Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
File:                     3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa (raw, json)
Hash identifier:          9D5+CFcrlIqUOpuH79JAK4MIlTU2vYImLPypwEG+7ps=
Subject key identifier:   C5:37:19:63:59:AC:42:B1:D9:12:5F:EE:6F:A9:20:66:15:21:96:0F
Certificate issuer:       /CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
Certificate serial:       15AD861AB9ECD2FACA84239BAA9237201F0D90E3
Authority key identifier: CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa
Signing time:             Thu 07 May 2026 13:38:58 +0000
ROA not before:           Thu 07 May 2026 13:33:58 +0000
ROA not after:            Thu 06 May 2027 13:38:58 +0000
asID:                     267429
IP address blocks:        181.191.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl
                          rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 22:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ad:86:1a:b9:ec:d2:fa:ca:84:23:9b:aa:92:37:20:1f:0d:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324
        Validity
            Not Before: May  7 13:33:58 2026 GMT
            Not After : May  6 13:38:58 2027 GMT
        Subject: CN=C537196359AC42B1D9125FEE6FA920661521960F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:30:7d:ad:82:00:48:f5:51:f3:66:d9:d7:
                    38:8c:35:fa:57:f1:2e:e7:7e:da:50:8d:c5:90:dd:
                    25:ee:dd:c7:90:14:4b:cc:de:ba:5f:6e:03:dc:2d:
                    3f:30:87:be:bf:4e:92:65:11:e4:b9:b0:6e:a1:94:
                    53:2c:04:c3:a6:b5:1c:0e:08:bc:b4:fa:f5:8c:fa:
                    6c:36:77:a4:61:4e:ed:2e:ba:39:e1:5d:47:52:57:
                    bb:99:11:56:48:2b:31:30:f2:4e:78:ea:4d:ba:a0:
                    14:aa:cf:b8:8b:5e:dd:bb:07:83:e8:e5:e9:05:1f:
                    42:a4:65:b9:30:bf:b5:6c:75:88:e7:e3:37:e3:1d:
                    45:7a:85:d2:7a:87:f6:bf:6b:5b:db:2b:b3:97:0d:
                    41:ff:14:6a:0d:0f:68:c6:53:3a:88:63:eb:66:52:
                    da:04:d9:90:9a:b8:ca:38:a1:98:5e:b7:d0:e8:66:
                    38:25:1a:13:1e:23:ef:f9:6a:cb:2d:d0:bd:52:6a:
                    0d:b5:6e:e3:18:3b:c8:c4:07:de:87:21:31:99:77:
                    f1:7f:64:9c:bd:08:76:a8:a9:c8:df:9f:52:6d:25:
                    ca:7d:7b:a8:73:55:21:38:3a:d4:2c:db:27:76:d7:
                    3d:42:df:bd:db:62:1c:1a:1c:4f:46:94:04:c9:45:
                    f2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:19:63:59:AC:42:B1:D9:12:5F:EE:6F:A9:20:66:15:21:96:0F
            X509v3 Authority Key Identifier:
                keyid:CE:DD:21:E1:F1:AA:AE:1A:E4:E4:80:B6:37:3A:A4:8C:A5:12:63:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CEDD21E1F1AAAE1AE4E480B6373AA48CA5126324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APxqrczZQ2QNjNoRYTAx8TaaKbPDacXVKwfcLfoQ1Hh3/0/3138312e3139312e3136382e302f32322d3232203d3e20323637343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:5c:4f:83:b7:2e:3c:ed:36:57:a9:4d:61:93:3f:90:ce:
         45:ad:dc:2d:38:4d:f7:d7:e2:e9:25:e5:9b:75:06:8e:eb:53:
         d3:ca:02:2e:96:bb:11:5f:a1:62:d7:b3:01:63:89:b9:eb:a2:
         43:58:e6:f8:b8:17:2d:48:f5:01:da:27:0b:42:d1:5c:54:31:
         b7:8b:df:9e:89:52:51:84:5b:58:72:6c:cf:ec:be:10:31:ba:
         c9:e7:b5:14:eb:3f:6e:2e:22:cd:e4:3a:96:9f:6d:93:a3:1a:
         da:93:42:3c:ef:fe:86:63:98:83:b3:ba:98:0d:d7:7c:6e:ad:
         dc:39:50:4d:68:49:7b:d8:31:ef:eb:4e:07:a2:3c:3e:48:6d:
         d7:eb:7e:9c:ec:82:73:44:4b:87:87:16:fe:52:6b:54:b8:cb:
         88:9b:db:8d:cd:38:99:29:cb:b2:a1:d1:cd:42:cb:ad:80:c5:
         5f:32:b4:84:82:4c:81:9b:c9:51:67:d9:44:90:e2:0a:29:99:
         f6:b0:8b:69:15:86:66:70:1f:41:3f:dd:f2:85:c2:79:2a:2a:
         35:9f:8d:60:98:f3:29:1b:52:3a:c0:a8:cc:2f:93:39:2a:72:
         c2:65:85:b5:8d:db:82:b8:21:e3:8a:fb:35:44:b2:a2:3c:14:
         7f:77:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:34:45 2026 by rpki-client