Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa
File:                     3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa (raw, json)
Hash identifier:          EluuaUFSfBSp5hHQ5PuZvZsUnpCldSjc6PPwZTVfimk=
Subject key identifier:   19:48:9D:DB:5C:59:DF:0C:91:7B:F4:88:F9:04:76:42:2E:13:54:37
Certificate issuer:       /CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Certificate serial:       4AAEA0F79E3FC7973D7240CD64D759C4C5387371
Authority key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa
Signing time:             Wed 22 Apr 2026 14:15:28 +0000
ROA not before:           Wed 22 Apr 2026 14:10:28 +0000
ROA not after:            Wed 21 Apr 2027 14:15:28 +0000
asID:                     262642
IP address blocks:        168.205.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ae:a0:f7:9e:3f:c7:97:3d:72:40:cd:64:d7:59:c4:c5:38:73:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
        Validity
            Not Before: Apr 22 14:10:28 2026 GMT
            Not After : Apr 21 14:15:28 2027 GMT
        Subject: CN=19489DDB5C59DF0C917BF488F90476422E135437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:8e:29:f6:e3:d5:2e:2a:64:0a:36:53:b7:
                    79:d9:78:6c:f0:72:21:d2:3d:f2:38:6e:0a:3d:e7:
                    5e:bd:09:dd:9a:14:76:88:df:cf:f7:4f:93:2c:cf:
                    33:83:7c:ad:d9:c5:1f:01:1f:a9:5d:f1:a0:c7:e5:
                    0d:65:f4:e0:5a:71:4c:8f:0d:70:56:e4:a4:23:d5:
                    97:d4:c3:e9:b7:de:46:8e:10:f5:12:49:71:7d:50:
                    33:bf:64:a0:3b:e6:a5:be:b2:e2:b6:8d:89:66:c2:
                    fd:0c:1c:70:8a:83:a3:07:78:8f:4a:f8:5e:ea:71:
                    a0:fb:00:aa:52:f7:b0:e0:96:36:3d:b0:bf:f7:bb:
                    f9:c8:8b:3e:83:4f:41:e3:71:f8:86:66:30:fe:80:
                    cb:12:da:4e:af:b0:ec:0c:05:e3:94:2e:f1:8b:98:
                    f8:ce:7d:49:c1:f7:2b:50:3a:ea:98:d6:41:00:9c:
                    da:f0:5d:25:ae:a5:13:36:87:62:1b:f4:55:18:6c:
                    ea:69:ad:b6:e5:f7:d0:3c:4c:33:4f:bc:48:06:19:
                    43:25:8c:b2:32:ba:45:ed:76:6a:d0:6f:d8:ee:be:
                    51:2e:e2:7f:d7:02:0f:c9:86:07:cf:68:cf:f5:63:
                    27:4d:ae:85:db:f8:f3:bb:5b:3f:24:c1:ab:d9:ad:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:9D:DB:5C:59:DF:0C:91:7B:F4:88:F9:04:76:42:2E:13:54:37
            X509v3 Authority Key Identifier:
                keyid:28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134302e302f32322d3232203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:a8:38:07:ab:ee:20:ad:ba:6b:60:ce:f9:43:82:e0:45:
         92:3d:4d:aa:81:58:30:3f:8c:01:f0:d6:ae:83:bd:f7:76:26:
         ba:07:33:56:58:f0:f2:e7:26:57:ef:07:f2:68:0f:b3:d0:3e:
         3d:3f:37:15:0e:e4:82:81:fd:f7:ff:d8:15:c0:cf:e4:6a:cb:
         e1:0c:ef:76:47:36:36:07:3a:b9:ef:f5:2a:ff:40:af:0a:b7:
         aa:46:9e:5b:c6:94:08:4b:a4:75:e6:60:93:34:54:49:5f:47:
         9f:2f:e9:55:72:95:c9:ac:ce:b2:35:5a:7f:27:db:ef:2d:4e:
         f4:78:04:05:1a:74:13:70:9c:a5:e1:9d:61:17:8d:97:60:cb:
         63:be:df:94:9a:a2:19:dd:81:13:35:1c:46:3f:5c:3d:11:ca:
         52:59:f9:14:2d:9a:8f:31:33:ab:f4:a3:a2:f6:00:db:54:34:
         b0:4d:52:f7:e6:28:9b:71:62:63:fe:25:a9:84:94:79:ef:0f:
         86:62:5e:be:d9:92:67:77:24:f6:2a:88:0b:20:7d:e8:15:66:
         69:81:9d:aa:30:e4:f1:6b:33:cb:cd:3d:c8:ec:c3:ba:5c:3f:
         59:d9:a6:0f:9a:93:45:ca:57:ae:2d:e3:ca:19:18:3a:4f:db:
         34:d3:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:41:30 2026 by rpki-client