Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
File:                     3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa (raw, json)
Hash identifier:          TaRqx/pwntNssZ5bMiuW8lGGOgpzaN6laiT+0aKCB2c=
Subject key identifier:   B2:3C:42:D9:1B:18:AB:72:0A:1A:DC:54:83:55:5A:CE:62:EC:38:B8
Certificate issuer:       /CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
Certificate serial:       0591A9B4612C193EDF211B24991CBF7963FCAF20
Authority key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa
Signing time:             Mon 23 Mar 2026 19:15:27 +0000
ROA not before:           Mon 23 Mar 2026 19:10:27 +0000
ROA not after:            Mon 22 Mar 2027 19:15:27 +0000
asID:                     264879
IP address blocks:        168.227.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:91:a9:b4:61:2c:19:3e:df:21:1b:24:99:1c:bf:79:63:fc:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
        Validity
            Not Before: Mar 23 19:10:27 2026 GMT
            Not After : Mar 22 19:15:27 2027 GMT
        Subject: CN=B23C42D91B18AB720A1ADC5483555ACE62EC38B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:98:73:6f:f2:1e:df:db:b8:b7:ef:88:4e:
                    b3:23:63:7b:59:e5:fa:64:f7:77:c6:05:7c:ae:3d:
                    34:49:5c:ea:0b:4c:47:1e:7a:a7:7e:de:3a:bc:6a:
                    e0:05:26:43:19:59:86:97:f2:42:6e:c7:92:bb:ce:
                    27:ca:62:db:71:af:8a:75:9e:97:89:22:ae:a1:88:
                    38:e6:3d:c3:0b:97:e4:34:a6:b6:90:22:09:81:32:
                    64:05:e3:b6:60:d0:83:a0:9f:c4:66:c6:fb:79:97:
                    f3:d4:b7:c9:42:56:8c:5d:b4:c4:0c:60:89:25:36:
                    f2:c1:d9:18:38:6f:24:79:a9:a4:e0:8b:34:4f:2e:
                    40:de:00:0f:9d:6b:60:b6:98:72:b4:ef:ef:f5:fe:
                    a0:af:a5:69:4b:c0:38:8e:2c:e1:87:60:56:c2:6c:
                    5d:f3:80:9c:08:b7:b2:6c:91:55:64:9f:80:1f:ad:
                    5f:56:d5:96:8d:1f:14:0c:a3:ee:b1:01:9e:38:ed:
                    9d:2c:3e:f3:71:0a:b5:01:3d:fd:4e:25:42:3e:c9:
                    9d:83:1e:a6:13:61:86:1e:cb:b4:0c:e3:7d:d3:73:
                    50:7b:8b:4c:71:94:37:d3:68:8d:83:d0:2a:af:5a:
                    c8:45:5f:56:74:49:c4:58:7b:ac:9c:19:8f:cf:c2:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:42:D9:1B:18:AB:72:0A:1A:DC:54:83:55:5A:CE:62:EC:38:B8
            X509v3 Authority Key Identifier:
                keyid:85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132362e302f32342d3234203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:24:d3:f2:65:89:53:00:37:dc:59:e0:00:29:65:ea:18:
         92:b2:b2:0f:9d:07:20:65:78:55:8b:a4:db:41:bf:15:3f:89:
         e6:85:0e:38:20:a0:b4:d9:58:35:1c:bf:f2:14:73:36:54:fd:
         02:8b:c0:75:cc:bf:f2:9a:59:a8:8f:d2:1d:1a:18:f2:c7:cc:
         fe:b7:c7:44:fd:e7:e0:49:6d:b7:dc:d5:3f:4c:6b:49:99:01:
         06:cc:cc:a2:82:41:d8:bf:fd:12:06:43:7a:14:9e:c6:47:fe:
         51:35:e9:90:d6:99:87:c8:9c:cc:82:06:ff:a1:af:e5:75:f9:
         40:b7:57:0d:0b:65:3d:14:1e:4e:96:d2:bc:43:b6:4e:6d:27:
         d9:02:03:8e:0c:25:ca:66:ea:8d:7d:09:21:47:3e:3f:d3:18:
         da:e7:84:6f:8f:d0:4d:9d:f4:d6:16:7b:58:32:b2:05:b2:5d:
         8b:05:d4:e6:07:de:53:e5:e1:90:c5:65:6e:43:e1:99:bc:43:
         53:d8:a8:b6:67:a3:ae:d4:6f:e5:b6:9a:8b:f2:df:3e:b2:1e:
         1a:22:df:79:a4:36:8c:7b:45:63:31:fa:9c:85:2d:83:c1:c8:
         f0:bd:b2:96:d8:3b:66:d1:b9:d0:bc:57:a2:23:6a:85:a5:35:
         2d:a9:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:38 2026 by rpki-client