Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
File:                     3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa (raw, json)
Hash identifier:          PEhzDb5wwNjH/f1oM0vcUdkbpyRldQsjes7brSoj2Sg=
Subject key identifier:   AA:FD:63:CE:36:0E:02:1E:ED:1E:B9:35:07:78:55:42:7D:41:C0:6E
Certificate issuer:       /CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
Certificate serial:       19E8B78BBB70D0DAE9C1628DC98E4F39EA3515F5
Authority key identifier: 28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa
Signing time:             Wed 22 Apr 2026 14:15:29 +0000
ROA not before:           Wed 22 Apr 2026 14:10:29 +0000
ROA not after:            Wed 21 Apr 2027 14:15:29 +0000
asID:                     262642
IP address blocks:        168.205.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e8:b7:8b:bb:70:d0:da:e9:c1:62:8d:c9:8e:4f:39:ea:35:15:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28034B9FB4AFD8D3F39B133AA471E40A83F21AC4
        Validity
            Not Before: Apr 22 14:10:29 2026 GMT
            Not After : Apr 21 14:15:29 2027 GMT
        Subject: CN=AAFD63CE360E021EED1EB935077855427D41C06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:ac:a7:16:86:56:12:37:4b:06:d6:8a:63:
                    6a:12:75:f0:99:41:47:f5:49:04:da:6d:74:6f:b4:
                    a9:2f:a7:9a:ce:8d:04:8d:f5:47:60:fc:fa:da:5a:
                    1b:ce:e9:84:5c:92:89:8e:4a:90:84:a2:37:cf:97:
                    d9:3b:0c:82:3e:12:7a:67:24:c5:f9:2d:99:4e:b2:
                    c9:82:15:6b:12:04:35:8a:e3:b3:fa:ab:1b:06:a6:
                    1d:89:6c:60:23:e0:a6:bb:17:bd:9b:3d:39:84:43:
                    8e:4b:92:1e:d4:7d:48:d3:83:6d:69:68:5a:0f:bf:
                    a1:b9:f2:e7:5f:90:2d:21:ff:7e:fa:d7:53:6e:62:
                    1a:b9:83:57:0f:b0:1f:65:53:97:93:38:63:7f:db:
                    b5:1e:31:70:a9:65:68:a6:06:65:42:7a:b3:8c:c9:
                    16:f9:08:a7:49:40:c4:42:a3:be:a1:41:1a:ad:53:
                    3b:f0:81:f3:ee:43:1d:11:d6:ba:09:aa:ab:38:a5:
                    69:73:1d:96:7a:cd:30:ff:5c:a0:f4:e7:93:dc:41:
                    f7:eb:e2:1a:c6:89:a1:69:d4:a0:27:a3:79:8d:16:
                    7c:ea:26:60:37:a3:60:9e:5a:64:99:c1:db:c2:b4:
                    51:61:dd:21:8c:8b:f0:34:f1:bc:2f:a2:3e:18:06:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:63:CE:36:0E:02:1E:ED:1E:B9:35:07:78:55:42:7D:41:C0:6E
            X509v3 Authority Key Identifier:
                keyid:28:03:4B:9F:B4:AF:D8:D3:F3:9B:13:3A:A4:71:E4:0A:83:F2:1A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28034B9FB4AFD8D3F39B133AA471E40A83F21AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134322e302f32332d3233203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:22:44:e5:e2:e0:f6:81:11:02:3c:e0:22:9b:ef:c2:06:81:
         50:7a:56:f9:11:81:67:b1:dc:57:f0:f0:c8:18:96:d0:8d:54:
         1a:0c:ed:e8:01:ab:7b:b1:b2:f7:38:85:46:6d:13:86:ac:3c:
         a8:27:e0:e0:97:a2:20:ba:2f:42:8e:25:fd:6e:a0:89:1a:f7:
         49:d3:04:7d:60:39:db:c6:a3:11:eb:df:ed:c0:4b:e0:50:c6:
         20:b8:21:51:24:60:b9:4a:22:21:f0:61:2b:37:a9:58:f7:af:
         c0:cb:59:61:2f:9f:ba:09:51:44:ac:ae:10:ac:af:44:9a:bc:
         8a:bd:89:27:68:7f:d4:29:a8:8b:34:a9:6b:3a:09:db:d8:7f:
         7c:be:ff:99:9d:a2:8b:dc:95:22:6d:a8:d5:fe:3d:4d:1e:c4:
         ea:f5:65:70:31:03:1b:ac:20:ea:b3:96:b7:15:f5:16:2e:15:
         9e:f6:7d:3d:3e:ac:4f:04:1e:22:13:eb:2d:39:68:ff:2f:44:
         a7:d9:3f:9b:83:9d:1d:15:15:28:47:b9:9f:34:76:05:50:d3:
         c9:5c:45:28:8d:a5:63:bc:4e:eb:2c:1a:45:1a:b5:b0:97:96:
         4e:b9:85:37:96:52:01:d2:47:68:b0:17:c5:e3:2a:e9:53:da:
         9a:98:ef:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:16:27 2026 by rpki-client