Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa
File:                     3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa (raw, json)
Hash identifier:          Y0armMj5UxQ9KM5d+Rh2v0gmzGtHkceCKqRHD0ON8qI=
Subject key identifier:   86:54:68:58:AA:50:F1:B5:4F:F0:89:13:F7:8C:13:48:A8:B5:48:8E
Certificate issuer:       /CN=5284148D5418D7FC055874603C6DEB41483FA241
Certificate serial:       7CD7549295698FA9F1B2F65D0394585AB0A1EB41
Authority key identifier: 52:84:14:8D:54:18:D7:FC:05:58:74:60:3C:6D:EB:41:48:3F:A2:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa
Signing time:             Mon 23 Mar 2026 20:04:09 +0000
ROA not before:           Mon 23 Mar 2026 19:59:09 +0000
ROA not after:            Mon 22 Mar 2027 20:04:09 +0000
asID:                     264556
IP address blocks:        168.227.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.crl
                          rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d7:54:92:95:69:8f:a9:f1:b2:f6:5d:03:94:58:5a:b0:a1:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5284148D5418D7FC055874603C6DEB41483FA241
        Validity
            Not Before: Mar 23 19:59:09 2026 GMT
            Not After : Mar 22 20:04:09 2027 GMT
        Subject: CN=86546858AA50F1B54FF08913F78C1348A8B5488E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:b8:b3:7f:eb:ed:f7:66:3a:e2:3b:e8:6e:
                    02:7f:e9:44:8d:7c:5c:6b:49:9d:78:b2:96:5b:89:
                    d3:d0:0b:78:9c:ab:81:20:8b:87:b5:47:ec:91:b9:
                    b2:91:5d:15:24:3e:e5:1d:f2:a3:22:ca:53:75:17:
                    66:8f:65:6b:b1:4c:d3:dc:d1:b5:7a:48:f0:33:94:
                    46:af:b6:7f:03:ae:56:7d:5a:d6:11:89:eb:71:6f:
                    1b:26:a7:08:c6:db:4d:f6:53:fb:9a:a3:e3:f2:e1:
                    dc:5a:bc:f0:fb:32:2c:27:92:e9:66:73:27:44:32:
                    e0:d5:57:5c:07:d8:6f:66:91:12:b0:97:57:ef:19:
                    f7:ce:5e:06:d8:bb:8a:de:90:70:72:9b:ab:51:2d:
                    a5:b0:0d:74:1a:6d:d9:76:3f:c8:10:88:f1:b9:ec:
                    75:77:49:6a:22:62:15:65:1b:1a:b8:62:5a:70:a9:
                    3d:ad:d4:54:13:c1:d1:92:5e:5e:40:9a:08:17:d7:
                    ef:e5:87:7e:7b:2f:24:25:be:2e:fc:af:ad:c1:94:
                    55:46:66:5a:51:32:34:cd:ec:f3:a8:ed:ce:24:1c:
                    c8:fd:b6:22:a9:88:c9:a8:d2:e2:43:5c:fd:ba:a7:
                    6e:b0:44:98:ea:36:68:23:8e:fa:8d:3b:b7:ec:4b:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:54:68:58:AA:50:F1:B5:4F:F0:89:13:F7:8C:13:48:A8:B5:48:8E
            X509v3 Authority Key Identifier:
                keyid:52:84:14:8D:54:18:D7:FC:05:58:74:60:3C:6D:EB:41:48:3F:A2:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/5284148D5418D7FC055874603C6DEB41483FA241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5284148D5418D7FC055874603C6DEB41483FA241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxnXiRB3zsCLBGcsZgaRsKLb7s3swHx3voVx4yTkJqrs/1/3136382e3232372e38382e302f32322d3234203d3e20323634353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:9d:99:29:0b:46:80:f8:0b:31:e9:ae:29:3b:39:20:c4:
         be:60:6e:8a:f8:c6:51:2c:6d:51:3e:fe:d8:e0:2a:78:f0:c1:
         1d:9b:96:f7:72:ef:53:42:56:84:3c:0c:14:72:40:c9:58:4c:
         95:eb:b3:fd:c7:ca:75:b0:8f:4d:80:ca:50:e0:1d:7c:15:68:
         a7:27:ff:eb:a1:17:37:17:1a:da:28:d8:bb:2c:5d:6b:f3:20:
         2f:30:78:d0:11:94:20:a3:d0:85:84:82:35:ca:6b:19:76:34:
         2f:54:30:be:21:0c:60:1a:d1:2e:4a:05:4c:b9:1d:08:ff:c3:
         86:67:f3:9a:46:dc:74:28:92:c5:bb:79:73:d6:63:40:25:a4:
         10:97:14:ab:f5:7f:7e:d3:53:b8:e9:41:79:8d:3e:36:95:46:
         28:1d:26:bc:53:23:04:d5:9a:f3:a6:69:3b:a4:55:18:7f:ab:
         43:5d:2e:c7:9d:ea:4a:2d:21:76:08:6d:fc:68:f2:ad:ed:08:
         eb:18:d5:da:b5:6c:5f:29:92:11:8c:d3:6d:0a:ae:22:a8:9c:
         70:0f:6d:49:40:96:85:8b:5e:87:74:7e:21:2b:29:43:e5:1e:
         f9:75:9e:52:03:b7:61:2d:2e:96:c4:04:3a:39:61:e1:e5:ef:
         0b:2b:38:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:29 2026 by rpki-client