Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32312d3231203d3e203238323532.roa
File:                     3138372e312e3136302e302f32312d3231203d3e203238323532.roa (raw, json)
Hash identifier:          WvzW8Z6jH0ZA3K6TZk2Uz+Yra2N039mdjasYC2ZgyEs=
Subject key identifier:   B0:8B:6F:FE:CE:CA:46:0E:1F:98:92:83:9B:E2:D4:BC:D1:4F:49:79
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       55CA4D66C2335EEE456D4E7917FBE98015C75B1C
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32312d3231203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:20 +0000
ROA not before:           Wed 11 Mar 2026 19:08:20 +0000
ROA not after:            Wed 10 Mar 2027 19:13:20 +0000
asID:                     28252
IP address blocks:        187.1.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ca:4d:66:c2:33:5e:ee:45:6d:4e:79:17:fb:e9:80:15:c7:5b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:20 2026 GMT
            Not After : Mar 10 19:13:20 2027 GMT
        Subject: CN=B08B6FFECECA460E1F9892839BE2D4BCD14F4979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:97:7e:76:2b:b4:0c:05:e1:1c:62:8b:ee:
                    c5:0a:b0:38:b3:b4:7c:b4:2c:32:69:56:29:84:de:
                    34:79:d1:60:b4:55:78:db:bc:74:4b:e8:f8:b7:04:
                    7d:c0:be:e7:84:f9:3a:53:fc:65:3f:35:c2:62:a4:
                    ec:14:97:4c:be:45:07:b7:8a:98:e7:d4:ea:a1:43:
                    3d:96:e0:27:f9:ca:1a:0d:ce:91:2e:22:cf:c8:53:
                    d9:a4:36:e6:75:59:ae:eb:ed:21:e1:a1:34:64:77:
                    ba:0e:b8:bf:b2:2d:22:9e:f3:71:b1:91:03:92:02:
                    fc:09:84:61:ad:4a:4e:06:89:4a:76:bf:f5:7f:2f:
                    37:61:1b:3e:ae:b7:81:85:5f:18:bc:9d:9b:b5:6f:
                    af:c4:c7:50:90:b6:b2:bc:aa:1e:49:49:66:d1:50:
                    a4:10:1c:7b:c5:96:38:c0:4d:93:35:8b:c9:ff:36:
                    38:21:99:6d:8d:b9:7b:63:4f:26:c3:28:27:2b:7d:
                    c2:15:5b:00:df:9a:80:7e:1f:c8:e9:99:fb:7e:3b:
                    f3:35:37:1f:7c:f8:f6:26:0f:a5:af:5b:3b:50:b1:
                    92:96:f2:e4:fb:c0:18:b7:eb:6d:63:3b:eb:c9:43:
                    9e:d1:d7:20:02:e1:ca:b5:ef:fe:27:72:32:fe:35:
                    72:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:6F:FE:CE:CA:46:0E:1F:98:92:83:9B:E2:D4:BC:D1:4F:49:79
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136302e302f32312d3231203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:d9:18:06:50:b0:29:69:32:95:21:b3:c8:77:50:51:26:e9:
         6c:1e:76:77:58:e3:35:f4:ef:30:85:4b:dd:bd:e0:97:15:1f:
         46:32:f4:ba:af:64:b8:04:76:c4:de:66:f4:a1:fc:39:e0:9b:
         77:6b:42:d9:68:f6:31:8b:7a:93:56:f5:db:3d:7a:c2:47:d0:
         94:58:6a:49:8b:34:c7:4b:31:05:28:60:74:7d:42:d6:f7:2d:
         a2:67:d9:97:43:47:3c:45:44:d5:41:6a:23:58:1d:89:be:cc:
         22:77:a3:77:e9:2d:3d:08:e5:de:27:49:d1:f2:31:8d:e4:43:
         3d:4f:80:c1:46:6c:1e:f9:c3:e5:50:76:7d:7c:b6:26:23:99:
         8d:dd:a0:54:7f:47:ba:82:23:12:9b:8e:b9:e4:79:d4:ba:24:
         37:b8:80:96:c4:a8:5c:54:52:25:e9:05:7a:72:d9:62:51:3e:
         c8:4f:cc:52:c9:9d:e9:ed:c8:eb:61:0c:6f:30:50:c2:4e:2d:
         1a:25:4a:18:34:45:72:81:52:49:2e:55:9f:fa:d3:84:43:93:
         a6:8b:92:ac:47:06:34:75:ad:10:f3:df:ef:50:26:a8:08:4a:
         fe:38:18:8d:9d:4e:a4:86:57:04:93:63:19:3d:81:1c:f2:aa:
         56:f9:eb:f3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVcpNZsIzXu5FbU55F/vpgBXHWxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MjBaFw0yNzAzMTAxOTEzMjBaMDMxMTAvBgNV
BAMTKEIwOEI2RkZFQ0VDQTQ2MEUxRjk4OTI4MzlCRTJENEJDRDE0RjQ5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m5d+diu0DAXhHGKL7sUKsDiz
tHy0LDJpVimE3jR50WC0VXjbvHRL6Pi3BH3AvueE+TpT/GU/NcJipOwUl0y+RQe3
ipjn1OqhQz2W4Cf5yhoNzpEuIs/IU9mkNuZ1Wa7r7SHhoTRkd7oOuL+yLSKe83Gx
kQOSAvwJhGGtSk4GiUp2v/V/LzdhGz6ut4GFXxi8nZu1b6/Ex1CQtrK8qh5JSWbR
UKQQHHvFljjATZM1i8n/NjghmW2NuXtjTybDKCcrfcIVWwDfmoB+H8jpmft+O/M1
Nx98+PYmD6WvWztQsZKW8uT7wBi3621jO+vJQ57R1yAC4cq17/4ncjL+NXKHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUsItv/s7KRg4fmJKDm+LUvNFPSXkwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNjMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7sBoDANBgkqhkiG9w0BAQsFAAOCAQEAaNkYBlCwKWky
lSGzyHdQUSbpbB52d1jjNfTvMIVL3b3glxUfRjL0uq9kuAR2xN5m9KH8OeCbd2tC
2Wj2MYt6k1b12z16wkfQlFhqSYs0x0sxBShgdH1C1vctomfZl0NHPEVE1UFqI1gd
ib7MInejd+ktPQjl3idJ0fIxjeRDPU+AwUZsHvnD5VB2fXy2JiOZjd2gVH9HuoIj
EpuOueR51LokN7iAlsSoXFRSJekFenLZYlE+yE/MUsmd6e3I62EMbzBQwk4tGiVK
GDRFcoFSSS5Vn/rThEOTpouSrEcGNHWtEPPf71AmqAhK/jgYjZ1OpIZXBJNjGT2B
HPKqVvnr8w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:20:27 2026 by rpki-client