Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32332d3233203d3e20323633353633.roa
File:                     3136382e3233322e3138322e302f32332d3233203d3e20323633353633.roa (raw, json)
Hash identifier:          W6GdOC2Ax2C7idZuVlz+0EEwu422JGr9bTxOD/McbuY=
Subject key identifier:   4D:44:76:8C:8A:CE:DD:8F:EA:95:69:91:6C:AB:B3:5B:C2:99:85:10
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       06E01BE0D200A07584BA9ACA8437A7E63651CCEC
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32332d3233203d3e20323633353633.roa
Signing time:             Fri 13 Mar 2026 15:29:24 +0000
ROA not before:           Fri 13 Mar 2026 15:24:24 +0000
ROA not after:            Fri 12 Mar 2027 15:29:24 +0000
asID:                     263563
IP address blocks:        168.232.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:1b:e0:d2:00:a0:75:84:ba:9a:ca:84:37:a7:e6:36:51:cc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Mar 13 15:24:24 2026 GMT
            Not After : Mar 12 15:29:24 2027 GMT
        Subject: CN=4D44768C8ACEDD8FEA9569916CABB35BC2998510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:91:a3:4d:c7:fa:de:b1:a2:ef:3f:6d:ba:
                    dd:f3:78:22:23:f2:9a:c2:36:52:43:1b:27:de:44:
                    ce:6c:72:37:84:40:bd:42:7e:bf:bc:96:fa:51:db:
                    21:1c:1a:8e:b7:bc:67:90:36:7f:2f:ed:d5:24:cb:
                    f1:13:c9:cb:14:79:7a:54:23:a7:56:57:34:44:9f:
                    90:85:a1:c0:be:1e:ba:54:60:1e:d5:c5:94:7b:84:
                    c2:72:ae:67:28:56:eb:50:d5:0d:d9:a0:33:18:5d:
                    15:0e:a5:ba:87:5a:7c:e1:43:24:62:8e:88:0e:cb:
                    39:f1:56:95:b3:4a:b3:83:57:99:b0:f5:13:13:3e:
                    7a:32:e2:86:fd:38:82:19:61:3a:5d:36:93:bd:64:
                    eb:6f:65:42:94:d4:64:ee:c9:26:8b:ab:7e:a9:c5:
                    5d:88:0e:b0:92:d9:9a:17:4c:91:dc:92:56:82:8f:
                    59:01:e5:00:a6:9a:48:8d:80:a6:b7:3a:fb:1a:24:
                    e5:95:e6:f4:5c:35:00:85:8d:5f:ab:6a:6c:78:c7:
                    63:14:45:8e:16:f0:e3:7a:d3:e4:34:b1:f2:7c:df:
                    6d:be:3d:03:f3:6f:ce:c8:2c:5d:40:13:8f:41:59:
                    6c:e8:49:b3:10:d0:d2:3b:59:fc:76:24:84:9b:7b:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:44:76:8C:8A:CE:DD:8F:EA:95:69:91:6C:AB:B3:5B:C2:99:85:10
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/3136382e3233322e3138322e302f32332d3233203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:db:fb:ef:13:0f:27:b9:76:fe:5c:65:c6:eb:18:74:6c:a1:
         cb:46:c1:20:15:c1:6c:06:06:10:be:47:61:2f:fb:01:dd:5b:
         f1:c4:7b:0e:fc:27:84:47:88:34:f7:20:76:1d:1f:63:dd:ea:
         b0:2b:ec:89:40:fa:4b:ae:f8:9c:13:75:a6:7a:fa:30:0b:1c:
         0e:ab:4c:80:83:c3:1d:55:9c:72:e0:2b:f6:1f:88:e8:9a:c9:
         0f:95:49:bd:4a:58:5f:53:3e:c2:dd:b3:3c:34:b7:c5:d7:63:
         47:08:ab:4d:c3:52:f4:92:d1:a5:a3:86:91:57:d3:d9:81:fa:
         36:1d:dd:02:3d:95:1e:d1:ed:b4:5c:5b:6d:fa:db:3c:6b:da:
         0c:d0:41:65:6a:b9:7d:80:52:92:7d:5b:43:92:e6:2b:f1:46:
         e1:cf:87:65:4e:9b:6f:e6:3f:ba:03:ec:d8:87:86:31:2b:24:
         e5:50:20:d7:e5:30:84:cb:48:de:f1:e6:3a:cc:3f:7b:7f:68:
         40:34:6d:26:d5:ad:7d:f4:75:b7:4c:6d:dd:6e:7c:ba:6a:d1:
         10:75:44:06:7a:aa:40:e2:d5:e1:ae:fe:78:bd:f5:32:31:ab:
         1b:ca:c9:f6:ce:4f:13:19:86:0e:8c:ee:3f:6c:ec:05:08:22:
         d0:67:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:59:27 2026 by rpki-client