Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3136382e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          20dwp45xvzUYtWkGOpCAQ/4ABkNnDF4v2H4v7DZTglo=
Subject key identifier:   9A:AA:5E:86:E2:24:F9:62:9B:39:E0:46:9B:23:0E:9D:8C:64:60:F7
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       2D8AF141A54F807F844C7C5723DD4E43ED2EA546
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:16 +0000
ROA not before:           Wed 11 Mar 2026 19:08:16 +0000
ROA not after:            Wed 10 Mar 2027 19:13:16 +0000
asID:                     28252
IP address blocks:        187.1.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8a:f1:41:a5:4f:80:7f:84:4c:7c:57:23:dd:4e:43:ed:2e:a5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:16 2026 GMT
            Not After : Mar 10 19:13:16 2027 GMT
        Subject: CN=9AAA5E86E224F9629B39E0469B230E9D8C6460F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:82:ee:5b:b8:07:71:03:d0:d4:39:a8:d1:
                    28:61:f9:dc:1f:6b:c8:dd:95:e0:d4:41:7d:7f:d8:
                    52:c3:f9:2c:8e:38:80:9f:d6:c6:e0:a6:c2:7f:17:
                    32:92:2a:11:f1:81:18:94:ae:04:b5:21:c9:fc:fb:
                    95:2c:67:69:26:f8:50:9d:5a:fd:b2:27:e9:f1:62:
                    bd:12:36:8d:31:8c:8f:14:22:6d:80:8f:f0:4e:a1:
                    46:75:94:cc:a3:8b:cd:e2:a4:de:a2:fe:8b:54:f6:
                    c0:89:dc:28:87:4b:23:82:8c:74:21:03:ed:5b:bb:
                    c2:58:74:42:ea:f3:fc:ab:c2:86:24:46:ec:63:71:
                    ed:01:68:f2:95:1b:21:20:a5:47:26:c9:71:1d:cf:
                    09:99:5a:73:93:b0:a5:54:3b:bb:3c:ac:d4:2e:41:
                    65:16:2f:9c:65:70:1f:a9:e8:ed:5e:46:48:9c:0d:
                    c8:d7:d3:74:96:ee:98:88:a8:4a:1f:80:5f:19:f7:
                    fe:09:b6:d2:c0:77:5b:b0:c0:78:06:47:15:2c:06:
                    bc:73:61:09:e3:14:c8:07:67:9d:15:06:f1:03:b3:
                    af:71:9f:df:95:c8:15:3f:1c:d9:dd:3d:06:11:d9:
                    57:04:9a:0e:6e:80:6f:ef:8a:c0:c8:d6:c3:2c:cc:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AA:5E:86:E2:24:F9:62:9B:39:E0:46:9B:23:0E:9D:8C:64:60:F7
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:98:fb:55:88:03:14:49:fc:6b:80:50:96:1c:84:0e:a1:
         bb:b9:18:ef:8b:85:2e:96:5a:99:98:51:a6:3b:fa:01:3c:42:
         85:94:9f:cf:9f:87:e6:81:a1:79:dd:bf:1c:41:86:02:51:cf:
         c0:05:35:72:6e:44:e8:d1:a6:d1:d6:30:36:cc:e7:67:41:1d:
         82:55:01:1a:4e:e8:bd:f2:51:56:0d:c7:ca:d5:c5:92:3e:8e:
         56:ad:cd:f4:12:e8:7e:58:9c:28:96:44:1c:04:55:07:4c:dc:
         0b:f3:4e:26:53:8d:49:d5:d6:0e:c4:23:be:f0:b4:a6:d9:6f:
         95:01:02:c8:c6:69:c1:13:ef:54:59:e6:b8:57:db:cc:27:bd:
         61:ec:0c:5b:5c:a1:93:b7:3a:a5:e0:b2:f3:b5:34:43:24:b7:
         cb:44:98:7e:65:d7:c7:74:be:c1:58:44:ff:74:8c:20:48:5f:
         33:cd:89:43:37:b3:91:29:46:d4:33:0f:cc:9d:02:bf:18:70:
         35:f2:db:5c:6f:e2:5a:29:4d:95:54:2b:bc:13:f7:5e:68:b3:
         33:dc:f7:81:01:3f:ac:bc:cc:54:a7:80:3a:4b:b0:4a:d2:a2:
         9a:96:0f:40:6a:f3:e9:6c:2a:de:f5:aa:c6:6f:a1:6d:de:c5:
         d5:4c:a2:01
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULYrxQaVPgH+ETHxXI91OQ+0upUYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTZaFw0yNzAzMTAxOTEzMTZaMDMxMTAvBgNV
BAMTKDlBQUE1RTg2RTIyNEY5NjI5QjM5RTA0NjlCMjMwRTlEOEM2NDYwRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC994LuW7gHcQPQ1Dmo0Shh+dwf
a8jdleDUQX1/2FLD+SyOOICf1sbgpsJ/FzKSKhHxgRiUrgS1Icn8+5UsZ2km+FCd
Wv2yJ+nxYr0SNo0xjI8UIm2Aj/BOoUZ1lMyji83ipN6i/otU9sCJ3CiHSyOCjHQh
A+1bu8JYdELq8/yrwoYkRuxjce0BaPKVGyEgpUcmyXEdzwmZWnOTsKVUO7s8rNQu
QWUWL5xlcB+p6O1eRkicDcjX03SW7piIqEofgF8Z9/4JttLAd1uwwHgGRxUsBrxz
YQnjFMgHZ50VBvEDs69xn9+VyBU/HNndPQYR2VcEmg5ugG/visDI1sMszOAJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmqpehuIk+WKbOeBGmyMOnYxkYPcwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArsBqDANBgkqhkiG9w0BAQsFAAOCAQEAiEqY+1WIAxRJ
/GuAUJYchA6hu7kY74uFLpZamZhRpjv6ATxChZSfz5+H5oGhed2/HEGGAlHPwAU1
cm5E6NGm0dYwNsznZ0EdglUBGk7ovfJRVg3HytXFkj6OVq3N9BLoflicKJZEHARV
B0zcC/NOJlONSdXWDsQjvvC0ptlvlQECyMZpwRPvVFnmuFfbzCe9YewMW1yhk7c6
peCy87U0QyS3y0SYfmXXx3S+wVhE/3SMIEhfM82JQzezkSlG1DMPzJ0CvxhwNfLb
XG/iWilNlVQrvBP3XmizM9z3gQE/rLzMVKeAOkuwStKimpYPQGrz6Wwq3vWqxm+h
bd7F1UyiAQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:14 2026 by rpki-client