Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32332d3233203d3e20323634383739.roa
File:                     3136382e3232372e3132362e302f32332d3233203d3e20323634383739.roa (raw, json)
Hash identifier:          W+BpgonlpxPqJzrjdcV+2RvoAZwA6tpON//w04AH78Y=
Subject key identifier:   F6:64:AA:BA:19:16:E0:5D:46:69:D3:83:03:D9:43:50:AE:3B:0B:9F
Certificate issuer:       /CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
Certificate serial:       0144000E8CAF6E0C09FC1F545AAFC717C38092B5
Authority key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32332d3233203d3e20323634383739.roa
Signing time:             Mon 23 Mar 2026 19:15:27 +0000
ROA not before:           Mon 23 Mar 2026 19:10:27 +0000
ROA not after:            Mon 22 Mar 2027 19:15:27 +0000
asID:                     264879
IP address blocks:        168.227.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:44:00:0e:8c:af:6e:0c:09:fc:1f:54:5a:af:c7:17:c3:80:92:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
        Validity
            Not Before: Mar 23 19:10:27 2026 GMT
            Not After : Mar 22 19:15:27 2027 GMT
        Subject: CN=F664AABA1916E05D4669D38303D94350AE3B0B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6a:f5:db:ad:58:72:12:9c:ce:a5:54:70:0c:
                    ef:a7:fd:fe:b2:c7:e4:80:03:6e:5b:0e:0b:79:94:
                    d8:39:16:f6:3a:01:14:2b:98:ee:55:dc:ba:40:9d:
                    1d:e2:5b:39:68:25:e0:16:f8:7e:b1:20:8c:9b:c9:
                    84:82:c6:96:55:ca:43:83:64:bd:c6:55:1a:3c:6c:
                    f3:3d:b4:74:be:8c:02:89:5a:fa:67:2f:7b:9d:18:
                    0c:28:6e:0c:69:4a:26:dd:43:5a:52:77:0b:2f:4d:
                    e6:c6:47:72:75:93:24:52:fc:6f:5d:4a:a4:7a:7a:
                    83:68:05:11:9a:06:ea:95:8f:00:33:47:75:57:43:
                    d1:35:82:7b:c8:6a:76:34:d5:b9:ca:3c:10:f7:56:
                    d4:58:db:d9:f9:a8:be:65:7d:df:24:8d:93:5c:7f:
                    a6:7a:27:cc:07:48:d9:9e:fd:ea:6d:8e:fc:87:75:
                    71:13:88:54:27:51:e9:21:6e:c6:c8:29:36:e7:78:
                    af:5a:6a:ff:9f:7a:86:9b:1f:ad:3c:ea:c3:3e:de:
                    f1:8a:d9:0f:b8:9a:57:5e:3a:ca:a2:d7:cc:35:c4:
                    a1:b9:1e:66:15:de:db:62:1b:e5:dd:40:50:90:66:
                    3b:33:1d:6f:b6:6d:6f:99:a7:69:97:84:0c:4a:56:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:AA:BA:19:16:E0:5D:46:69:D3:83:03:D9:43:50:AE:3B:0B:9F
            X509v3 Authority Key Identifier:
                keyid:85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32332d3233203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:9d:72:17:d6:5f:91:c1:e6:ee:22:8d:81:62:a0:e4:d8:
         15:79:fa:29:d5:38:fc:a4:cc:9a:ef:98:8e:6a:23:ee:ab:3f:
         f5:67:e9:79:a5:67:2a:d6:82:d6:9f:52:29:1d:fa:74:ca:70:
         be:d5:44:1c:31:8f:f5:b2:75:44:d0:2a:a7:ae:4d:98:fd:5e:
         67:98:2c:55:09:08:1c:a5:24:e0:40:b6:27:a0:ff:ef:bb:97:
         12:d3:d2:4f:91:8b:15:ef:2e:f0:69:87:8a:9e:a8:d4:00:5a:
         df:60:9a:fc:85:fa:1e:f0:2e:de:57:ad:e4:7b:ca:cd:c2:65:
         db:6d:a5:bb:49:b1:22:71:45:94:32:93:43:73:1d:d1:d5:d1:
         48:9f:cb:0b:ad:ce:45:8d:98:4a:e1:60:b3:fc:b7:28:65:d6:
         0b:74:00:d1:79:04:67:89:6b:2c:90:f8:bb:69:3c:b3:88:0b:
         36:20:e6:d3:f5:39:80:23:5f:52:ed:94:23:e3:36:1b:bc:0a:
         4e:8f:92:14:75:60:8e:08:b4:4f:fd:dd:04:30:b9:ce:2c:bf:
         20:f3:c7:33:4f:f5:b8:e2:90:9f:f8:36:93:36:4e:01:20:5f:
         74:b3:58:66:0d:05:4f:84:d0:9d:78:58:96:25:22:d0:33:ee:
         8b:0e:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:54:22 2026 by rpki-client