Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa
File:                     3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa (raw, json)
Hash identifier:          fTzCGO5wI+GIxBNJAZ1SL548LBCm18A6V8A2N+8k90k=
Subject key identifier:   E8:F9:42:7A:5F:E6:F1:EB:F3:C1:A9:E8:05:B1:45:F6:5B:F7:98:97
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       41F56A5FEBD3D561A0B5325C8CA7A998E9F9A324
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa
Signing time:             Sat 14 Mar 2026 15:42:43 +0000
ROA not before:           Sat 14 Mar 2026 15:37:43 +0000
ROA not after:            Sat 13 Mar 2027 15:42:43 +0000
asID:                     265295
IP address blocks:        168.90.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f5:6a:5f:eb:d3:d5:61:a0:b5:32:5c:8c:a7:a9:98:e9:f9:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Mar 14 15:37:43 2026 GMT
            Not After : Mar 13 15:42:43 2027 GMT
        Subject: CN=E8F9427A5FE6F1EBF3C1A9E805B145F65BF79897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:3f:c3:b1:12:23:e4:9b:d6:04:14:b0:92:
                    e6:3f:cd:91:62:4b:a6:1e:0a:a4:8b:bc:79:22:05:
                    e7:f4:a4:ec:75:e2:05:a2:52:6c:6c:4b:ef:4d:4e:
                    07:70:de:9b:d5:be:6e:20:9e:70:78:02:0c:e0:02:
                    05:ff:b8:f6:1c:6d:0a:2c:ae:57:27:b7:e9:8d:7e:
                    d0:1e:1c:42:a8:25:55:a6:b3:6f:7a:dc:25:ed:d1:
                    b3:25:c6:50:44:d5:e3:eb:b8:76:6a:0b:f2:46:32:
                    a1:f4:c8:f6:6d:97:51:3a:76:bd:e2:34:3b:a4:7a:
                    f4:25:94:a3:49:09:97:33:17:25:77:52:ba:e1:83:
                    ff:d1:72:2d:0f:a1:21:df:bc:56:11:c6:c1:7c:0e:
                    9e:53:19:bd:28:69:a8:34:01:6e:11:c1:79:41:77:
                    fd:0d:28:30:44:1d:5f:12:54:35:d1:2c:91:9c:9e:
                    09:6b:13:dd:17:33:d5:0b:8d:3b:7d:20:6e:f5:12:
                    39:34:ee:d6:9a:00:68:2c:1c:f1:6d:06:7d:0e:8c:
                    ee:c9:8e:74:b7:11:81:ef:f4:0a:41:41:97:df:0e:
                    69:38:9b:c5:f3:85:a6:a3:13:77:29:5a:60:6f:59:
                    f2:7e:74:74:04:e7:14:02:f5:de:f7:07:d3:f5:34:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:42:7A:5F:E6:F1:EB:F3:C1:A9:E8:05:B1:45:F6:5B:F7:98:97
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32322d3232203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:89:f2:9e:f3:ea:b7:74:08:d3:80:d8:f5:5c:0d:b6:18:88:
         c3:e4:16:85:b2:58:d9:97:ff:9e:e8:f6:20:65:11:51:42:aa:
         ad:92:cc:ca:15:d8:46:3a:f1:63:08:79:ba:ad:54:ba:38:ff:
         ff:35:0d:2d:f9:ec:20:3d:0c:d8:de:da:63:63:ab:7d:b4:f2:
         1a:3f:e6:5e:89:fa:5c:11:ed:a3:29:fc:0d:78:b0:0d:30:7e:
         88:df:4d:02:26:35:5c:a0:45:39:54:fe:0b:e6:30:f9:31:26:
         a5:50:de:b3:cd:12:c2:26:ff:45:dd:57:a7:6e:e0:00:36:4e:
         8c:9b:14:03:84:9f:af:e5:e3:12:86:a3:55:3b:73:0d:de:52:
         b0:20:25:2c:0d:af:a8:28:32:b8:b8:b2:ab:cb:57:12:cb:5e:
         30:96:21:a3:b4:00:f9:f4:22:80:54:f7:92:05:3b:61:f1:a4:
         e8:f2:e5:4c:22:ad:1f:ec:41:31:69:dd:b0:c4:bd:2d:58:3b:
         21:77:4b:1b:19:66:52:6e:d8:3f:f6:0a:b1:f0:b8:79:ac:74:
         b4:f7:16:d4:ea:6b:9d:37:76:f2:31:c6:e9:70:8b:b7:70:36:
         a6:52:4f:1b:61:51:19:ff:a8:28:e1:57:cd:6c:71:55:3e:b1:
         45:92:0a:0b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQfVqX+vT1WGgtTJcjKepmOn5oyQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI2MUE0QTUyN0I2MkZFMzExNURGN0FGMjEzMjkwQjlG
NTRGMzdGRjAeFw0yNjAzMTQxNTM3NDNaFw0yNzAzMTMxNTQyNDNaMDMxMTAvBgNV
BAMTKEU4Rjk0MjdBNUZFNkYxRUJGM0MxQTlFODA1QjE0NUY2NUJGNzk4OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdj/DsRIj5JvWBBSwkuY/zZFi
S6YeCqSLvHkiBef0pOx14gWiUmxsS+9NTgdw3pvVvm4gnnB4AgzgAgX/uPYcbQos
rlcnt+mNftAeHEKoJVWms2963CXt0bMlxlBE1ePruHZqC/JGMqH0yPZtl1E6dr3i
NDukevQllKNJCZczFyV3Urrhg//Rci0PoSHfvFYRxsF8Dp5TGb0oaag0AW4RwXlB
d/0NKDBEHV8SVDXRLJGcnglrE90XM9ULjTt9IG71Ejk07taaAGgsHPFtBn0OjO7J
jnS3EYHv9ApBQZffDmk4m8XzhaajE3cpWmBvWfJ+dHQE5xQC9d73B9P1NEC/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6PlCel/m8evzwanoBbFF9lv3mJcwHwYDVR0j
BBgwFoAU8mGkpSe2L+MRXfevITKQufVPN/8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3BSOVlheWo5SHdXZ1JuQ3F6eWY1QWJMUVZITEt1RjJkSzgydmpCTGtD
WHAvMC9GMjYxQTRBNTI3QjYyRkUzMTE1REY3QUYyMTMyOTBCOUY1NEYzN0ZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNjFBNEE1MjdCNjJGRTMx
MTVERjdBRjIxMzI5MEI5RjU0RjM3RkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwUjlZYXlqOUh3V2dSbkNxenlmNUFiTFFWSExLdUYyZEs4MnZqQkxrQ1hwLzAv
MzEzNjM4MmUzOTMwMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWtQwDQYJKoZIhvcNAQELBQADggEBAMuJ8p7z
6rd0CNOA2PVcDbYYiMPkFoWyWNmX/57o9iBlEVFCqq2SzMoV2EY68WMIebqtVLo4
//81DS357CA9DNje2mNjq3208ho/5l6J+lwR7aMp/A14sA0wfojfTQImNVygRTlU
/gvmMPkxJqVQ3rPNEsIm/0XdV6du4AA2ToybFAOEn6/l4xKGo1U7cw3eUrAgJSwN
r6goMri4sqvLVxLLXjCWIaO0APn0IoBU95IFO2HxpOjy5UwirR/sQTFp3bDEvS1Y
OyF3SxsZZlJu2D/2CrHwuHmsdLT3FtTqa503dvIxxulwi7dwNqZSTxthURn/qCjh
V81scVU+sUWSCgs=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:53:53 2026 by rpki-client