Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32332d3233203d3e203238323532.roa
File:                     3138372e312e3136382e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          yB5X3NEF6TvZSDUE67RrdYqqzO0CHJ52HkUatzNVKqs=
Subject key identifier:   17:A1:3B:93:27:40:50:73:6C:83:C4:04:0D:3F:92:B9:5A:00:A3:F5
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       604CED77523D2AC23C6E7C08A022827D939205A9
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:16 +0000
ROA not before:           Wed 11 Mar 2026 19:08:16 +0000
ROA not after:            Wed 10 Mar 2027 19:13:16 +0000
asID:                     28252
IP address blocks:        187.1.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4c:ed:77:52:3d:2a:c2:3c:6e:7c:08:a0:22:82:7d:93:92:05:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:16 2026 GMT
            Not After : Mar 10 19:13:16 2027 GMT
        Subject: CN=17A13B93274050736C83C4040D3F92B95A00A3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b6:69:ef:d6:8b:21:c2:e0:39:f5:89:69:51:
                    09:df:2c:9c:92:0f:81:fc:70:c9:de:e2:92:0c:b2:
                    2f:ce:47:5e:6b:be:65:92:9d:b5:a8:71:60:b3:83:
                    dd:ef:d4:46:7b:cd:63:a6:a0:f4:98:89:73:84:ca:
                    f3:58:16:d8:2f:a5:75:37:39:41:35:b3:43:64:9f:
                    04:64:33:2c:6a:36:11:f5:88:28:7a:d1:2d:e4:2f:
                    6d:3c:ab:34:f5:af:0a:84:ae:93:9f:2b:f4:8e:b4:
                    36:14:7b:24:2b:82:16:09:e9:1a:18:f4:99:b6:7e:
                    0c:64:86:9c:f2:95:36:bc:31:1b:18:37:45:66:98:
                    24:fc:ce:9b:73:c1:5c:59:b8:4f:2e:79:df:be:16:
                    a7:49:fb:2d:0f:a5:44:52:88:9a:99:7e:1d:13:7e:
                    00:83:c3:dc:78:57:1c:bb:03:67:d0:61:c1:79:80:
                    03:0e:83:3b:38:21:84:03:5b:57:2c:f6:95:91:ce:
                    76:6f:7a:b5:a0:4a:74:60:d4:7c:04:ea:e0:44:ba:
                    05:a6:16:85:68:88:d9:3c:e7:5c:71:8b:2f:73:e9:
                    30:84:78:0a:c9:6a:b3:da:59:61:84:24:49:45:58:
                    b4:d8:e4:8d:ef:31:f4:ff:8f:3b:00:96:7c:62:76:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:3B:93:27:40:50:73:6C:83:C4:04:0D:3F:92:B9:5A:00:A3:F5
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3136382e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:f7:81:02:70:d8:13:06:93:3b:3d:51:16:26:3d:d4:57:
         4a:9a:fd:45:d5:2d:53:a7:d5:fa:31:b8:ce:a0:74:66:f7:ad:
         42:d9:78:2d:c9:83:48:d0:fe:fe:a6:43:78:30:20:3a:8e:fa:
         41:84:cf:e2:43:3c:dd:90:84:40:f0:69:68:eb:0a:ca:8d:92:
         fd:d1:bc:00:19:02:dc:52:1d:57:30:b9:83:86:47:76:3e:4b:
         a6:c9:5c:52:16:8c:35:e0:68:34:9b:77:66:0a:ee:9f:f4:9f:
         06:85:93:2a:ba:9e:c7:1a:32:5b:92:81:a9:6b:9f:61:1e:96:
         3f:9f:10:fa:ab:ff:a0:84:11:a9:e3:d9:d4:a2:60:f3:c3:8d:
         f6:77:f4:18:f9:00:5b:c4:ff:c6:9e:e3:9d:96:72:f0:bd:86:
         21:6e:f8:f3:95:9d:8d:f5:2b:fa:f9:59:1b:f9:3a:91:a8:e2:
         b1:c0:60:a5:f6:ff:34:39:14:04:d8:60:df:4a:38:d5:25:3a:
         ae:85:73:b3:58:a7:e5:80:26:39:c3:62:54:a2:07:8f:59:76:
         3b:96:44:d6:98:ba:64:d8:d3:fc:b2:16:03:0c:1b:90:f4:27:
         9a:41:d4:4a:1a:7e:c2:8d:10:ce:45:e9:e8:bf:8c:c3:4b:2e:
         c4:99:a2:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYEztd1I9KsI8bnwIoCKCfZOSBakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTZaFw0yNzAzMTAxOTEzMTZaMDMxMTAvBgNV
BAMTKDE3QTEzQjkzMjc0MDUwNzM2QzgzQzQwNDBEM0Y5MkI5NUEwMEEzRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtmnv1oshwuA59YlpUQnfLJyS
D4H8cMne4pIMsi/OR15rvmWSnbWocWCzg93v1EZ7zWOmoPSYiXOEyvNYFtgvpXU3
OUE1s0NknwRkMyxqNhH1iCh60S3kL208qzT1rwqErpOfK/SOtDYUeyQrghYJ6RoY
9Jm2fgxkhpzylTa8MRsYN0VmmCT8zptzwVxZuE8ued++FqdJ+y0PpURSiJqZfh0T
fgCDw9x4Vxy7A2fQYcF5gAMOgzs4IYQDW1cs9pWRznZverWgSnRg1HwE6uBEugWm
FoVoiNk851xxiy9z6TCEeArJarPaWWGEJElFWLTY5I3vMfT/jzsAlnxidjp7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUF6E7kydAUHNsg8QEDT+SuVoAo/UwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzODM3MmUzMTJlMzEzNjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMy
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbsBqDANBgkqhkiG9w0BAQsFAAOCAQEAHk/3gQJw2BMG
kzs9URYmPdRXSpr9RdUtU6fV+jG4zqB0ZvetQtl4LcmDSND+/qZDeDAgOo76QYTP
4kM83ZCEQPBpaOsKyo2S/dG8ABkC3FIdVzC5g4ZHdj5LpslcUhaMNeBoNJt3Zgru
n/SfBoWTKrqexxoyW5KBqWufYR6WP58Q+qv/oIQRqePZ1KJg88ON9nf0GPkAW8T/
xp7jnZZy8L2GIW7485WdjfUr+vlZG/k6kajiscBgpfb/NDkUBNhg30o41SU6roVz
s1in5YAmOcNiVKIHj1l2O5ZE1pi6ZNjT/LIWAwwbkPQnmkHUShp+wo0QzkXp6L+M
w0suxJmi2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:50 2026 by rpki-client