70:2c:91:55:25:13:e2:7d:b3:53:a3:01:93:8c:
                    23:09:29:ee:34:08:12:cb:ff:c9:14:3f:b5:a7:3e:
                    b0:a0:41:dc:1d:a2:9b:c0:5e:4d:6d:8c:aa:96:96:
                    ca:59:a1:f7:a5:8a:a8:d0:2c:aa:4e:c7:03:54:0e:
                    3e:44:8e:47:22:4f:4f:fc:1f:ce:92:99:d1:72:88:
                    84:38:e6:be:11:bc:53:e0:17:9d:d9:03:18:cd:2a:
                    f2:98:d6:92:47:78:62:8a:d7:95:ee:e9:ba:1e:2c:
                    d4:a8:c1:11:24:37:9f:b4:9c:95:25:e2:f7:31:5b:
                    86:b8:eb:5e:88:7f:48:09:9c:3b:ba:4c:c7:d5:9a:
                    8e:93:e0:6c:ad:69:bb:7c:d6:3a:75:f6:25:a3:53:
                    02:d6:36:d1:c8:41:5e:f0:1d:1e:3a:bd:ef:0d:80:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:45:AD:D9:25:5B:F0:32:6C:A1:D0:F7:B5:F8:16:15:F7:EB:3D
            X509v3 Authority Key Identifier:
                keyid:B3:B8:F6:2F:D3:5A:D7:5B:ED:6D:EB:D3:23:E8:ED:53:C0:99:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3B8F62FD35AD75BED6DEBD323E8ED53C0990AE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38322e302f32342d3234203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:78:cc:9b:0e:c4:6a:1c:95:8d:ea:34:5d:8e:a2:d3:83:b3:
         99:4c:a7:47:26:f4:82:6d:78:48:f0:48:11:6e:34:63:06:47:
         35:af:bc:55:4a:4d:7d:75:ed:7b:47:5d:44:b6:46:9c:65:0a:
         bf:ae:00:ad:cc:11:2c:29:3a:5d:ff:c1:3f:31:52:3d:02:d6:
         a8:6f:3a:d0:36:27:91:75:de:50:f6:a0:94:88:73:5f:bf:73:
         59:86:2f:87:32:ee:eb:e6:b2:f8:f2:0d:4a:60:f6:29:48:6e:
         a7:3b:94:fe:8f:6a:4c:66:c7:7c:7c:55:fb:3d:0a:b5:7d:c8:
         2d:6e:dc:e5:23:5a:98:cf:95:cf:7c:b2:f0:a7:8a:57:c4:74:
         93:6e:2e:c7:46:03:da:a1:b2:fe:3c:de:00:41:73:12:96:09:
         c2:41:6f:ce:c5:41:0a:52:8a:1f:b2:1a:23:2c:fc:ef:f7:9e:
         41:68:94:c6:b6:cd:e0:fc:8e:1c:77:49:38:96:ff:38:e8:7e:
         4d:21:42:de:d3:64:2f:d4:6f:96:df:26:86:34:38:da:f0:90:
         7f:5a:05:03:0b:8a:c4:a0:41:5e:00:72:6c:43:fd:6b:9c:5b:
         35:d0:ad:9d:45:9d:31:cd:3a:df:0c:87:cf:a0:71:f5:ec:61:
         04:55:93:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:58:43 2026 by rpki-client