Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
File:                     3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa (raw, json)
Hash identifier:          wKTs7sZF3pBVDmIRRXfL+baQqvfIXoSADJ4deiyk88U=
Subject key identifier:   AB:2F:27:84:39:5C:F0:F1:85:95:B8:05:15:BC:07:9E:E8:6B:0B:D9
Certificate issuer:       /CN=302BDDD6801156430042469F04C7EF5AA97B76B9
Certificate serial:       3473EE5DBB1F4364AD9B3A02E96D4FB73A78F727
Authority key identifier: 30:2B:DD:D6:80:11:56:43:00:42:46:9F:04:C7:EF:5A:A9:7B:76:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/302BDDD6801156430042469F04C7EF5AA97B76B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa
Signing time:             Sun 03 May 2026 18:05:04 +0000
ROA not before:           Sun 03 May 2026 18:00:04 +0000
ROA not after:            Sun 02 May 2027 18:05:04 +0000
asID:                     263145
IP address blocks:        168.205.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302BDDD6801156430042469F04C7EF5AA97B76B9.crl
                          rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302BDDD6801156430042469F04C7EF5AA97B76B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/302BDDD6801156430042469F04C7EF5AA97B76B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:ee:5d:bb:1f:43:64:ad:9b:3a:02:e9:6d:4f:b7:3a:78:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302BDDD6801156430042469F04C7EF5AA97B76B9
        Validity
            Not Before: May  3 18:00:04 2026 GMT
            Not After : May  2 18:05:04 2027 GMT
        Subject: CN=3082010A0282010100B098810292969D8C0AD1343C14F689028089FC5165BEFB28412271ED9AF946BC9DADE08902D8D2D0C0DC24CB93EE7E02E500520255C3D7DD25D0AD83C047D764CE710341D21DED526F8FB0D96A00A5EFBF336566030511E06497D105B326754A1CF3EB13B2B8585D373ED7A5D25B838B797F1919E37AD3F502443C4D959A73AB139A1353E23807C4F4702769E74292A7507AC3467B142AD93F0308B8F5782686DE92DB8429CA14035B6DD5041559EAD4C01B4EA67B2E74A6BE3FCC825D9905DF74BB09D8CB82DA1A6A19DB7D39E633922ADDBF124C9158820A98CBB3C7B0DD1913C508EFE7D1FA5D3185CBAFFC030906905474D9D45F25E6166AB1AE7A5477750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:81:02:92:96:9d:8c:0a:d1:34:3c:14:f6:
                    89:02:80:89:fc:51:65:be:fb:28:41:22:71:ed:9a:
                    f9:46:bc:9d:ad:e0:89:02:d8:d2:d0:c0:dc:24:cb:
                    93:ee:7e:02:e5:00:52:02:55:c3:d7:dd:25:d0:ad:
                    83:c0:47:d7:64:ce:71:03:41:d2:1d:ed:52:6f:8f:
                    b0:d9:6a:00:a5:ef:bf:33:65:66:03:05:11:e0:64:
                    97:d1:05:b3:26:75:4a:1c:f3:eb:13:b2:b8:58:5d:
                    37:3e:d7:a5:d2:5b:83:8b:79:7f:19:19:e3:7a:d3:
                    f5:02:44:3c:4d:95:9a:73:ab:13:9a:13:53:e2:38:
                    07:c4:f4:70:27:69:e7:42:92:a7:50:7a:c3:46:7b:
                    14:2a:d9:3f:03:08:b8:f5:78:26:86:de:92:db:84:
                    29:ca:14:03:5b:6d:d5:04:15:59:ea:d4:c0:1b:4e:
                    a6:7b:2e:74:a6:be:3f:cc:82:5d:99:05:df:74:bb:
                    09:d8:cb:82:da:1a:6a:19:db:7d:39:e6:33:92:2a:
                    dd:bf:12:4c:91:58:82:0a:98:cb:b3:c7:b0:dd:19:
                    13:c5:08:ef:e7:d1:fa:5d:31:85:cb:af:fc:03:09:
                    06:90:54:74:d9:d4:5f:25:e6:16:6a:b1:ae:7a:54:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:27:84:39:5C:F0:F1:85:95:B8:05:15:BC:07:9E:E8:6B:0B:D9
            X509v3 Authority Key Identifier:
