Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
File:                     3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa (raw, json)
Hash identifier:          060M3A9/9ADIUAF7/CsOLufL687txPE2BsYdN82ohtM=
Subject key identifier:   04:39:7D:78:8A:14:1C:6B:BE:C9:7A:46:82:44:D5:30:0C:7B:69:10
Certificate issuer:       /CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
Certificate serial:       04AD7F70F94BC730BF7F4C66A70E5FC032D82211
Authority key identifier: E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa
Signing time:             Thu 12 Mar 2026 17:19:23 +0000
ROA not before:           Thu 12 Mar 2026 17:14:23 +0000
ROA not after:            Thu 11 Mar 2027 17:19:23 +0000
asID:                     263022
IP address blocks:        186.249.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ad:7f:70:f9:4b:c7:30:bf:7f:4c:66:a7:0e:5f:c0:32:d8:22:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
        Validity
            Not Before: Mar 12 17:14:23 2026 GMT
            Not After : Mar 11 17:19:23 2027 GMT
        Subject: CN=04397D788A141C6BBEC97A468244D5300C7B6910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:98:23:ae:3b:35:db:ec:80:ba:6c:e9:16:4e:
                    75:cf:b9:18:7c:8e:0c:56:0c:00:9e:81:e5:79:93:
                    54:29:c1:9d:89:7a:49:d5:cd:51:a9:fc:2d:23:47:
                    81:d2:46:fd:c5:2b:b1:3f:16:1d:2b:c1:94:2e:c1:
                    4c:a4:04:08:df:37:d5:c5:07:e5:f7:22:ba:c1:f2:
                    6b:d8:06:24:1f:27:64:26:89:45:0d:95:01:f8:77:
                    c9:e7:7b:ea:76:f0:17:15:44:18:0c:8c:b1:4d:00:
                    91:6a:48:98:7c:5a:3e:a9:64:42:38:68:91:fc:4c:
                    da:72:d6:c7:57:15:71:d8:48:f9:fa:5a:53:0a:0d:
                    6b:36:a4:65:55:03:96:b0:a0:2a:45:08:63:1a:d8:
                    c0:5f:b9:38:4a:04:53:66:21:64:f1:2c:c5:f0:ff:
                    81:4a:44:a7:aa:10:d3:1f:0e:35:c6:5e:c3:ae:2e:
                    bc:20:ac:61:db:87:da:4b:91:3f:a5:2c:af:bd:2c:
                    d6:5f:dd:22:91:6e:bf:c4:ae:2c:d7:94:99:60:3a:
                    6e:a6:ac:a6:24:cd:cf:d4:50:a9:3f:2e:6b:09:2d:
                    f2:08:99:fd:07:1f:db:77:e5:e5:00:63:40:46:a0:
                    7b:0e:38:27:66:7c:48:7f:c3:83:ad:fe:55:2c:c6:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:39:7D:78:8A:14:1C:6B:BE:C9:7A:46:82:44:D5:30:0C:7B:69:10
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e31362e302f32312d3231203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:0b:a6:1b:84:e3:cf:df:be:39:dd:bf:c6:f1:fb:5e:10:
         ad:00:12:b6:42:e7:9d:d9:67:06:65:8d:77:2e:bf:87:0d:9c:
         03:0b:a0:a8:fb:62:ce:6e:38:1a:5e:db:6c:b3:7c:a7:54:3d:
         58:00:48:a6:e9:ba:39:1e:3b:6f:8a:1f:ad:01:42:ce:e5:bc:
         7a:22:d0:66:51:7a:2d:22:cb:23:d7:bd:c3:cc:62:b7:44:63:
         5f:26:ac:e6:fb:4d:e5:20:a3:a3:34:7d:03:32:4d:8d:91:71:
         a4:51:e6:9b:8a:48:d3:5e:27:e9:33:81:84:d5:d6:04:48:12:
         bc:5b:cd:09:5c:6a:29:78:84:ac:70:84:b7:05:e5:dc:97:af:
         94:91:08:89:9a:46:45:4e:a6:e4:5c:f1:3e:a5:61:3b:27:1f:
         b4:1d:32:3a:be:44:8c:82:d9:c1:1f:ac:55:47:42:18:9e:46:
         b0:87:34:21:50:1d:6b:d7:80:79:3e:05:55:cf:8f:b2:9c:33:
         8b:9f:77:9e:3b:ef:8a:91:e3:c6:cc:b6:9f:d5:02:cc:c9:5f:
         c6:d6:fe:22:20:59:98:79:bf:51:5a:f0:52:f2:e3:24:3b:17:
         aa:89:73:30:8b:13:e6:ac:6b:1e:ad:af:5f:d1:78:d9:57:9a:
         d6:33:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:46 2026 by rpki-client