Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136322e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136322e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          a0deru4VH2J1vuXt1l3YmXBoTJWvI9oQKsdcCsDvdwQ=
Subject key identifier:   CE:D9:37:48:7D:3C:25:B5:6B:96:D4:CB:8F:61:8C:BF:3F:EB:7C:76
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       748F815A73DE6E88D95310784C768786F967E32F
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136322e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 13 May 2026 12:36:21 +0000
ROA not before:           Wed 13 May 2026 12:31:21 +0000
ROA not after:            Wed 12 May 2027 12:36:21 +0000
asID:                     265465
IP address blocks:        168.196.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8f:81:5a:73:de:6e:88:d9:53:10:78:4c:76:87:86:f9:67:e3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: May 13 12:31:21 2026 GMT
            Not After : May 12 12:36:21 2027 GMT
        Subject: CN=CED937487D3C25B56B96D4CB8F618CBF3FEB7C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:5d:b5:2f:19:2f:dc:eb:01:de:1f:b1:df:
                    47:78:62:c3:23:05:c0:e9:9a:85:8e:ef:00:7f:b1:
                    0d:1b:1e:b2:e4:9d:84:81:e5:1a:7b:71:bc:57:04:
                    39:28:50:7e:77:a9:9c:c4:4c:d1:48:90:87:a6:e6:
                    f0:7f:2c:dd:10:1d:16:6a:a6:fd:c5:60:03:95:5d:
                    34:ad:10:4e:00:57:5d:25:9f:29:37:34:0e:6b:1c:
                    76:c4:00:b7:b2:d5:5e:5c:eb:79:ad:b8:f4:45:5b:
                    68:5c:a2:be:17:bd:69:b4:20:45:1e:46:a7:44:bd:
                    6e:c1:94:e3:3f:0a:f3:fd:5f:7f:c5:87:ed:09:4b:
                    06:f5:aa:b8:da:8f:f0:ba:bd:ca:50:a1:3c:ce:22:
                    be:5b:1d:1a:08:e2:d5:db:34:e1:88:30:f3:8b:03:
                    86:dd:2b:20:c2:87:34:30:29:73:36:bb:81:55:b0:
                    c9:3a:1b:d9:f8:a1:73:53:49:3b:b4:ac:18:cc:90:
                    1f:70:c3:60:ff:b9:c9:73:a1:ef:6f:93:e5:21:8a:
                    c2:7e:0b:89:b5:6d:04:4a:bd:16:4b:bb:b2:dd:25:
                    5d:94:47:5d:5c:e1:f3:ec:15:ee:2d:37:6f:e9:6d:
                    cf:2c:23:ce:8e:39:fb:51:eb:f1:7d:2a:ec:71:d7:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D9:37:48:7D:3C:25:B5:6B:96:D4:CB:8F:61:8C:BF:3F:EB:7C:76
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136322e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:87:4d:d7:3c:99:45:63:a5:92:ac:b1:b3:4a:b9:de:30:f1:
         48:4d:0d:23:93:72:cd:5d:70:7d:eb:f8:7d:ee:8b:a2:70:d0:
         6d:fc:1a:95:67:11:94:6a:61:60:43:67:d5:0d:a1:4d:4c:5a:
         d0:8e:e9:85:48:d1:f2:19:0a:46:c4:c2:4b:cd:b7:b4:ee:cb:
         b5:dd:da:2f:05:a6:88:79:80:d0:ee:28:73:7a:0f:17:a7:51:
         4c:33:0a:87:c6:01:3f:6d:c5:64:e9:d5:1f:d4:38:f7:5c:53:
         75:3a:25:df:d2:50:e7:c3:6a:16:8d:4d:9d:a1:0c:ce:41:81:
         82:d9:49:24:7b:07:56:2a:bf:7b:6c:30:ed:98:ec:4f:9c:89:
         ff:bc:79:cd:cb:cc:a9:e3:65:6e:82:92:8b:73:c4:0e:4d:28:
         b8:2c:a7:9b:46:1d:9c:ac:8a:7a:8a:de:6b:8a:11:ab:2f:45:
         71:0a:2f:96:31:96:76:8f:e0:20:3e:4c:04:ef:3f:87:8b:9c:
         f7:26:66:79:26:5b:05:8c:5f:0e:3a:ad:97:9e:dd:fd:2c:f0:
         b3:d8:62:27:da:4e:3f:85:fd:a2:10:7a:5d:1b:f3:63:31:4d:
         30:2f:c7:b7:89:90:92:a2:75:e3:fe:a3:d0:3a:4c:f9:a1:3d:
         11:1c:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:29:43 2026 by rpki-client