Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130332e302f32342d3234203d3e20323635333037.roa
File:                     3136382e39302e3130332e302f32342d3234203d3e20323635333037.roa (raw, json)
Hash identifier:          RHhaqskxKovdhf1MgysYMd1n6Xu+j2gifZY/eXxdBds=
Subject key identifier:   26:9F:82:7E:F1:4F:01:C8:13:F6:E8:46:69:C9:0C:5A:A8:8A:B2:02
Certificate issuer:       /CN=764567616A60FC68D3BC1B6D3EC8446979113187
Certificate serial:       729390ACFC00AAE41A284279142768D3F02BA493
Authority key identifier: 76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130332e302f32342d3234203d3e20323635333037.roa
Signing time:             Thu 05 Mar 2026 17:53:53 +0000
ROA not before:           Thu 05 Mar 2026 17:48:53 +0000
ROA not after:            Thu 04 Mar 2027 17:53:53 +0000
asID:                     265307
IP address blocks:        168.90.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl
                          rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:93:90:ac:fc:00:aa:e4:1a:28:42:79:14:27:68:d3:f0:2b:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764567616A60FC68D3BC1B6D3EC8446979113187
        Validity
            Not Before: Mar  5 17:48:53 2026 GMT
            Not After : Mar  4 17:53:53 2027 GMT
        Subject: CN=269F827EF14F01C813F6E84669C90C5AA88AB202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:43:86:d6:dd:55:0e:71:a2:e9:4c:0e:e4:
                    23:45:13:23:ae:27:b8:57:4d:ae:2d:f3:8e:70:45:
                    9f:f8:85:08:da:85:94:7d:cf:8b:b6:80:ed:d4:01:
                    e4:55:3d:67:60:5e:81:ce:a4:27:52:5a:62:36:f7:
                    de:5c:fa:b0:50:59:05:07:e7:b9:14:e9:ac:cf:ff:
                    0d:38:7e:ab:25:41:d5:80:b0:53:bd:a1:36:aa:cc:
                    c7:2c:56:cd:2d:27:8f:64:93:91:b6:8f:ca:66:91:
                    8f:dc:bc:7f:b0:54:6c:38:ce:83:b4:86:57:a5:99:
                    55:4f:8d:5f:18:bb:7d:dd:57:d7:89:58:62:ba:38:
                    c6:1e:55:9b:a3:17:17:f8:a1:f9:52:20:37:b5:ce:
                    4e:20:b1:1e:e5:73:b2:30:fc:00:c5:ca:e9:81:16:
                    41:3a:2a:54:30:cd:b5:75:b3:f2:d1:be:51:be:1a:
                    63:f3:d8:13:c4:5d:35:80:b7:84:27:80:ef:45:63:
                    d9:7a:d2:35:4e:83:1f:c8:d3:bc:08:3f:9e:0a:8d:
                    f1:ca:f9:ac:22:5e:3b:9a:f1:8d:17:c6:49:f4:f0:
                    f4:5b:e9:c0:7c:d4:ed:89:2c:1e:75:47:5e:9e:0b:
                    82:1a:db:21:ee:b3:7c:dd:97:0c:3a:fc:73:7b:38:
                    51:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9F:82:7E:F1:4F:01:C8:13:F6:E8:46:69:C9:0C:5A:A8:8A:B2:02
            X509v3 Authority Key Identifier:
                keyid:76:45:67:61:6A:60:FC:68:D3:BC:1B:6D:3E:C8:44:69:79:11:31:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/764567616A60FC68D3BC1B6D3EC8446979113187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/764567616A60FC68D3BC1B6D3EC8446979113187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KTMY1cBJC9w2jGXcQboaAQNEG7TzZUn8UvLrnQtmpLo/0/3136382e39302e3130332e302f32342d3234203d3e20323635333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:e6:5c:23:03:8b:fe:03:ac:9a:11:cd:1e:7a:9a:72:c1:
         77:70:49:34:14:8b:3a:b4:22:c0:bd:36:50:ab:bd:4b:cf:40:
         7a:67:ce:ab:b8:c4:3d:c4:4e:8b:a9:15:14:f1:00:f9:96:f1:
         c8:3c:58:b2:e1:ca:4e:34:a4:65:1b:c6:51:51:9b:11:8a:f6:
         09:f0:62:5c:28:f6:fa:53:12:1a:eb:55:a2:52:e6:62:5a:e0:
         93:41:da:64:f9:be:82:7b:15:17:bd:c2:72:aa:ed:6b:d2:8d:
         1a:75:2c:96:b0:2b:a9:a4:57:b7:0a:77:73:68:ef:36:27:e4:
         2d:2c:9f:be:c5:a5:5e:1c:38:55:3c:cd:82:66:76:79:a7:36:
         1f:22:97:1e:f8:92:d5:01:ad:37:0d:3a:38:a1:f4:d1:ff:7c:
         33:5f:51:9f:cc:71:79:6d:3c:90:11:40:1a:b9:6e:77:77:9b:
         22:8a:41:91:3d:13:59:31:1b:54:f4:d4:07:d6:2e:26:b4:9d:
         c0:b5:33:28:37:cd:5d:ea:23:fd:c7:49:5d:c2:53:3d:5c:87:
         c2:e9:26:ac:36:06:82:c1:5e:cb:78:8f:66:ee:fd:62:0f:df:
         39:8c:82:b3:29:5b:b6:3b:f6:5c:9a:05:42:29:61:5a:6c:72:
         10:f7:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:54:23 2026 by rpki-client