Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa
File:                     3136382e39302e34382e302f32322d3332203d3e20323635323634.roa (raw, json)
Hash identifier:          0t+krdLaLLO1PS1HNXqlm8C8jvWQMEbdSWgBhuKWTEE=
Subject key identifier:   A9:43:B2:E0:D5:D7:64:13:99:CF:F4:F5:8B:3A:E8:47:31:6C:BD:EE
Certificate issuer:       /CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
Certificate serial:       118A08CD4A2735EA6490E4F9D5B137233E6E3E3D
Authority key identifier: 65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa
Signing time:             Wed 18 Mar 2026 20:24:09 +0000
ROA not before:           Wed 18 Mar 2026 20:19:09 +0000
ROA not after:            Wed 17 Mar 2027 20:24:09 +0000
asID:                     265264
IP address blocks:        168.90.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl
                          rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 11:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:8a:08:cd:4a:27:35:ea:64:90:e4:f9:d5:b1:37:23:3e:6e:3e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653837D7ECA1FE1145D0CE15E0BF895EE06A27E2
        Validity
            Not Before: Mar 18 20:19:09 2026 GMT
            Not After : Mar 17 20:24:09 2027 GMT
        Subject: CN=A943B2E0D5D7641399CFF4F58B3AE847316CBDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:e6:32:8a:fd:a7:a7:c2:8e:69:4b:9f:0d:
                    d4:20:4c:6f:e0:ba:b7:fd:7c:00:ad:1d:4c:1a:40:
                    a5:d2:63:b8:7c:94:aa:ff:55:d0:37:d9:ea:25:fa:
                    52:64:14:a7:91:9c:92:37:a9:b4:82:20:b9:88:c8:
                    ae:01:ad:e4:f9:d9:3b:f5:29:6f:59:4e:94:10:24:
                    eb:3b:53:1e:b2:12:28:7f:9e:b2:d2:7f:9c:79:ef:
                    7d:df:c2:46:cd:6c:2e:ce:8e:a1:3e:56:2d:9a:3e:
                    ef:12:ff:95:ca:6f:18:42:7a:a5:f6:d6:d6:0f:9d:
                    a8:ab:1e:4c:de:a6:aa:2a:fe:53:2a:05:07:f3:92:
                    7f:8b:61:4b:f8:75:05:d1:27:1b:ca:5a:3e:c0:43:
                    e9:f1:65:00:83:78:e6:66:c2:8f:0d:52:95:96:88:
                    e9:b2:a4:38:f9:d9:04:e0:d9:9f:e3:24:46:2d:5a:
                    58:ed:d8:c7:e9:a4:76:5a:90:af:6b:28:3e:9f:29:
                    43:17:23:a1:48:23:d7:32:5a:6d:bc:0a:70:37:6b:
                    5f:aa:01:7e:dd:a0:2c:d7:eb:69:74:48:d4:09:70:
                    14:b9:45:0f:8f:aa:b1:bb:d0:b8:76:74:fc:c6:68:
                    a4:00:2c:a7:b5:db:cc:91:45:5e:36:a8:e3:a6:14:
                    d6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:B2:E0:D5:D7:64:13:99:CF:F4:F5:8B:3A:E8:47:31:6C:BD:EE
            X509v3 Authority Key Identifier:
                keyid:65:38:37:D7:EC:A1:FE:11:45:D0:CE:15:E0:BF:89:5E:E0:6A:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/653837D7ECA1FE1145D0CE15E0BF895EE06A27E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LpeJG9ffT5CnhDbhn7AduyuLbEA9AhWW5wiPoHaFePS/0/3136382e39302e34382e302f32322d3332203d3e20323635323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:20:7a:28:0c:de:99:28:fb:ed:98:b0:f1:af:01:3e:62:fa:
         32:f1:f2:28:e1:34:ec:f9:a2:48:d6:df:b2:00:51:31:86:a2:
         2b:4b:f8:b0:9b:f4:5a:bc:12:6c:3f:17:76:bc:fd:bf:b9:6b:
         d3:b4:ef:de:30:37:79:88:cc:58:a0:b7:40:35:c6:d6:28:53:
         f0:c3:34:a3:93:05:04:2d:52:29:15:9b:73:eb:80:96:ab:1d:
         a7:84:53:7c:74:c9:95:f5:f9:04:38:f8:a5:84:2a:76:cc:69:
         ad:7a:4c:2f:51:b6:98:f1:39:90:ad:b7:05:5d:75:1b:90:6c:
         1f:e9:d0:6c:38:0e:dd:15:0d:98:43:e5:75:43:94:50:b0:96:
         05:d0:a6:44:2f:29:bc:e9:0d:e0:35:8c:34:07:4e:fb:41:6f:
         3a:dc:22:59:12:ac:7e:aa:1e:ca:e6:64:7c:43:de:87:be:d0:
         7d:86:40:f9:21:d0:d1:6b:1a:28:c5:83:fe:51:e7:aa:b9:3c:
         f7:02:f8:dc:21:9f:78:ca:2e:4b:f6:21:cc:b7:9a:90:4e:68:
         41:cb:c6:69:8f:c7:a0:20:ec:fd:1a:b2:2c:31:fe:a4:6a:37:
         51:91:69:b5:03:49:71:c7:32:31:09:c8:d4:3b:e7:7a:0a:1a:
         fd:2d:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:06:00 2026 by rpki-client