Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          TAfSI0HmSqtRg2rHKJCcAUs52EXgstNdpIIsw2bQrJQ=
Subject key identifier:   4F:D2:95:5B:ED:B4:72:D0:7F:89:F2:25:40:5F:1B:9A:B3:07:EE:B7
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       14A931F18D412E32206895E021C0066700A50BD7
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 13 May 2026 12:36:18 +0000
ROA not before:           Wed 13 May 2026 12:31:18 +0000
ROA not after:            Wed 12 May 2027 12:36:18 +0000
asID:                     265465
IP address blocks:        168.196.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:31:f1:8d:41:2e:32:20:68:95:e0:21:c0:06:67:00:a5:0b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: May 13 12:31:18 2026 GMT
            Not After : May 12 12:36:18 2027 GMT
        Subject: CN=4FD2955BEDB472D07F89F225405F1B9AB307EEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c2:ad:9d:fc:0a:15:23:7e:28:e4:a9:eb:5c:
                    6e:be:84:e2:10:4c:d8:c4:29:92:30:9c:b5:8c:30:
                    90:a5:2c:45:b9:b2:c5:16:f1:09:b6:b0:65:c6:9a:
                    b1:34:37:a0:43:30:9a:c6:25:1f:50:d2:8f:c4:bd:
                    be:0f:38:50:03:74:ec:7f:75:74:49:08:93:84:93:
                    63:39:d2:64:0b:e4:89:34:36:7f:e9:62:ed:03:0e:
                    a4:8a:be:f6:61:ab:8d:b9:6e:f1:e7:bb:68:0e:d2:
                    52:b6:e1:d1:8b:0b:a9:66:c9:d8:ce:9d:14:af:2b:
                    38:97:28:16:cd:e8:95:06:05:be:5b:97:60:46:09:
                    f0:c9:9c:77:a3:b7:2e:d2:34:6b:03:cf:ed:93:da:
                    d7:8d:eb:21:88:84:d2:65:f5:7d:08:f0:16:e9:0a:
                    f1:fa:8b:7f:70:96:25:60:92:e4:f9:63:c6:b5:a4:
                    f9:48:c2:ef:7e:92:71:55:2d:d6:25:3c:11:26:79:
                    f8:39:dc:93:8f:e4:4f:9b:68:48:57:02:7c:d4:eb:
                    b2:fa:3d:73:8a:45:f4:df:09:e8:dd:c1:f1:23:b2:
                    ec:e5:83:90:d2:73:b4:dd:15:35:2c:31:88:74:a5:
                    a4:60:e1:81:46:1d:ed:be:75:30:d5:98:12:d6:de:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D2:95:5B:ED:B4:72:D0:7F:89:F2:25:40:5F:1B:9A:B3:07:EE:B7
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:ac:64:45:bc:23:9d:30:74:fb:a6:5b:9c:1a:62:86:3f:
         89:49:16:07:f4:15:02:93:6d:21:43:2d:aa:a7:32:7f:2b:4a:
         51:40:09:e7:23:cd:32:98:e0:03:0e:08:36:1d:dd:c0:9e:d6:
         ec:e7:38:c0:47:ca:2c:ee:f3:54:33:c4:87:fc:ef:2d:05:89:
         ef:58:c8:ca:a9:6d:20:4f:2e:83:46:87:9a:98:37:8f:c5:92:
         0f:a9:9f:5b:d3:d8:eb:b1:1c:2a:8d:a8:ef:bd:25:42:a9:e8:
         5e:ff:be:39:38:75:8e:16:da:4b:7c:ef:12:a4:6e:20:e4:42:
         cb:20:97:2b:ad:91:ea:cf:90:92:5b:d2:ea:26:fe:c9:72:49:
         79:2c:c6:b7:44:a5:a8:e7:2b:c9:d1:f0:1c:b9:97:1d:f4:da:
         bd:87:65:f2:d8:55:78:89:1d:2c:26:f0:f3:40:7a:b5:f8:82:
         95:a1:3c:61:bb:88:7b:be:aa:27:1d:95:01:1a:81:ad:fe:27:
         e6:a3:08:1f:49:de:07:b2:8f:a3:2f:08:b2:6e:fb:96:04:57:
         b3:bd:8e:66:70:8a:ce:37:a7:91:8e:26:60:11:83:1f:6e:d1:
         9b:f6:e1:b3:c1:4c:16:f2:98:4b:ff:b7:f9:04:53:3c:09:db:
         5b:da:98:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:29:41 2026 by rpki-client