Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
File:                     3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa (raw, json)
Hash identifier:          j593jfpBonmqOZ2IPx7zMWxvowCyDk0pzQuWftd90m8=
Subject key identifier:   5F:3F:69:2A:BD:FF:1E:74:F0:DE:58:E0:E8:2E:F1:19:0E:5E:5B:0F
Certificate issuer:       /CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
Certificate serial:       0F03EDCFEB38B9067A405C6FEC3E6843A2867677
Authority key identifier: F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa
Signing time:             Sat 14 Mar 2026 15:42:41 +0000
ROA not before:           Sat 14 Mar 2026 15:37:41 +0000
ROA not after:            Sat 13 Mar 2027 15:42:41 +0000
asID:                     265295
IP address blocks:        168.90.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl
                          rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:03:ed:cf:eb:38:b9:06:7a:40:5c:6f:ec:3e:68:43:a2:86:76:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F261A4A527B62FE3115DF7AF213290B9F54F37FF
        Validity
            Not Before: Mar 14 15:37:41 2026 GMT
            Not After : Mar 13 15:42:41 2027 GMT
        Subject: CN=5F3F692ABDFF1E74F0DE58E0E82EF1190E5E5B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:ba:af:88:3c:38:c6:e4:34:e7:53:17:86:
                    a4:84:4d:da:86:e3:b8:21:55:7b:a0:26:7a:ca:3b:
                    d9:fa:6b:47:7a:9f:1d:5c:4d:a3:ed:05:eb:ae:45:
                    72:77:c5:b6:d7:ab:6c:6d:1f:bb:e2:d7:d5:0e:ff:
                    2d:cc:68:b6:4f:83:fa:45:65:72:7a:40:b2:70:62:
                    8d:05:0a:42:2c:27:c8:87:8f:fb:e6:c0:2f:50:f2:
                    00:d7:fc:d4:24:cc:a7:ad:4f:7e:54:23:73:03:83:
                    21:91:15:db:36:08:d4:2d:28:52:98:d1:0c:58:e0:
                    ea:88:01:86:06:8d:61:49:68:87:c8:68:00:92:94:
                    35:07:c9:6c:43:3f:e6:9f:68:39:69:80:af:7b:96:
                    af:bb:a1:13:1e:86:9f:84:1e:26:de:7d:95:98:d6:
                    99:9c:69:1b:6e:53:31:6e:1b:b4:01:a0:51:55:01:
                    cb:54:59:40:ac:02:e4:03:d9:bd:9d:8d:aa:3a:c8:
                    d0:80:99:ca:3d:1d:d8:38:33:de:5e:68:e7:1d:31:
                    49:0b:90:cd:34:ab:d6:b1:53:76:62:48:d8:53:bd:
                    c1:bc:4d:79:ad:e9:0f:de:27:2f:60:1d:c1:68:a1:
                    0f:f5:ed:90:b7:6b:bf:04:47:6d:6d:c4:17:0d:9b:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3F:69:2A:BD:FF:1E:74:F0:DE:58:E0:E8:2E:F1:19:0E:5E:5B:0F
            X509v3 Authority Key Identifier:
                keyid:F2:61:A4:A5:27:B6:2F:E3:11:5D:F7:AF:21:32:90:B9:F5:4F:37:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/F261A4A527B62FE3115DF7AF213290B9F54F37FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F261A4A527B62FE3115DF7AF213290B9F54F37FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CpR9Yayj9HwWgRnCqzyf5AbLQVHLKuF2dK82vjBLkCXp/0/3136382e39302e3231342e302f32332d3233203d3e20323635323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:ff:0c:db:51:90:d6:e9:b2:c4:3a:06:e8:c1:ae:4d:ba:91:
         ef:05:fb:61:a1:2e:f7:66:5c:36:2a:59:4f:47:0f:92:04:a1:
         12:6a:3e:71:7b:85:c9:c6:5c:65:66:e8:23:75:18:96:3c:b9:
         bb:8f:21:4c:22:52:d3:f6:67:88:a4:6e:30:98:54:12:8f:6d:
         48:4b:4c:96:da:ea:29:03:6e:06:d4:66:74:26:97:c9:d2:39:
         46:eb:81:77:79:e6:19:1b:1e:13:74:51:4a:43:51:6d:27:02:
         38:56:9e:6d:e6:99:df:a1:fa:a0:55:90:12:cb:8c:86:55:9a:
         f4:f1:31:06:37:51:ca:46:5f:f4:37:9c:36:00:e6:21:4e:dd:
         9d:33:b9:14:ba:31:72:f2:f0:9f:91:2d:9e:81:e4:89:2e:85:
         15:0b:7a:3c:b9:8f:88:0d:ca:40:20:78:e7:f5:58:bc:2d:16:
         68:c8:71:38:48:69:0d:ff:af:45:a0:ef:6c:c4:e3:c5:3a:a4:
         81:d9:77:3e:62:32:30:05:4b:7e:7b:09:c6:da:18:66:13:0d:
         58:19:74:af:6a:c3:ae:f3:d7:01:76:ca:28:e4:32:0d:21:4d:
         24:da:c2:ab:33:5f:73:8e:74:de:5d:1a:0c:e1:77:cd:ec:b6:
         28:20:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:59:47 2026 by rpki-client