Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa
File:                     3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa (raw, json)
Hash identifier:          tshs4nrE2fCBG7vz5bqiqa3A7FLqaBSEnohgsWpp2y0=
Subject key identifier:   47:3A:A5:16:42:32:D6:F7:87:CF:E2:CB:0D:2D:35:25:1F:73:5C:81
Certificate issuer:       /CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
Certificate serial:       71A03EEF4DFD07C215BB42064B9BA606898B3F17
Authority key identifier: 8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa
Signing time:             Mon 04 May 2026 23:57:08 +0000
ROA not before:           Mon 04 May 2026 23:52:08 +0000
ROA not after:            Mon 03 May 2027 23:57:08 +0000
asID:                     264869
IP address blocks:        168.205.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl
                          rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:3e:ef:4d:fd:07:c2:15:bb:42:06:4b:9b:a6:06:89:8b:3f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC9BF1ADE379959593FC137298AB5F7F113CA41
        Validity
            Not Before: May  4 23:52:08 2026 GMT
            Not After : May  3 23:57:08 2027 GMT
        Subject: CN=473AA5164232D6F787CFE2CB0D2D35251F735C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:63:43:d1:98:12:44:fb:bc:a3:ab:6d:a7:
                    a3:7f:31:1c:4a:b2:7f:0a:a3:ff:b1:24:d5:83:59:
                    45:bd:c8:08:4a:cb:b3:83:e3:a3:e8:84:3e:fc:c9:
                    13:7d:5f:18:f7:87:02:f2:35:9e:17:ef:d6:39:ae:
                    62:d4:cb:88:a9:05:aa:23:d6:64:10:f7:c2:3e:45:
                    83:25:a1:ce:94:ee:71:2c:4c:63:65:2a:89:da:f3:
                    a0:28:cb:97:cc:bf:14:f1:43:16:31:90:64:f7:53:
                    aa:a4:54:27:cb:a2:dc:f4:99:bc:37:6a:45:0c:45:
                    d5:12:4c:25:01:9d:40:3c:62:1d:a1:3a:72:24:0b:
                    7f:d4:68:32:f0:d6:2c:7f:8d:fa:03:ad:90:89:ea:
                    27:7b:16:65:03:cc:7b:b3:a1:fe:20:65:3c:cc:96:
                    70:e2:06:3f:53:4c:fb:6d:cb:d6:24:c3:91:81:d5:
                    79:81:b5:0a:3f:11:7b:7a:b0:dc:3a:39:21:92:90:
                    57:92:4d:ec:0f:7a:e1:9d:e7:d4:a6:14:49:c0:ad:
                    7a:50:ca:bf:c0:b0:04:47:6c:9f:59:5b:43:ef:96:
                    c4:c5:27:7d:35:fc:6a:77:06:08:25:ec:5a:d7:56:
                    36:92:eb:cc:21:c3:84:3c:8e:b5:c0:6a:9a:1b:ff:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:A5:16:42:32:D6:F7:87:CF:E2:CB:0D:2D:35:25:1F:73:5C:81
            X509v3 Authority Key Identifier:
                keyid:8D:C9:BF:1A:DE:37:99:59:59:3F:C1:37:29:8A:B5:F7:F1:13:CA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/8DC9BF1ADE379959593FC137298AB5F7F113CA41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DC9BF1ADE379959593FC137298AB5F7F113CA41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/643PQWupQ2KsMbQqqR2YtWuAc28NWrXD176pLs4GKoEf/0/3136382e3230352e3231362e302f32322d3332203d3e20323634383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:6f:e6:f5:df:97:a0:b5:a8:4c:98:5c:ae:42:5d:5f:cb:18:
         57:e2:90:9c:a1:6b:a1:40:f5:09:75:18:09:55:71:2b:49:37:
         d9:9a:7e:f1:4f:db:ef:e4:37:ef:35:1a:a9:5e:09:27:d0:f8:
         64:d3:0e:e7:82:69:42:16:1e:aa:ef:6e:a2:3d:3f:ef:bc:08:
         08:f3:ab:2e:35:7d:13:51:85:44:82:32:85:4b:c6:1c:ff:4e:
         df:bd:e1:07:62:6f:94:28:d0:20:aa:f6:6b:5a:d7:bd:45:e9:
         85:39:a6:d7:ad:0c:64:dd:fa:fc:26:26:a3:1a:44:7e:50:98:
         92:87:c7:bb:75:81:c5:55:26:b5:c0:32:a0:69:4e:ee:67:1d:
         0d:ec:7c:7e:ad:da:42:94:f9:3d:48:68:aa:1d:1f:34:6c:a5:
         90:bd:60:29:4b:bc:35:50:88:d2:0e:43:86:3e:03:85:ad:15:
         fe:f1:09:56:8a:d0:10:c3:61:d0:30:89:11:fd:74:81:57:96:
         43:8a:3c:f8:c6:cb:b9:f7:74:97:30:88:ce:88:99:74:ce:4a:
         68:a7:b7:ca:bb:4b:45:c3:43:b6:57:8d:82:4b:c5:37:00:2b:
         b0:89:45:4e:e2:97:2d:ce:a5:7f:e3:61:39:23:63:89:0a:18:
         0b:2f:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:21:02 2026 by rpki-client