Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
File:                     3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa (raw, json)
Hash identifier:          pEzjlWsNo0BCniIZ0WKtWIkzQAfBs4i+iCRmgFXPJZE=
Subject key identifier:   AB:70:80:77:86:64:84:DA:26:95:76:4D:D9:AC:90:EF:70:D9:F2:1D
Certificate issuer:       /CN=02DC74163A88F81D8B63F23F57A7016D972478F4
Certificate serial:       49BADAC5C8E71E2CDE7D8D4FF41B5C71B81C1C1A
Authority key identifier: 02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa
Signing time:             Tue 30 Jun 2026 19:02:27 +0000
ROA not before:           Tue 30 Jun 2026 18:57:27 +0000
ROA not after:            Tue 29 Jun 2027 19:02:27 +0000
asID:                     265455
IP address blocks:        168.196.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl
                          rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ba:da:c5:c8:e7:1e:2c:de:7d:8d:4f:f4:1b:5c:71:b8:1c:1c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02DC74163A88F81D8B63F23F57A7016D972478F4
        Validity
            Not Before: Jun 30 18:57:27 2026 GMT
            Not After : Jun 29 19:02:27 2027 GMT
        Subject: CN=AB708077866484DA2695764DD9AC90EF70D9F21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:01:11:70:49:34:6c:0e:0c:97:c8:9e:48:a0:
                    26:5f:cc:3e:93:ba:a5:bc:31:46:5c:ad:04:22:9c:
                    41:b4:62:5d:bf:ef:e0:f3:ad:ba:7c:d1:e2:78:e4:
                    0b:49:63:38:a8:b8:e6:5d:db:f1:3e:34:5d:d8:b9:
                    5d:e7:1e:5c:e5:31:30:66:bb:ce:3b:e2:b1:25:43:
                    5b:af:80:34:a1:90:02:b6:0e:95:c3:f7:d7:6b:98:
                    ef:79:9e:01:dd:7f:8a:07:2e:52:0d:76:75:a2:48:
                    8a:a9:47:a3:1f:3a:46:b1:db:00:6d:9a:f6:11:50:
                    10:03:b1:d8:14:73:e3:5c:51:0c:0d:80:7a:ad:10:
                    e7:8a:ca:ef:b9:22:a4:b7:e5:6d:81:81:7a:b6:05:
                    e7:33:62:ac:fa:ce:1b:b9:52:07:6b:5a:51:06:79:
                    b8:48:5d:d9:ac:df:69:24:95:0d:85:23:c4:5a:58:
                    e9:83:bf:74:1a:f5:e6:03:d5:dd:f3:08:8f:43:5a:
                    92:df:ea:d3:05:f9:13:bb:7c:20:83:42:0d:5f:72:
                    d2:6c:41:8c:d2:ed:93:27:24:6f:35:bc:42:97:24:
                    c5:d8:a4:f5:91:05:e6:3a:c0:61:d9:40:d8:ec:cd:
                    a7:e8:ea:86:e0:b7:8a:00:76:22:02:bc:8e:af:1a:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:80:77:86:64:84:DA:26:95:76:4D:D9:AC:90:EF:70:D9:F2:1D
            X509v3 Authority Key Identifier:
                keyid:02:DC:74:16:3A:88:F8:1D:8B:63:F2:3F:57:A7:01:6D:97:24:78:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/02DC74163A88F81D8B63F23F57A7016D972478F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02DC74163A88F81D8B63F23F57A7016D972478F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9saLdbnq8i3bfqBmJh53RYECLF4MoLanF7LuK8pzgXU1/0/3136382e3139362e37362e302f32322d3234203d3e20323635343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:cb:22:6b:aa:b7:93:ff:f5:ca:cf:3b:86:f3:7f:32:ff:39:
         a0:17:4e:42:e6:bd:0d:86:4b:e4:e0:b5:20:57:20:a2:9b:98:
         a4:6b:1f:89:8f:84:03:e0:6c:09:f3:9c:98:ef:49:57:66:73:
         21:2f:a3:94:8b:0e:be:e9:25:b8:75:84:ac:be:05:ea:01:39:
         f4:14:6a:20:1b:1d:90:a9:71:11:9c:c0:74:56:8f:c7:61:3f:
         83:12:eb:10:45:05:52:60:07:83:7b:f9:20:96:79:67:6a:bf:
         a4:82:2c:a5:ee:1b:9e:7d:8e:dd:61:c3:48:68:4c:24:cc:b4:
         0c:e8:f5:50:ba:ea:a2:c1:aa:8a:53:36:fe:ef:ff:54:3e:66:
         a5:a5:e0:9e:80:79:f1:8a:04:86:05:40:f2:fd:45:6d:6e:fd:
         f4:07:a6:4d:14:08:34:e5:6d:39:fd:84:b0:7b:4e:b0:ca:c1:
         f0:8f:95:55:22:2a:fb:29:d5:4c:43:51:e1:35:97:fc:64:3d:
         4e:80:5e:d2:d9:a6:9d:da:dd:1e:49:30:f5:8a:66:d9:92:17:
         7d:db:53:b3:26:13:95:a0:24:87:8e:1c:7e:cb:26:92:d6:bd:
         9c:67:48:8c:ee:01:5c:4e:0d:37:c6:9d:92:43:87:70:8d:17:
         e5:58:87:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:15:42 2026 by rpki-client