Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          e297c0OFzg3NbNJKMWeC3UiUEtzdt1q/y4DHtupqQ90=
Subject key identifier:   0D:D8:F0:2B:B4:51:BD:0E:A9:96:8B:C2:B5:F7:17:2C:77:61:C1:76
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       078FE6772121D0010420E4E029E4809CBA067917
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa
Signing time:             Fri 08 May 2026 15:31:52 +0000
ROA not before:           Fri 08 May 2026 15:26:52 +0000
ROA not after:            Fri 07 May 2027 15:31:52 +0000
asID:                     264863
IP address blocks:        168.205.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8f:e6:77:21:21:d0:01:04:20:e4:e0:29:e4:80:9c:ba:06:79:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: May  8 15:26:52 2026 GMT
            Not After : May  7 15:31:52 2027 GMT
        Subject: CN=0DD8F02BB451BD0EA9968BC2B5F7172C7761C176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a9:3c:69:cf:72:0d:8e:6e:c5:60:b6:b0:3a:
                    cf:80:a5:f1:7d:40:01:44:95:f0:47:2d:c1:eb:dc:
                    49:48:d3:13:03:67:1e:bf:33:23:d8:3b:c1:5c:c0:
                    b6:3e:9f:81:c1:8d:a6:03:83:7a:46:09:ca:62:a8:
                    9d:ea:2b:17:50:b2:9a:52:63:bb:5d:84:1f:84:0b:
                    7f:7a:ab:79:2f:2a:b0:d6:97:ac:14:fc:b4:1b:71:
                    35:d9:04:b5:93:fa:ff:c8:30:45:9a:29:79:da:6b:
                    a8:9a:f0:a6:4e:44:c7:52:6d:cb:a9:20:e6:89:35:
                    85:ff:9e:e8:ed:16:d5:77:e3:77:02:a3:c6:72:7b:
                    99:d3:0d:83:4c:80:a1:b5:c5:ad:42:b6:5f:e8:ef:
                    b8:ca:56:d3:d9:3c:7a:e8:4b:52:9b:a3:1b:8d:4c:
                    dc:9a:99:61:bb:ee:a9:4f:5d:14:3e:52:c5:22:61:
                    e3:b1:07:2e:6a:98:85:dc:1a:74:2e:26:4e:6e:dd:
                    e5:72:36:e5:de:31:f4:8a:f8:61:a9:3d:0f:d1:7e:
                    27:65:0b:9d:04:41:61:60:27:d7:ab:fe:d1:cb:6d:
                    e2:34:98:1c:c6:55:f7:9d:5b:10:7c:17:fe:de:d2:
                    d0:2d:e6:c5:0d:7e:42:ba:2d:bb:04:1c:ae:17:b8:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:F0:2B:B4:51:BD:0E:A9:96:8B:C2:B5:F7:17:2C:77:61:C1:76
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3235302e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d6:e9:37:2a:d5:32:7e:df:4f:0a:b0:6a:30:a4:db:8f:2f:
         df:00:97:58:70:0d:c4:c6:09:84:8d:e9:d3:9b:2a:29:6c:fa:
         0b:c6:a8:07:63:9c:86:70:5e:bc:7e:e1:69:d5:b3:df:de:5d:
         09:63:0b:0b:49:10:69:20:c4:f5:4b:21:fb:cb:d2:a3:0e:f3:
         74:8e:31:ff:18:94:f4:74:3f:2f:30:92:1f:3b:5b:1e:aa:41:
         eb:58:95:99:70:1b:54:4e:18:ec:9d:e3:e9:33:d6:e4:5d:5f:
         5b:4a:f3:52:69:ac:5b:a2:f0:6d:19:7e:5c:2b:28:92:02:a9:
         38:23:7f:90:b9:6a:9c:9e:76:4d:35:46:ab:07:c1:b2:5b:a1:
         86:a4:bf:c2:bd:5e:d2:7e:71:26:9e:74:77:9e:81:28:1e:15:
         b5:ea:b6:ed:55:e7:55:bc:6d:fa:be:f4:b2:ec:9b:76:43:50:
         5e:cf:7d:75:0a:fe:2f:81:d3:2a:fe:1d:89:af:17:4b:f9:fd:
         a1:39:4a:b8:b7:db:f9:4f:7b:77:f2:5f:1a:8f:05:2e:48:3f:
         24:32:5c:3a:cf:99:b9:ae:94:47:4c:82:75:52:21:66:82:a8:
         c4:66:7d:b8:80:f9:f0:a2:8a:d8:90:58:9c:6a:a3:ce:03:06:
         c7:fe:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:51:54 2026 by rpki-client