Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/3138312e3139322e3131362e302f32322d3332203d3e20323730363338.roa
File:                     3138312e3139322e3131362e302f32322d3332203d3e20323730363338.roa (raw, json)
Hash identifier:          Tk9paApe2k1+UQ0BwWiF24TjsOZrUjrKxyXPB4th2R8=
Subject key identifier:   7D:7E:DA:82:53:82:D2:EA:9B:61:F2:43:B8:6A:07:E0:92:91:A6:83
Certificate issuer:       /CN=BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA
Certificate serial:       3BCB7D00459B1838988A8B2715C1163655F23919
Authority key identifier: BC:B0:94:AF:9F:B9:C6:0E:A0:8D:30:BD:48:84:E2:8C:C3:0A:11:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/3138312e3139322e3131362e302f32322d3332203d3e20323730363338.roa
Signing time:             Mon 09 Mar 2026 17:07:29 +0000
ROA not before:           Mon 09 Mar 2026 17:02:29 +0000
ROA not after:            Mon 08 Mar 2027 17:07:29 +0000
asID:                     270638
IP address blocks:        181.192.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.crl
                          rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cb:7d:00:45:9b:18:38:98:8a:8b:27:15:c1:16:36:55:f2:39:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA
        Validity
            Not Before: Mar  9 17:02:29 2026 GMT
            Not After : Mar  8 17:07:29 2027 GMT
        Subject: CN=7D7EDA825382D2EA9B61F243B86A07E09291A683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:1c:8d:36:4e:7f:8d:0c:60:4e:1b:63:e1:
                    96:82:19:da:48:9c:df:e7:35:09:20:4f:34:4d:e8:
                    68:78:89:c0:ef:b7:7c:21:5e:2f:bb:88:72:09:f2:
                    83:eb:b9:60:63:1c:34:cd:63:1e:48:a2:d3:1d:c7:
                    9a:a9:2e:0a:a8:ce:d9:c9:68:4e:46:c5:ec:08:a1:
                    29:34:67:71:b7:9b:95:cc:88:72:e6:28:ed:dc:b7:
                    cc:13:e3:65:4b:1f:48:b1:4b:5f:79:8b:ae:5b:7b:
                    88:d1:d7:68:0c:30:06:1b:a6:d7:a7:42:8d:ac:d8:
                    5b:e3:c2:de:f2:6e:36:dd:91:35:c6:72:fd:25:23:
                    05:39:f0:40:44:b9:c1:06:a3:63:63:47:fc:16:63:
                    01:06:5e:e6:da:c4:ab:81:1b:67:f5:74:f5:b6:75:
                    51:78:c3:32:fb:80:69:2b:cf:c5:ec:ca:14:99:6d:
                    02:15:9e:2f:f1:dd:90:cd:df:7b:2e:8a:98:d0:3c:
                    7b:aa:fc:8d:80:2f:5b:8d:7c:44:f0:5d:77:db:36:
                    50:3c:ed:2b:cf:b7:77:57:80:bc:51:29:b9:31:5d:
                    1f:78:ae:a6:14:75:e3:e5:8a:07:b9:5e:7b:aa:ac:
                    e2:d1:f3:9c:22:dc:68:7a:05:35:4e:17:05:46:f8:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7E:DA:82:53:82:D2:EA:9B:61:F2:43:B8:6A:07:E0:92:91:A6:83
            X509v3 Authority Key Identifier:
                keyid:BC:B0:94:AF:9F:B9:C6:0E:A0:8D:30:BD:48:84:E2:8C:C3:0A:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB094AF9FB9C60EA08D30BD4884E28CC30A11FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZkjAcTjnraKghaE5CS4Qm7XqqRkgHxrxivRjCxcaRh/0/3138312e3139322e3131362e302f32322d3332203d3e20323730363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:0b:83:4e:b6:ea:6f:50:76:53:b7:47:9c:9a:fe:a3:ed:be:
         96:44:04:85:e5:45:2f:7c:3b:6c:b4:54:91:cc:01:ad:aa:ab:
         46:a7:60:ae:3b:08:e4:5f:8a:f9:a0:e8:f8:f6:7e:36:6e:f5:
         56:8d:8c:71:28:7d:12:45:09:b8:b2:21:48:fa:16:29:3f:86:
         50:a5:11:e8:de:a4:c0:2a:f4:de:c4:b5:66:83:67:bd:11:9a:
         4c:c3:d3:85:40:17:50:97:bf:77:ed:0f:35:89:d2:02:a8:a9:
         15:72:af:29:bc:63:08:29:7a:c9:cc:a5:75:7b:7b:b3:07:db:
         c1:f6:88:68:a3:31:44:33:7b:3e:a5:4e:bf:26:0c:43:55:d5:
         76:19:ad:91:65:4d:c1:f9:29:1f:3c:c3:d2:53:0e:b8:4a:10:
         33:d1:10:0a:88:2e:40:8e:06:10:4d:03:07:86:36:66:43:2e:
         cc:11:cc:f9:e2:73:de:e0:dd:ef:fb:b4:0e:96:0a:f6:6f:af:
         59:b2:bb:65:84:82:f0:d3:85:ff:dd:9b:62:8f:11:6f:f7:6b:
         c4:38:b4:ad:08:ff:d8:54:ae:68:3f:d8:98:af:1a:15:01:c1:
         79:24:34:8d:4b:58:8e:5d:38:62:b6:58:ec:c3:d4:41:43:76:
         08:1f:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:57:42 2026 by rpki-client