Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa
File:                     3136382e3139372e31362e302f32322d3234203d3e203532393437.roa (raw, json)
Hash identifier:          U2GHmS4J03h1ERlNUuod06WHbYfM5waCGNz/dUcMpmQ=
Subject key identifier:   65:9A:19:91:C2:85:63:47:8C:92:38:69:75:3E:E5:3D:21:BE:29:A5
Certificate issuer:       /CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
Certificate serial:       529AFF1597135403A9F5B59AB24C733FF8BCD0E5
Authority key identifier: 52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa
Signing time:             Mon 23 Mar 2026 18:05:33 +0000
ROA not before:           Mon 23 Mar 2026 18:00:33 +0000
ROA not after:            Mon 22 Mar 2027 18:05:33 +0000
asID:                     52947
IP address blocks:        168.197.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 00:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9a:ff:15:97:13:54:03:a9:f5:b5:9a:b2:4c:73:3f:f8:bc:d0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=524E9D1652F660663CB5548E20AE99DA463B2CFA
        Validity
            Not Before: Mar 23 18:00:33 2026 GMT
            Not After : Mar 22 18:05:33 2027 GMT
        Subject: CN=659A1991C28563478C923869753EE53D21BE29A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:65:76:ed:a0:39:f3:9e:77:23:f6:33:f7:
                    8b:61:03:5b:07:0d:c7:b7:6b:f1:8f:8f:12:27:22:
                    c1:d4:7a:b0:ac:16:da:6d:3c:66:46:c5:c1:d4:5b:
                    8c:50:c7:75:4b:ca:55:4b:da:fb:80:9b:b1:9d:86:
                    88:b0:4d:a1:47:5b:46:c6:ff:e8:d9:c6:eb:5c:e5:
                    4d:6e:f1:6a:66:e3:ed:ba:ed:05:04:87:ff:10:ee:
                    ec:23:74:e1:42:b8:02:93:f0:bf:11:e8:74:04:fe:
                    f9:96:13:01:4d:d9:5a:f0:48:68:87:12:42:25:a6:
                    05:98:68:e1:7d:b8:92:a9:f9:b7:d3:bf:75:29:b8:
                    ae:bd:19:cd:fb:b9:f6:89:4e:e2:b3:f0:d2:88:28:
                    7a:a2:9f:5a:04:f4:49:a2:07:d0:8c:16:b5:9a:59:
                    4a:48:96:48:d1:ce:e7:81:dc:af:e7:84:7d:bb:25:
                    c9:a1:85:ef:89:d9:b3:7c:b7:57:3b:5c:37:71:2d:
                    7a:8e:a8:2b:47:d9:a8:ac:cf:2d:40:04:22:92:89:
                    f8:6b:0d:f2:d8:3e:db:9b:bb:35:fc:fc:c5:d9:ae:
                    63:c3:95:30:4d:21:ef:43:14:40:71:a7:8e:55:f9:
                    34:4e:d3:17:33:b9:db:b0:d8:5b:07:71:de:a3:11:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9A:19:91:C2:85:63:47:8C:92:38:69:75:3E:E5:3D:21:BE:29:A5
            X509v3 Authority Key Identifier:
                keyid:52:4E:9D:16:52:F6:60:66:3C:B5:54:8E:20:AE:99:DA:46:3B:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/524E9D1652F660663CB5548E20AE99DA463B2CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/1/3136382e3139372e31362e302f32322d3234203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b9:1b:6e:b3:8b:f4:74:42:e8:29:10:f6:92:a4:f2:42:17:
         36:a3:5d:aa:98:ba:5c:ef:28:04:0c:88:45:f3:bf:40:38:83:
         34:6a:3f:c6:e7:56:fe:4c:60:80:42:46:2e:5e:22:22:74:c6:
         9c:5a:27:17:96:44:e1:35:75:0d:29:a6:f1:80:0a:d3:cc:1b:
         1d:2f:c0:00:69:03:8e:a3:f9:3e:13:61:9d:4b:5e:8b:08:f4:
         11:76:77:90:80:3d:68:95:ae:b1:22:e1:d8:80:32:41:05:ac:
         15:0a:f2:80:4a:07:4b:8d:3b:10:58:11:26:f1:7b:42:0e:d4:
         aa:85:aa:20:b6:8a:45:10:6d:a1:ed:ef:7d:5c:93:0a:95:a0:
         81:f7:c4:dd:7d:5c:b2:d4:6d:c4:8c:f6:b7:cc:c5:f3:0f:41:
         a6:7d:07:8d:59:25:8d:1b:f6:73:6f:c3:27:05:7e:47:6a:16:
         31:ee:79:4d:ed:41:8e:1a:9c:37:ab:1a:a6:e9:43:92:d6:68:
         55:87:14:18:93:e5:37:a4:b5:3e:e2:e1:7b:ff:94:91:c2:81:
         ea:99:61:09:7c:c4:87:9b:6f:3e:93:2a:09:e1:0b:3d:a8:2a:
         90:77:8f:7b:85:c3:bd:c3:d6:93:02:2b:9e:37:22:90:48:bb:
         33:89:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:51:10 2026 by rpki-client