Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
File:                     3136382e3139352e36342e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier:          l2V6XyzSaRk8s4QDdIxchDQ6mB8T92/UqSasCBSquVk=
Subject key identifier:   00:3C:AD:79:3F:34:9B:E2:C7:DF:A8:F2:FE:C9:71:7C:34:2A:EB:6A
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       215C354773A3504B0E6BABE2EF404285D06A784C
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa
Signing time:             Sat 04 Jul 2026 13:43:56 +0000
ROA not before:           Sat 04 Jul 2026 13:38:56 +0000
ROA not after:            Sat 03 Jul 2027 13:43:56 +0000
asID:                     28201
IP address blocks:        168.195.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:35:47:73:a3:50:4b:0e:6b:ab:e2:ef:40:42:85:d0:6a:78:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:56 2026 GMT
            Not After : Jul  3 13:43:56 2027 GMT
        Subject: CN=003CAD793F349BE2C7DFA8F2FEC9717C342AEB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:2a:dd:72:c6:80:81:86:e5:86:cf:54:72:
                    ab:95:e6:4f:fe:8a:f8:99:47:22:95:8c:bd:38:0c:
                    12:df:ad:84:16:f2:9a:ba:fd:23:b6:9e:f0:51:05:
                    3c:21:fd:10:a7:5c:7a:dd:63:68:3d:bb:1a:93:18:
                    2f:20:32:a1:10:cc:97:a3:a0:85:21:2a:fa:14:05:
                    8d:c1:76:b7:76:59:d4:d3:ae:e0:8b:7e:de:7c:12:
                    a7:ff:27:47:df:f0:46:6c:ab:71:c3:bc:96:7c:7e:
                    cd:52:ab:fa:1c:41:6a:ba:e8:a1:26:fc:8e:0f:ce:
                    15:95:ce:08:e3:b3:65:41:9c:0f:bf:c5:7a:2d:b3:
                    e2:15:ea:72:43:2f:39:1e:3a:2f:a0:e9:fa:71:a3:
                    16:8b:7b:3a:69:7b:62:05:3c:b8:b7:63:83:94:bf:
                    48:f5:a3:4f:00:a3:3f:f7:00:c0:ff:55:1a:96:8e:
                    33:26:78:62:40:6e:82:50:fa:e3:0a:f8:3e:a3:fe:
                    d0:c4:c0:10:f0:d3:cb:4c:87:56:c9:93:30:9d:0d:
                    0d:b2:9b:07:27:8d:28:18:b5:ff:c3:70:c2:fc:62:
                    88:e2:69:d2:da:ec:16:9d:13:53:60:7f:37:55:5d:
                    8a:4e:2d:21:78:38:52:60:36:f6:98:2f:3f:be:d3:
                    f6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3C:AD:79:3F:34:9B:E2:C7:DF:A8:F2:FE:C9:71:7C:34:2A:EB:6A
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3136382e3139352e36342e302f32322d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:bc:1f:c8:82:ce:db:f3:b0:22:5b:77:9b:c3:c0:b0:f1:
         3f:13:f7:25:ea:14:6d:10:bc:52:cc:48:06:fb:20:0a:a6:08:
         1b:08:0e:27:0f:7e:65:a9:dc:67:5e:d1:b6:6c:82:27:1e:33:
         e0:9a:fc:22:23:85:e8:cd:b4:bf:97:6d:f9:b5:33:13:30:62:
         b3:14:c0:63:d1:d9:40:04:30:43:08:70:e3:e8:b9:f2:8f:8a:
         97:04:f4:4c:0b:8b:7f:5d:e0:e8:b3:95:1c:56:48:3e:d3:b2:
         e4:99:cb:0e:d4:d0:b0:ea:f8:63:87:cf:f7:00:b0:d0:8f:89:
         ec:39:3a:e0:e1:c4:c7:47:d0:a3:85:fd:4a:37:99:1c:c0:5a:
         75:d7:ff:b5:0b:15:39:5b:f5:86:3d:23:f9:8c:bc:97:00:5c:
         26:4e:83:5e:ae:d6:0d:11:15:96:20:35:b3:a8:11:a9:8b:09:
         d1:d5:2a:5c:12:77:a0:8f:3c:60:50:01:3f:d0:2d:99:4d:22:
         67:1b:73:d1:43:7e:c3:5d:48:7f:8e:c6:33:f9:ba:a2:58:ce:
         2a:0c:d8:46:61:01:79:fa:39:10:01:a4:8b:c5:9c:0c:95:50:
         4d:82:5c:36:f8:5c:e4:fd:c6:b6:74:a0:d1:b8:bb:0a:20:ef:
         d5:af:5f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:35:07 2026 by rpki-client