                keyid:30:2B:DD:D6:80:11:56:43:00:42:46:9F:04:C7:EF:5A:A9:7B:76:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302BDDD6801156430042469F04C7EF5AA97B76B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/302BDDD6801156430042469F04C7EF5AA97B76B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/3136382e3230352e3133362e302f32322d3234203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:d8:57:f9:ad:d4:cd:0b:10:02:6a:19:71:59:e3:7d:0a:8e:
         50:45:59:fd:b5:a3:b3:ba:ab:d1:23:df:b2:49:4b:c7:ad:3d:
         b6:00:f9:b7:99:29:c6:8e:a6:20:44:7e:e4:71:2c:f6:fa:7c:
         49:a3:83:3d:8e:75:ce:97:d1:32:36:27:a6:dc:a6:d5:b6:b0:
         03:00:e9:ac:40:5d:fc:5b:51:ec:fb:4b:fc:9e:65:54:23:bf:
         29:f5:dc:24:22:55:74:7b:8e:58:fa:f8:0c:90:b3:bc:1b:77:
         aa:40:ae:4c:b9:c6:d1:30:de:3f:66:38:e1:0a:ad:b9:d6:27:
         96:a8:db:2d:f9:76:17:f3:0d:15:3f:fa:73:17:38:09:28:69:
         1e:a6:99:05:9a:29:a7:42:8f:c0:9e:38:a6:ed:db:e4:96:bd:
         13:2d:7f:e3:27:cb:04:cb:cc:88:48:ac:1a:42:94:d6:94:b5:
         7e:bc:22:b8:ee:5e:d4:6c:51:ff:03:89:cf:d3:03:ae:52:5c:
         b6:ac:31:c1:88:b2:65:de:80:dc:bb:a4:dd:c8:c7:6a:bb:6c:
         75:bc:7d:39:82:c2:c2:fd:f8:c1:0e:e2:75:64:c5:2d:e2:03:
         20:32:9a:1f:12:07:24:62:7d:02:4e:51:3b:58:da:06:a3:7b:
         70:e5:69:2c
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUNHPuXbsfQ2StmzoC6W1Ptzp49ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAyQkRERDY4MDExNTY0MzAwNDI0NjlGMDRDN0VGNUFB
OTdCNzZCOTAeFw0yNjA1MDMxODAwMDRaFw0yNzA1MDIxODA1MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA5ODgxMDI5Mjk2OUQ4QzBB
RDEzNDNDMTRGNjg5MDI4MDg5RkM1MTY1QkVGQjI4NDEyMjcxRUQ5QUY5NDZCQzlE
QURFMDg5MDJEOEQyRDBDMERDMjRDQjkzRUU3RTAyRTUwMDUyMDI1NUMzRDdERDI1
RDBBRDgzQzA0N0Q3NjRDRTcxMDM0MUQyMURFRDUyNkY4RkIwRDk2QTAwQTVFRkJG
MzM2NTY2MDMwNTExRTA2NDk3RDEwNUIzMjY3NTRBMUNGM0VCMTNCMkI4NTg1RDM3
M0VEN0E1RDI1QjgzOEI3OTdGMTkxOUUzN0FEM0Y1MDI0NDNDNEQ5NTlBNzNBQjEz
OUExMzUzRTIzODA3QzRGNDcwMjc2OUU3NDI5MkE3NTA3QUMzNDY3QjE0MkFEOTNG
MDMwOEI4RjU3ODI2ODZERTkyREI4NDI5Q0ExNDAzNUI2REQ1MDQxNTU5RUFENEMw
MUI0RUE2N0IyRTc0QTZCRTNGQ0M4MjVEOTkwNURGNzRCQjA5RDhDQjgyREExQTZB
MTlEQjdEMzlFNjMzOTIyQUREQkYxMjRDOTE1ODgyMEE5OENCQjNDN0IwREQxOTEz
QzUwOEVGRTdEMUZBNUQzMTg1Q0JBRkZDMDMwOTA2OTA1NDc0RDlENDVGMjVFNjE2
NkFCMUFFN0E1NDc3NzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsJiBApKWnYwK0TQ8FPaJAoCJ/FFlvvsoQSJx7Zr5RrydreCJAtjS
0MDcJMuT7n4C5QBSAlXD190l0K2DwEfXZM5xA0HSHe1Sb4+w2WoApe+/M2VmAwUR
4GSX0QWzJnVKHPPrE7K4WF03Ptel0luDi3l/GRnjetP1AkQ8TZWac6sTmhNT4jgH
xPRwJ2nnQpKnUHrDRnsUKtk/Awi49Xgmht6S24QpyhQDW23VBBVZ6tTAG06mey50
pr4/zIJdmQXfdLsJ2MuC2hpqGdt9OeYzkirdvxJMkViCCpjLs8ew3RkTxQjv59H6
XTGFy6/8AwkGkFR02dRfJeYWarGuelR3dQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKsvJ4Q5XPDxhZW4BRW8B57oawvZMB8GA1UdIwQYMBaAFDAr3daAEVZDAEJGnwTH
71qpe3a5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQ1MTFzSFcxQXB3S1JZ
RUFmSGdFTWExQ3pzZ3c4NzFIcDRTTXBYM3BLc1JMLzAvMzAyQkRERDY4MDExNTY0
MzAwNDI0NjlGMDRDN0VGNUFBOTdCNzZCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zMDJCRERENjgwMTE1NjQzMDA0MjQ2OUYwNEM3RUY1QUE5N0I3
NkI5LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80NTExc0hXMUFwd0tSWUVBZkhn
RU1hMUN6c2d3ODcxSHA0U01wWDNwS3NSTC8wLzMxMzYzODJlMzIzMDM1MmUzMTMz
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzMTM0MzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKozYgwDQYJKoZIhvcNAQELBQADggEBAMbYV/mt1M0LEAJqGXFZ430KjlBFWf21
o7O6q9Ej37JJS8etPbYA+beZKcaOpiBEfuRxLPb6fEmjgz2Odc6X0TI2J6bcptW2
sAMA6axAXfxbUez7S/yeZVQjvyn13CQiVXR7jlj6+AyQs7wbd6pArky5xtEw3j9m
OOEKrbnWJ5ao2y35dhfzDRU/+nMXOAkoaR6mmQWaKadCj8CeOKbt2+SWvRMtf+Mn
ywTLzIhIrBpClNaUtX68IrjuXtRsUf8Dic/TA65SXLasMcGIsmXegNy7pN3Ix2q7
bHW8fTmCwsL9+MEO4nVkxS3iAyAymh8SByRifQJOUTtY2gaje3DlaSw=
-----END CERTIFICATE-----
Generated at Wed May 13 18:46:12 2026 by rpki-client