Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa
File:                     3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa (raw, json)
Hash identifier:          0tWlF3r7MoESXMSn3XZoIM/FwrCxcF9s5v4X1xo5eHY=
Subject key identifier:   4F:9C:2E:FE:57:2C:FC:5D:3B:DF:D1:F6:AF:43:26:06:A6:09:45:98
Certificate issuer:       /CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
Certificate serial:       348322CD0340EBDCFCFA0F00C243138FC500343A
Authority key identifier: D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa
Signing time:             Mon 16 Mar 2026 19:07:40 +0000
ROA not before:           Mon 16 Mar 2026 19:02:40 +0000
ROA not after:            Mon 15 Mar 2027 19:07:40 +0000
asID:                     265181
IP address blocks:        167.249.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl
                          rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:83:22:cd:03:40:eb:dc:fc:fa:0f:00:c2:43:13:8f:c5:00:34:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D15CFF6FAC8944C245C77298AB15D18C406D4FDC
        Validity
            Not Before: Mar 16 19:02:40 2026 GMT
            Not After : Mar 15 19:07:40 2027 GMT
        Subject: CN=4F9C2EFE572CFC5D3BDFD1F6AF432606A6094598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:ec:68:16:e9:b1:2c:b0:55:29:bf:45:42:
                    55:6c:25:61:d1:8c:7c:71:75:63:03:70:5c:0b:c7:
                    9c:18:1d:bd:44:6e:e9:1b:42:30:49:bf:b3:f2:b2:
                    eb:1e:84:39:75:94:cb:90:36:45:1d:73:74:a4:4b:
                    8d:f0:23:73:75:5b:58:2d:37:4b:1a:4a:58:e5:b4:
                    a8:e6:85:ea:af:d2:1b:b0:ca:50:bb:ae:00:f3:f7:
                    84:fc:d0:7d:67:e3:c2:c9:6a:36:b6:6a:be:bf:a2:
                    42:96:4e:65:c7:86:f0:21:48:c0:1d:80:ac:0c:30:
                    fd:c1:89:d8:8d:4c:28:09:95:c8:2a:63:08:d4:d9:
                    ff:21:4e:89:75:0c:8f:38:ee:a5:18:bc:fd:93:16:
                    8b:7b:89:0d:3b:02:58:2e:b8:57:58:e5:85:91:c2:
                    dc:82:fd:d0:22:70:33:a2:4f:15:bf:2f:29:2c:1b:
                    fe:32:97:65:68:6c:65:1d:29:a4:bb:b9:01:e5:0c:
                    90:46:53:8a:3e:72:d6:ac:3e:3a:1d:4c:ac:9a:a1:
                    43:1b:95:71:b9:c4:b1:4c:58:c7:6e:38:96:80:c6:
                    6f:13:97:68:c5:88:7a:cd:70:6a:fd:e5:f0:03:ca:
                    3a:ac:85:a3:83:85:3a:19:07:58:f0:8b:82:b1:d1:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:2E:FE:57:2C:FC:5D:3B:DF:D1:F6:AF:43:26:06:A6:09:45:98
            X509v3 Authority Key Identifier:
                keyid:D1:5C:FF:6F:AC:89:44:C2:45:C7:72:98:AB:15:D1:8C:40:6D:4F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D15CFF6FAC8944C245C77298AB15D18C406D4FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/3136372e3234392e3133322e302f32342d3234203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:2f:55:9b:73:4b:78:e1:6b:56:99:24:d2:52:3e:5f:98:de:
         79:7c:62:d8:b4:79:71:b3:39:56:49:10:25:d4:f0:2d:cc:56:
         5e:f7:46:e2:53:b2:f6:46:b2:f1:78:42:e3:d3:97:e0:df:bf:
         89:65:a7:a6:7a:89:47:be:b0:29:a3:a8:ce:66:f9:4f:cd:08:
         a8:42:6b:7d:a3:70:d1:f8:a8:90:9c:8c:60:e8:50:d8:5f:b5:
         c5:27:94:30:15:9f:2f:bb:d1:59:30:f7:ff:63:20:f7:a6:86:
         1b:4d:c0:43:68:ab:5f:ce:f0:6d:a3:b4:29:1e:66:da:3c:b9:
         f7:04:4b:2d:7c:1a:1a:4e:c7:b1:8b:93:00:d5:25:49:5a:a0:
         aa:95:08:65:02:8f:3c:54:42:3f:b9:e7:b7:65:4a:70:4d:8f:
         de:c5:ff:3f:a2:f2:59:7d:ad:57:34:a7:19:62:0e:cb:cc:99:
         53:12:02:2e:5b:02:43:4c:06:63:1f:da:ca:60:a5:11:70:5d:
         8b:58:49:b1:79:b8:cf:98:0d:05:37:9c:b1:3f:e1:5d:13:bb:
         b0:32:84:4f:4f:6d:68:a1:a9:aa:ab:fc:07:f0:71:61:57:b0:
         88:ae:25:48:4a:17:0c:a4:89:8f:f7:cc:50:70:e4:5f:78:7b:
         22:ef:1d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:08 2026 by rpki-client