Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa
File:                     3138372e312e3137322e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          s7Y1Vzh5RRUCF5H7LVGZhbvYvs4AkmiwnvybqgBHIeI=
Subject key identifier:   A6:FA:EA:9D:A3:0B:F0:1B:61:36:85:0E:C1:08:92:99:6D:AE:0A:63
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       14465A5C245109A2AA80F164E0EC812B84DD3EE2
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:19 +0000
ROA not before:           Wed 11 Mar 2026 19:08:19 +0000
ROA not after:            Wed 10 Mar 2027 19:13:19 +0000
asID:                     28252
IP address blocks:        187.1.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:46:5a:5c:24:51:09:a2:aa:80:f1:64:e0:ec:81:2b:84:dd:3e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:19 2026 GMT
            Not After : Mar 10 19:13:19 2027 GMT
        Subject: CN=A6FAEA9DA30BF01B6136850EC10892996DAE0A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:10:0e:e2:14:3c:85:16:a2:90:19:5a:53:
                    d1:e3:cd:bc:8f:ef:fc:83:57:3a:43:bd:dd:b3:5b:
                    9d:78:34:74:b6:a5:6a:80:34:b6:b2:38:e2:3e:e2:
                    16:10:5c:76:53:d7:27:8f:4d:54:d0:d5:9b:56:b9:
                    0d:67:bc:d6:39:86:4d:2d:f2:20:9d:58:05:76:5c:
                    f4:84:24:dd:9a:bf:05:98:81:2a:83:77:22:2d:f7:
                    66:cf:90:0b:20:5f:d0:9c:bb:15:95:4a:ff:cf:63:
                    e8:65:ae:f3:0e:20:0e:db:11:78:1e:58:a6:e5:25:
                    0b:68:4b:6a:ea:86:8e:04:03:7a:1d:c0:f6:3f:d3:
                    b8:8f:63:4e:eb:f1:6d:17:c0:6a:f3:7a:e4:d6:4a:
                    b8:26:a9:54:8d:ff:fd:0b:a3:84:02:ab:27:94:7c:
                    a2:e8:64:d6:6b:db:8f:85:37:a0:f1:4b:b1:fa:ef:
                    55:9c:96:da:e8:d9:9c:25:7a:35:e2:de:5c:7c:26:
                    9d:f4:40:ce:d7:2e:e7:51:13:f8:5d:71:bc:1e:a0:
                    5e:ce:7d:93:d8:35:45:8c:d6:cd:1a:5f:36:fe:0e:
                    27:ad:79:58:32:70:86:1c:bc:e4:ab:6a:7b:09:06:
                    31:db:27:70:e6:ee:bc:24:8d:4c:93:a5:94:94:54:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:EA:9D:A3:0B:F0:1B:61:36:85:0E:C1:08:92:99:6D:AE:0A:63
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3138372e312e3137322e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:66:ab:a3:f8:c3:2f:d5:57:f5:9e:f1:17:43:64:b0:68:9b:
         b1:37:be:dd:90:12:b7:f1:6d:90:0f:f7:6a:7c:20:3f:f5:78:
         81:d2:e4:ed:f6:80:82:42:9f:2e:62:bc:be:61:f1:dd:3c:8a:
         cc:45:ba:22:db:32:d7:26:99:ce:73:c0:d3:46:50:15:00:1a:
         d5:d1:6d:04:e2:3f:88:8d:e1:3f:fc:0d:91:2e:39:65:45:78:
         44:27:94:35:53:b3:00:d7:86:e7:e7:ea:21:54:30:dc:67:5b:
         12:de:89:ca:39:0a:46:f7:90:28:61:83:6f:c9:21:86:07:bd:
         0c:18:be:d2:5a:37:f7:f2:09:30:d0:62:56:6a:1a:f1:e3:3a:
         30:99:4d:d2:2b:df:f3:43:3e:0f:1c:f6:9b:17:f9:f7:70:2c:
         3c:05:be:6e:30:b2:79:cf:4e:e4:e3:7c:a1:10:91:97:25:26:
         e2:84:0c:a6:26:bf:6b:ad:21:9d:48:53:6d:f6:10:6f:f3:bd:
         c3:90:15:da:81:40:8f:64:fc:3f:34:ad:a3:75:45:58:ac:22:
         75:64:24:44:88:4e:6a:b4:89:6f:d2:f0:b2:3d:b4:a6:3b:47:
         98:ec:ed:4d:c4:52:a4:f5:92:f7:75:82:32:76:e3:3c:e7:28:
         5a:3f:a5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:48 2026 by rpki-client