Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
File:                     3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa (raw, json)
Hash identifier:          rG9WcMol+BBYChYdHGxGN7FaUzO7AXO3B254avPpH1s=
Subject key identifier:   4B:49:35:A8:E7:BC:00:AC:1B:AB:C4:26:AB:00:3F:22:D9:48:A8:FD
Certificate issuer:       /CN=088FDBB1B4836269897C88564BFDA8CC6E837086
Certificate serial:       31715C4A3341ED94864B53DB5907ABC8BD2412B6
Authority key identifier: 08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa
Signing time:             Thu 12 Mar 2026 13:44:46 +0000
ROA not before:           Thu 12 Mar 2026 13:39:46 +0000
ROA not after:            Thu 11 Mar 2027 13:44:46 +0000
asID:                     264316
IP address blocks:        168.121.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl
                          rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:5c:4a:33:41:ed:94:86:4b:53:db:59:07:ab:c8:bd:24:12:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FDBB1B4836269897C88564BFDA8CC6E837086
        Validity
            Not Before: Mar 12 13:39:46 2026 GMT
            Not After : Mar 11 13:44:46 2027 GMT
        Subject: CN=4B4935A8E7BC00AC1BABC426AB003F22D948A8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:90:24:50:45:73:06:87:77:87:6e:84:1c:
                    d0:49:6b:50:f7:fc:71:8d:b0:4e:a5:47:38:a2:cd:
                    ef:34:dc:42:20:cb:0a:f9:69:a0:32:02:3e:6d:fe:
                    0b:32:cd:57:e3:16:d8:27:2d:ad:5d:d6:2c:21:b9:
                    bb:93:15:d5:90:f2:19:d5:14:c2:26:4b:56:00:76:
                    03:06:ee:71:a1:38:de:14:3e:33:c8:9b:e7:f3:68:
                    63:35:74:14:2a:da:03:41:e1:8d:04:0a:e0:02:30:
                    6a:3d:6a:e4:60:57:0c:19:1f:c6:ce:e6:3b:86:48:
                    b5:c1:d7:2e:83:6f:11:19:9e:36:69:a9:f3:26:72:
                    9d:92:86:c2:58:d7:6f:98:a5:f4:65:76:fa:cf:f9:
                    a2:77:bf:c7:16:c4:b5:2d:60:fa:d0:77:6e:0c:a0:
                    29:73:de:d4:80:3e:99:4e:59:8f:6e:2e:cd:59:47:
                    d4:d5:2a:70:b4:72:0c:69:48:75:93:75:0e:69:3a:
                    cc:f7:4e:3a:3c:6c:f4:50:d5:70:d7:2f:88:88:ca:
                    21:fe:80:f5:9a:73:b8:a9:54:ef:9d:59:8e:01:0f:
                    2a:cc:89:e7:98:f6:44:c4:bb:3f:88:06:ec:60:2d:
                    13:66:cb:de:c8:4b:d2:45:fc:4c:0f:9b:77:45:bf:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:35:A8:E7:BC:00:AC:1B:AB:C4:26:AB:00:3F:22:D9:48:A8:FD
            X509v3 Authority Key Identifier:
                keyid:08:8F:DB:B1:B4:83:62:69:89:7C:88:56:4B:FD:A8:CC:6E:83:70:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/088FDBB1B4836269897C88564BFDA8CC6E837086.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FDBB1B4836269897C88564BFDA8CC6E837086.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2BKb6etUQTwHEXJBP82DKSb8MSzPJP4JSwwZsnK65rm/0/3136382e3132312e3231362e302f32322d3232203d3e20323634333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:84:ec:e9:c3:39:3d:0b:ea:42:d7:27:b2:29:d5:ce:6c:2e:
         19:e8:42:8f:ab:6b:72:9c:4c:da:71:3e:56:d9:d7:cd:24:ba:
         5a:25:ec:00:9d:e8:b1:f4:4b:2a:f0:d8:9d:d9:a1:b5:81:b9:
         02:7a:db:c9:3e:49:b1:80:b6:ef:71:5a:97:bd:43:ee:95:9f:
         90:ea:f5:35:ee:8d:a8:b3:e3:50:52:97:81:43:96:06:f0:72:
         44:5c:67:57:26:01:a9:95:1b:a5:e3:43:97:0f:97:23:f7:5b:
         93:bb:65:d0:8f:08:ca:09:a4:42:14:60:44:63:f1:97:e7:d9:
         98:14:0a:ea:26:98:ad:35:0e:2e:a3:a8:f5:6b:4c:21:b9:17:
         49:de:fa:da:c6:d7:d2:c9:7b:1f:e0:8e:08:30:c8:34:84:c6:
         86:38:14:aa:b0:06:bc:ff:92:92:09:fa:e5:4c:92:ce:a7:6d:
         c1:51:77:42:77:ab:77:4b:96:33:81:17:19:25:73:83:c7:87:
         58:9e:be:1e:9f:61:a8:56:e3:88:01:24:46:69:cc:d2:90:50:
         3c:e5:28:f2:c4:95:da:e5:1d:d3:36:b3:38:cb:59:12:44:99:
         45:e9:af:13:6f:d8:8b:e1:0e:e2:dd:6e:69:55:6b:dd:60:46:
         c2:19:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:56:03 2026 by rpki-client