Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa
File:                     3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa (raw, json)
Hash identifier:          tbmk7HJRTnnDh2W3DpWlXMTBnzMiMExestAAHscur/g=
Subject key identifier:   D4:53:84:AC:94:B5:A7:F0:2C:FC:35:08:DB:6F:9E:08:ED:0F:18:5A
Certificate issuer:       /CN=8D8103C50E13594487EBCABC153A71DA39AC6E49
Certificate serial:       0C7B68C6530498964BD8B8C76DA8FC4F60BA22BC
Authority key identifier: 8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa
Signing time:             Sun 26 Apr 2026 03:12:26 +0000
ROA not before:           Sun 26 Apr 2026 03:07:26 +0000
ROA not after:            Sun 25 Apr 2027 03:12:26 +0000
asID:                     264158
IP address blocks:        168.121.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.crl
                          rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7b:68:c6:53:04:98:96:4b:d8:b8:c7:6d:a8:fc:4f:60:ba:22:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8103C50E13594487EBCABC153A71DA39AC6E49
        Validity
            Not Before: Apr 26 03:07:26 2026 GMT
            Not After : Apr 25 03:12:26 2027 GMT
        Subject: CN=D45384AC94B5A7F02CFC3508DB6F9E08ED0F185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:bc:b2:58:d0:1c:c5:c1:20:04:8e:ec:d1:
                    54:d5:f4:57:31:0a:f4:90:06:50:00:ef:cf:6c:42:
                    ae:90:5a:db:4d:85:69:29:fb:99:41:ef:89:cb:da:
                    5d:c4:75:a6:15:af:fc:db:ce:f3:73:7b:ac:5a:70:
                    e7:30:91:2b:04:86:42:7d:a3:e1:c3:02:65:cb:1a:
                    df:ac:b0:5c:10:aa:42:f5:9c:15:db:03:91:46:cf:
                    69:7a:c0:4c:fe:b7:1b:a6:4f:84:e8:50:c5:59:53:
                    0f:9e:10:ec:96:cc:df:ca:59:7e:ea:7c:33:83:94:
                    66:a9:66:cb:bf:81:28:56:bf:2c:aa:72:40:a7:f2:
                    4b:41:46:15:27:e8:4b:92:03:eb:7f:dc:9f:49:09:
                    d2:6f:1f:aa:71:86:9f:1e:7c:8b:5c:b6:ad:5b:8a:
                    ce:30:02:a7:74:26:03:6a:5e:2c:f0:b7:21:7d:8a:
                    2c:1d:e6:2d:69:cc:62:d9:55:9f:50:be:d4:86:44:
                    42:12:b5:54:76:41:2e:59:f0:23:aa:41:9d:8c:a1:
                    ff:81:1f:3b:b1:e5:20:48:96:88:f2:a1:ca:30:14:
                    73:1d:12:ba:83:b9:e3:1c:6d:9b:5b:d4:9d:c5:9d:
                    d1:87:fd:af:47:c2:e3:69:b4:79:57:2d:e3:d7:32:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:84:AC:94:B5:A7:F0:2C:FC:35:08:DB:6F:9E:08:ED:0F:18:5A
            X509v3 Authority Key Identifier:
                keyid:8D:81:03:C5:0E:13:59:44:87:EB:CA:BC:15:3A:71:DA:39:AC:6E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/8D8103C50E13594487EBCABC153A71DA39AC6E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D8103C50E13594487EBCABC153A71DA39AC6E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDscfHe9XzMiRYEHBD3iYfj1QGunHhkHLHAAZacvPbaj/0/3136382e3132312e3136302e302f32322d3332203d3e20323634313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:2b:fb:b5:84:47:f6:c0:5a:56:49:ca:b0:73:b0:47:e6:
         f3:c7:7d:62:c7:eb:0e:cf:2b:30:8f:8f:29:e0:7d:62:b4:1d:
         67:1a:65:94:69:0f:6f:87:6d:40:ac:38:e4:e9:8f:23:5d:1e:
         55:3f:66:4d:c0:0d:e4:4d:8f:b5:71:ee:ac:06:0d:44:86:db:
         57:d3:2a:47:c1:d6:8e:8a:62:b6:06:7f:e7:b3:bc:01:e4:a8:
         7c:b1:cd:54:e9:a6:05:8a:36:72:6e:81:9b:20:24:33:f9:97:
         ce:ad:72:0c:82:de:fd:ab:35:3f:d2:81:e0:b0:2e:90:a9:76:
         c5:ba:af:51:0a:19:24:fa:21:46:a6:b9:7c:28:ae:b9:58:82:
         17:9a:e0:72:e8:07:e2:8f:7f:80:d1:84:00:6b:88:8c:47:04:
         2b:26:b7:af:1a:c0:3c:db:a7:1c:d5:da:32:4b:59:05:a8:8e:
         75:b7:9f:98:7c:68:e5:df:2c:a2:9e:a8:dd:04:db:5a:43:66:
         fd:52:56:ae:c8:64:00:9a:dd:6b:c6:a4:86:68:39:fd:de:a0:
         bc:1a:95:f4:01:8b:f7:e2:f2:50:34:ac:ad:17:12:3c:04:eb:
         65:3f:42:e0:76:06:e8:d1:83:64:a0:44:8a:83:b4:3b:13:c5:
         8b:3f:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:20:18 2026 by rpki-client