Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
File:                     3138372e312e3136322e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          JRulnVzNjh8cUtcK7n018MF4pqBo5WN5fSI29cVXDsY=
Subject key identifier:   6B:BD:0C:C1:AC:6B:A9:D2:3F:0A:67:F2:97:AA:B1:AC:77:80:6F:F3
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       65ED36F233D8E45D489829B9ABF44F98DB43F278
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:12 +0000
ROA not before:           Wed 11 Mar 2026 19:08:12 +0000
ROA not after:            Wed 10 Mar 2027 19:13:12 +0000
asID:                     28252
IP address blocks:        187.1.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:36:f2:33:d8:e4:5d:48:98:29:b9:ab:f4:4f:98:db:43:f2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:12 2026 GMT
            Not After : Mar 10 19:13:12 2027 GMT
        Subject: CN=6BBD0CC1AC6BA9D23F0A67F297AAB1AC77806FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:ed:c6:a7:2d:b8:8a:b1:b3:56:32:93:50:
                    78:f7:60:d0:81:63:25:08:a8:d4:b2:12:65:48:0a:
                    ae:fc:7f:49:65:b4:af:68:45:27:f5:98:c0:c9:e6:
                    42:e5:47:6a:0f:03:4f:03:d9:e1:09:5e:c2:89:23:
                    4b:c5:67:92:c4:5d:65:6e:1d:a1:a5:15:9b:9f:7f:
                    c7:f0:50:26:5b:b2:e9:94:91:8c:db:a2:b3:b1:2c:
                    f7:19:38:cb:3c:24:bb:16:7b:0a:94:c2:67:2d:56:
                    ea:d4:c1:a6:63:1c:c3:33:77:c5:de:e0:b1:9b:fa:
                    44:33:5a:03:0c:48:26:37:3a:ea:f9:d2:a7:a6:40:
                    bf:7e:46:90:3c:11:32:57:a1:4d:d5:c0:65:36:90:
                    37:be:57:d9:a4:8a:2a:ec:87:0b:e5:e9:bd:41:c4:
                    5f:c5:4a:55:47:58:93:8b:bb:0c:94:3f:2a:c6:8d:
                    81:9e:69:87:a5:15:86:9e:d1:a1:db:7b:d5:d2:f7:
                    e3:2b:e5:7e:a6:b8:1f:f3:6d:a1:92:74:ec:42:35:
                    18:d5:55:20:1f:a1:eb:bf:58:fc:6c:c7:ee:1f:58:
                    60:a0:66:1c:3a:3b:b9:bd:d6:85:af:2c:47:27:a6:
                    5d:63:56:03:dd:cc:78:da:71:3e:6d:07:e7:ca:63:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:0C:C1:AC:6B:A9:D2:3F:0A:67:F2:97:AA:B1:AC:77:80:6F:F3
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136322e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:68:61:6c:87:21:5c:6a:d4:e7:0d:35:94:5d:44:54:a3:f7:
         4a:7d:c0:36:90:f1:09:60:f9:15:c3:59:95:3e:51:49:21:df:
         d3:a8:e1:00:55:a7:3e:e5:01:79:22:5a:9b:a2:5a:b5:17:1f:
         93:0b:f8:7a:20:29:59:85:85:da:fb:49:f2:58:b2:fb:f1:b0:
         c1:04:c1:1a:a3:20:b1:6f:f6:4d:90:bd:ff:a7:23:0c:f7:d1:
         7f:2b:d8:ea:51:3e:a6:71:0e:2b:7e:ac:86:f1:28:14:32:e5:
         27:6c:6c:f5:dd:2e:14:c0:dc:a1:6d:76:52:9e:0a:af:06:05:
         ea:d5:65:cc:9f:1f:51:02:58:da:c6:02:0c:e3:31:59:dc:22:
         c1:64:b2:41:58:77:4b:8c:a8:7d:0d:3a:91:d8:09:a5:0c:16:
         5c:b2:99:9d:38:47:dc:40:31:06:07:7b:ef:b9:04:f5:39:67:
         10:dd:7b:74:34:e8:fd:64:18:be:c3:9c:6f:97:98:bd:40:46:
         a1:1b:34:94:0f:7b:3a:a2:38:f2:f9:b9:1c:1f:a3:93:87:b4:
         78:9c:db:7b:fc:ae:31:6d:7d:0d:f2:41:32:af:6c:a1:fb:d7:
         f7:05:fc:a2:eb:f4:40:6c:30:77:36:af:ff:28:c0:2b:bf:16:
         a9:f5:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:17:40 2026 by rpki-client