Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          khJ2USzPX7qYp6zfw7LTNbRSzhb+5ji4Lb+H3oX4nxg=
Subject key identifier:   A4:2D:97:5D:4E:2B:33:D7:70:E5:2F:8A:DB:69:F0:1E:9A:F2:77:93
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       7E3B7064CEAC620A628E329A0FD7F3646702E4D3
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 14 Mar 2026 15:42:42 +0000
ROA not before:           Sat 14 Mar 2026 15:37:42 +0000
ROA not after:            Sat 13 Mar 2027 15:42:42 +0000
asID:                     265295
IP address blocks:        168.90.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3b:70:64:ce:ac:62:0a:62:8e:32:9a:0f:d7:f3:64:67:02:e4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Mar 14 15:37:42 2026 GMT
            Not After : Mar 13 15:42:42 2027 GMT
        Subject: CN=A42D975D4E2B33D770E52F8ADB69F01E9AF27793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:67:a3:44:5c:ed:4b:91:3d:a6:f4:98:34:
                    e0:aa:f0:d0:46:57:dd:7d:8f:6b:1b:e4:86:e1:64:
                    ac:e6:11:98:4f:9c:e7:49:b2:7b:0f:04:e7:c5:05:
                    4d:7c:f5:73:df:a6:1b:63:75:56:a3:2f:c2:35:f9:
                    da:a2:28:f4:bb:94:e8:7c:65:33:b9:d0:97:ff:bd:
                    f8:f3:b7:49:5f:2d:8d:28:a0:9d:d4:45:4d:e3:4b:
                    3c:b4:30:8c:b0:e7:5e:4a:84:79:8d:b6:91:ca:7f:
                    e9:e5:bf:40:0f:da:fd:c4:96:6c:ee:1c:18:8a:0c:
                    ed:ac:78:9d:16:e8:86:64:6f:18:ab:1f:d4:df:6e:
                    d3:88:90:4a:e8:70:b2:b7:d5:28:96:e9:80:99:c7:
                    38:38:9b:4e:c8:6d:81:17:d6:29:4d:da:12:61:5d:
                    fa:1c:6e:3d:ba:28:5b:79:14:91:cb:82:7b:8c:33:
                    98:47:a0:9c:52:e2:84:27:dc:d9:11:12:e2:95:e2:
                    b3:3c:ee:ea:0f:4d:25:3f:29:81:ec:ae:55:47:7c:
                    c6:90:a1:95:bf:83:85:1c:d9:6a:58:e4:e2:81:57:
                    b9:f0:63:bd:46:57:af:f1:bf:54:30:eb:45:2a:79:
                    9f:95:d8:54:27:7c:b3:52:de:ac:07:96:91:bc:40:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2D:97:5D:4E:2B:33:D7:70:E5:2F:8A:DB:69:F0:1E:9A:F2:77:93
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231322e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:9b:26:d1:4f:4a:6d:f0:61:bc:6c:16:50:21:10:d6:4b:ed:
         5d:f0:1b:72:8a:1f:ed:20:82:97:bc:90:c7:7b:c7:32:d6:a5:
         a1:f3:23:25:37:0c:a9:d1:cd:c5:6a:27:1b:3b:1b:4b:b2:37:
         b5:ad:ba:0e:2f:ae:57:87:96:4d:c0:b6:9e:97:1b:8b:63:ee:
         ed:e9:a9:f5:94:c2:87:54:03:de:b8:0b:56:20:70:83:d0:12:
         22:f8:6b:38:27:18:6c:c5:b1:44:d7:c5:02:9d:f6:6f:9a:e7:
         47:c5:65:38:34:65:69:d3:22:76:07:f0:1b:a2:53:5c:ca:68:
         f3:2d:1e:a1:67:10:2e:13:3e:d3:9b:be:0c:86:60:d8:c0:2f:
         a7:9c:eb:59:7e:39:b9:bf:cd:ad:3b:4d:c5:25:db:54:75:b9:
         83:17:4d:41:58:3b:3f:db:68:00:c2:1c:2f:e6:3b:86:9f:82:
         b2:41:42:42:cf:c1:0c:13:c1:4a:25:eb:2d:22:91:4b:a8:c7:
         cb:4a:c8:ac:69:7b:a2:74:87:c6:90:d6:47:8c:f1:8e:79:9c:
         dd:59:78:cd:b3:d6:0e:e0:2d:2c:0d:d2:71:6e:b4:68:70:66:
         45:3e:7e:85:39:07:b1:7a:94:6c:8c:e7:31:c4:f0:21:91:fb:
         a2:76:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:22 2026 by rpki-client