Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa
File:                     3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa (raw, json)
Hash identifier:          VglS1TU0ffhspaosSIO2N2TM+3Yfy6ngO4w2hnoTy08=
Subject key identifier:   DA:AD:34:EF:B2:F0:49:15:1A:5C:22:2B:91:2E:45:77:3C:1F:2C:B6
Certificate issuer:       /CN=D88B454BC594C5A1800134E375B465D91C070DFD
Certificate serial:       4B3D1043C518F54DD75F43571F6BD18D43087462
Authority key identifier: D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa
Signing time:             Thu 30 Apr 2026 21:13:40 +0000
ROA not before:           Thu 30 Apr 2026 21:08:40 +0000
ROA not after:            Thu 29 Apr 2027 21:13:40 +0000
asID:                     265369
IP address blocks:        168.205.100.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl
                          rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3d:10:43:c5:18:f5:4d:d7:5f:43:57:1f:6b:d1:8d:43:08:74:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D88B454BC594C5A1800134E375B465D91C070DFD
        Validity
            Not Before: Apr 30 21:08:40 2026 GMT
            Not After : Apr 29 21:13:40 2027 GMT
        Subject: CN=DAAD34EFB2F049151A5C222B912E45773C1F2CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:26:71:79:b4:0e:e1:b3:53:f4:44:cb:6c:
                    87:a5:b8:e3:69:a0:7e:47:cf:ef:06:0c:ed:a9:8f:
                    54:d5:03:f7:e1:39:42:af:6a:98:ec:5b:78:47:cb:
                    2d:eb:b7:7d:3b:e9:2e:1d:49:7b:95:1b:94:0d:d6:
                    be:f0:6f:8c:7d:aa:25:b5:8b:e4:92:c8:ff:50:0b:
                    00:54:8f:01:c4:2f:d1:0a:48:10:e0:62:b2:a4:55:
                    ee:9d:d0:53:cb:11:e8:1f:f3:29:d5:c4:56:87:11:
                    d8:43:c9:93:f1:f9:f5:d6:62:f4:aa:06:21:f2:1b:
                    57:9f:d1:7a:8c:a5:a4:86:47:c5:44:70:21:49:5c:
                    91:93:b8:b0:15:ae:88:de:a3:ec:1d:0a:c2:ae:a3:
                    f3:72:ff:0f:3a:78:d2:14:49:3c:25:0b:26:47:f0:
                    ee:16:ea:04:a1:cc:40:6f:d5:6d:b8:20:5f:54:30:
                    16:99:28:1d:c3:31:c4:58:0b:79:07:08:c8:8d:74:
                    7d:5c:01:c6:15:f9:54:b3:13:e5:68:c7:78:79:a3:
                    35:1e:f8:92:28:0b:8d:4e:23:74:ba:28:a1:f8:6a:
                    30:43:ff:3c:1e:5e:a7:f7:39:6a:df:af:69:c5:6b:
                    73:89:fc:85:84:f3:df:b2:89:65:c4:dc:77:0f:23:
                    66:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AD:34:EF:B2:F0:49:15:1A:5C:22:2B:91:2E:45:77:3C:1F:2C:B6
            X509v3 Authority Key Identifier:
                keyid:D8:8B:45:4B:C5:94:C5:A1:80:01:34:E3:75:B4:65:D9:1C:07:0D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/D88B454BC594C5A1800134E375B465D91C070DFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D88B454BC594C5A1800134E375B465D91C070DFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Su2DLiu6vyJRJpL5bYijj2eqqSve9uWscviXQasyT2n/0/3136382e3230352e3130302e302f32322d3332203d3e20323635333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:f5:3a:77:37:cd:03:ed:00:d4:0c:84:b8:be:66:67:8e:dd:
         b3:0e:e7:e1:7a:b8:4f:ab:52:7d:59:29:3c:58:24:a1:3f:8a:
         4a:dd:45:ca:ad:d0:95:e0:3c:27:bc:68:25:4b:48:6b:b4:54:
         70:cb:8c:ff:91:21:96:d1:dc:77:76:e1:c6:00:ba:0d:de:ef:
         fd:f2:75:d6:57:71:f7:0e:df:08:12:d5:07:5e:d3:85:58:d2:
         36:d6:d3:dc:bd:ac:da:be:6f:5e:1d:ce:30:ba:cd:db:ba:c2:
         23:5e:db:24:8f:19:b1:8d:cd:9a:e5:e7:79:03:bb:cf:95:40:
         23:45:be:df:6e:12:37:16:ad:26:c4:21:d8:93:63:dd:a1:39:
         f9:f9:83:2a:41:27:91:b6:bd:ad:46:53:b0:57:84:02:c8:16:
         a8:95:2f:70:ff:8e:db:71:08:cc:68:bc:93:84:84:8d:93:5c:
         b9:ed:ef:57:cf:c2:95:1b:a8:0d:56:f2:9d:5c:2d:b0:9b:36:
         8d:3f:02:26:05:b4:e6:10:15:b7:77:48:c2:71:04:50:e6:bc:
         35:47:52:84:17:45:38:72:ac:90:c5:98:5f:2b:7a:86:b3:3b:
         ca:67:d5:20:ca:ca:04:3b:d4:a7:4b:9d:63:2c:d0:f8:53:88:
         49:19:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:34:35 2026 by rpki-client