Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa
File:                     3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa (raw, json)
Hash identifier:          70jp4biqw0xiyfEeCkbOzmUvpBoJSkzi7x3cxRzmlyQ=
Subject key identifier:   42:DB:D2:84:14:5F:D9:AC:6B:41:90:64:16:69:52:CE:E9:C7:1D:9B
Certificate issuer:       /CN=E0535C65CD18E8B560ACC81BB4943E3B10085C1D
Certificate serial:       2CBDC1C0E5889ED319C1B689BD168E69D9B49DE9
Authority key identifier: E0:53:5C:65:CD:18:E8:B5:60:AC:C8:1B:B4:94:3E:3B:10:08:5C:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa
Signing time:             Tue 17 Mar 2026 01:38:21 +0000
ROA not before:           Tue 17 Mar 2026 01:33:21 +0000
ROA not after:            Tue 16 Mar 2027 01:38:21 +0000
asID:                     264444
IP address blocks:        168.195.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.crl
                          rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bd:c1:c0:e5:88:9e:d3:19:c1:b6:89:bd:16:8e:69:d9:b4:9d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0535C65CD18E8B560ACC81BB4943E3B10085C1D
        Validity
            Not Before: Mar 17 01:33:21 2026 GMT
            Not After : Mar 16 01:38:21 2027 GMT
        Subject: CN=42DBD284145FD9AC6B419064166952CEE9C71D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:b4:82:c7:45:c6:3c:f7:d2:b8:f8:f3:52:
                    b6:64:09:24:95:6d:d6:84:3b:9c:bb:80:00:7d:77:
                    bc:9b:f9:33:6a:81:20:f8:78:81:17:94:a5:48:13:
                    9a:85:be:1c:84:75:b5:e0:8c:17:c2:2a:7b:6e:d0:
                    1b:d1:d2:e6:b2:18:9e:2b:08:27:82:4b:2c:7c:6f:
                    01:23:1e:e4:04:dd:8c:f1:86:cc:65:1c:d4:18:80:
                    67:37:09:b6:02:ff:2f:78:b9:56:f8:54:d4:ac:a0:
                    94:4d:f3:64:e4:3e:29:2f:5a:4e:4c:0c:76:a0:eb:
                    4d:81:6a:9f:3d:49:97:0b:e6:0c:60:1f:b8:94:04:
                    94:36:ca:e6:bb:fd:63:64:46:e8:d7:7f:e2:e5:d5:
                    f9:a1:d1:09:d1:7a:48:83:08:71:a4:bd:bb:54:a2:
                    2c:17:3c:d2:49:bc:ce:01:9f:06:85:22:be:f1:10:
                    27:35:51:50:be:54:72:72:56:4c:f8:81:cf:40:33:
                    b2:8e:10:85:99:16:8a:1f:c1:09:4f:8f:79:04:f3:
                    a7:88:b4:2e:d1:dd:04:03:ff:3e:2b:ec:64:95:f6:
                    41:9f:83:26:78:91:6c:af:7f:90:5c:a0:55:74:4e:
                    83:43:64:b5:a0:2d:cf:13:5d:74:db:9e:50:a6:6f:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DB:D2:84:14:5F:D9:AC:6B:41:90:64:16:69:52:CE:E9:C7:1D:9B
            X509v3 Authority Key Identifier:
                keyid:E0:53:5C:65:CD:18:E8:B5:60:AC:C8:1B:B4:94:3E:3B:10:08:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0535C65CD18E8B560ACC81BB4943E3B10085C1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VXVZqr7X4y7PQdyVP4X7nYahvkTnDGUuqXpw6fgwrJ2/0/3136382e3139352e36302e302f32322d3234203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:5d:83:c3:a0:80:21:35:b4:37:24:33:0c:d8:6a:60:ad:
         54:3e:85:73:af:6a:44:8c:e9:c9:92:76:31:5b:09:d3:71:0f:
         1e:90:bf:13:0a:f4:8a:81:d6:ea:6c:94:d2:e7:a3:b8:f1:7b:
         19:c2:a6:a1:d0:f9:4f:d2:ca:c6:92:22:f7:6a:73:de:e8:c1:
         48:ee:6d:86:b1:11:05:8f:fc:1c:13:24:8f:b5:d6:10:13:93:
         da:a0:8f:58:4d:24:ae:64:01:ca:bc:11:6f:93:c3:68:03:87:
         35:36:4a:a7:1e:a7:a6:c0:ee:59:c9:f4:75:75:28:4c:f2:47:
         75:c9:a4:16:4e:1d:7c:02:00:b1:be:39:5c:62:df:a9:30:2e:
         e2:46:33:c7:ca:a7:f5:44:24:fb:d2:c1:8b:cb:ca:52:41:91:
         a1:f0:08:8c:2f:28:48:6a:1a:dd:9f:0b:8e:92:fb:c4:96:fb:
         54:ea:95:46:7d:1b:74:4a:4b:1e:32:5b:be:ba:18:fe:0e:18:
         84:a8:c1:ce:23:3c:ef:2f:a7:64:6b:85:30:59:6a:3b:0a:7b:
         33:82:11:fe:02:1e:86:1d:ae:02:5f:88:1e:ab:be:ff:a4:7f:
         a7:b5:a0:c0:85:67:ef:03:e4:dd:08:44:ee:54:1e:8d:ec:24:
         ae:68:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:19:30 2026 by rpki-client