Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
File:                     3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa (raw, json)
Hash identifier:          dBmQyEHk1QKOQTj2z+bL28t1HCKqDCGBjbMlLsYOEog=
Subject key identifier:   56:52:D8:92:0B:6B:3F:29:3E:C6:B7:54:D7:BA:B5:8E:09:97:D5:C4
Certificate issuer:       /CN=166002DF14C56775A516493F63DE105DB90809F3
Certificate serial:       0D14FAC2A0DC011185EF1E514BF4954593E593EC
Authority key identifier: 16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa
Signing time:             Thu 12 Mar 2026 20:26:01 +0000
ROA not before:           Thu 12 Mar 2026 20:21:01 +0000
ROA not after:            Thu 11 Mar 2027 20:26:01 +0000
asID:                     265239
IP address blocks:        167.250.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl
                          rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:14:fa:c2:a0:dc:01:11:85:ef:1e:51:4b:f4:95:45:93:e5:93:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166002DF14C56775A516493F63DE105DB90809F3
        Validity
            Not Before: Mar 12 20:21:01 2026 GMT
            Not After : Mar 11 20:26:01 2027 GMT
        Subject: CN=5652D8920B6B3F293EC6B754D7BAB58E0997D5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:1c:31:a2:ba:c2:2a:91:37:b1:8d:a8:9c:
                    00:ef:7e:e6:0c:4d:69:3c:45:5a:11:5d:68:52:c8:
                    0b:01:83:54:70:69:1d:ae:02:08:e6:18:45:2b:e2:
                    87:18:18:2e:b7:e2:01:1b:02:70:cf:17:81:9e:25:
                    02:c2:c2:12:ac:98:12:91:75:bb:97:8f:54:67:a1:
                    59:27:6e:08:87:a0:5d:e1:53:13:aa:4c:34:3e:96:
                    2e:8c:c8:1e:60:a4:39:98:65:22:91:f7:d8:1b:1d:
                    f6:2a:4e:e9:fc:d7:15:05:0e:f0:ac:34:b4:10:51:
                    e3:1c:24:e6:e3:41:51:c6:43:f8:a2:09:f1:f0:9f:
                    7a:77:0b:73:a4:c4:11:32:8b:9b:7b:c4:b7:bf:ef:
                    ce:9f:e1:ae:98:f6:45:30:3a:5b:40:b2:47:36:d2:
                    aa:95:fd:33:3c:f0:92:98:f9:09:1e:85:c4:1a:3d:
                    e2:6a:ae:d4:74:f0:c1:bd:6f:bf:88:ca:8a:3c:26:
                    00:bb:1f:93:ea:44:5b:9e:1f:da:96:13:01:22:06:
                    2e:47:d4:00:d9:60:dd:cd:5a:23:41:9b:73:82:d1:
                    74:dc:33:37:1e:63:e2:7d:bb:1a:b5:62:fd:01:15:
                    b5:0b:d4:5b:21:9e:f5:01:80:4e:5b:0b:b9:d0:5b:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:D8:92:0B:6B:3F:29:3E:C6:B7:54:D7:BA:B5:8E:09:97:D5:C4
            X509v3 Authority Key Identifier:
                keyid:16:60:02:DF:14:C5:67:75:A5:16:49:3F:63:DE:10:5D:B9:08:09:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/166002DF14C56775A516493F63DE105DB90809F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/166002DF14C56775A516493F63DE105DB90809F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VKLAfcNF6GBk5qEEsPe3DCDoPHusNoi4U6842dCi4wC/0/3136372e3235302e3235322e302f32322d3332203d3e20323635323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:aa:13:22:0c:c9:38:9c:2e:f4:3c:8e:99:d8:26:23:07:
         ad:7d:35:7a:5b:66:da:84:ca:0e:22:4b:d6:a0:e1:05:8d:f0:
         76:bd:e5:44:16:f0:46:cc:bb:f9:91:bd:3a:44:f4:5f:35:22:
         d0:a3:f3:a4:75:9a:6f:8d:a2:fc:a3:33:91:15:37:15:68:83:
         6a:9b:28:3e:44:1b:1b:08:99:48:49:59:e6:f5:7d:7d:49:c6:
         2b:4e:c8:05:21:08:bb:7b:60:aa:59:8d:ca:15:57:b7:ac:4a:
         ae:10:1a:39:9f:a9:c3:d0:76:b0:f5:c5:cc:aa:ef:41:3e:be:
         17:b5:a1:1c:ba:a6:16:c3:79:23:96:db:f0:6e:8e:3c:df:16:
         47:c2:0e:98:ed:8d:e6:26:13:7d:df:02:78:f0:eb:81:82:3d:
         22:58:3b:a3:7f:9f:fb:c6:09:c9:52:a6:83:e8:83:e5:da:d6:
         c7:f4:07:d2:cc:9d:0c:56:0d:ce:24:76:52:0b:20:a0:27:b1:
         a2:5d:ad:64:8e:de:b8:4f:05:db:2a:59:82:1d:c4:37:a4:53:
         ae:fd:bb:88:2e:e5:4e:a6:57:4a:3a:d4:d3:a7:0b:9f:d1:8a:
         62:c9:61:12:9a:4b:12:f8:92:9b:6d:46:92:de:30:da:31:ca:
         52:df:25:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:34 2026 by rpki-client