Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
File:                     3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa (raw, json)
Hash identifier:          KgxDpnkTFN6Po1DHjfmzE4Br8C9D6MePM5U/YMwExn4=
Subject key identifier:   B4:E2:87:63:96:E8:44:C1:A4:77:58:97:B8:D3:3E:8A:BE:C8:00:99
Certificate issuer:       /CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
Certificate serial:       0E3F3C3D48D95F1AEB28C895B5669F6E1936884D
Authority key identifier: 61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa
Signing time:             Fri 03 Jul 2026 18:00:28 +0000
ROA not before:           Fri 03 Jul 2026 17:55:28 +0000
ROA not after:            Fri 02 Jul 2027 18:00:28 +0000
asID:                     265346
IP address blocks:        168.181.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl
                          rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3f:3c:3d:48:d9:5f:1a:eb:28:c8:95:b5:66:9f:6e:19:36:88:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61355836BCE7745F7FD887251FDA3AE8CDED35FD
        Validity
            Not Before: Jul  3 17:55:28 2026 GMT
            Not After : Jul  2 18:00:28 2027 GMT
        Subject: CN=B4E2876396E844C1A4775897B8D33E8ABEC80099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:c0:97:59:b7:59:6b:76:d1:a6:35:f0:cc:
                    18:76:03:c7:24:fe:2b:ca:f6:93:8a:eb:a1:c5:88:
                    36:fd:9c:17:4b:7f:44:9e:e1:92:2b:00:8d:3d:ba:
                    55:ff:f9:ee:07:47:62:42:13:da:fb:cf:8a:a6:bd:
                    e9:44:30:71:c1:b0:67:af:28:75:bc:0b:60:01:75:
                    da:7e:f9:09:c9:4e:d1:5b:db:f5:55:fe:74:e3:ac:
                    14:0f:7d:c4:0a:7b:d5:81:8d:e2:6c:44:51:df:71:
                    4a:48:cf:68:b2:33:ec:25:52:a2:2e:cf:de:c1:9d:
                    d2:59:ac:18:8b:da:c6:f2:0a:91:09:cd:f2:ba:f9:
                    66:60:bd:8e:2e:a6:9f:da:dc:73:69:e0:18:49:72:
                    0c:78:a7:4a:02:26:25:70:1c:08:37:ee:07:21:b4:
                    46:b6:12:32:29:17:a2:dc:63:6c:c1:ce:4f:7e:a7:
                    e4:2b:1b:b0:dd:23:53:62:63:f7:7c:64:66:65:3d:
                    16:ca:1a:3c:eb:1c:d0:41:dd:69:2d:85:a0:48:9a:
                    0f:39:fc:cd:0d:df:31:80:db:65:37:38:33:8c:12:
                    9b:e2:ca:07:97:6c:cc:1b:d0:62:e5:c3:20:71:c7:
                    bc:d5:ed:0d:55:a0:c7:80:7c:81:03:6d:c8:7b:de:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:87:63:96:E8:44:C1:A4:77:58:97:B8:D3:3E:8A:BE:C8:00:99
            X509v3 Authority Key Identifier:
                keyid:61:35:58:36:BC:E7:74:5F:7F:D8:87:25:1F:DA:3A:E8:CD:ED:35:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/61355836BCE7745F7FD887251FDA3AE8CDED35FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61355836BCE7745F7FD887251FDA3AE8CDED35FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPv6NwUwws1T8v83fJgf6KQDz854URiJ3eUbNqdRY48U/0/3136382e3138312e3138382e302f32322d3332203d3e20323635333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:25:7a:68:6b:79:be:2c:01:6f:30:49:74:da:08:aa:e1:
         d6:ce:19:25:87:e3:11:f2:6d:16:cc:e3:c3:07:e9:7b:4f:38:
         21:87:60:5d:39:04:8a:fd:b1:50:a2:dc:35:fc:ff:47:21:b2:
         c6:3f:fc:cf:9e:28:64:3c:24:2c:ad:dc:68:a8:b6:ee:3f:6e:
         63:23:e4:05:c2:3e:30:07:c4:a4:ce:e5:52:3c:21:14:95:a6:
         b6:6c:e3:0e:43:9d:74:ff:85:2a:97:c8:fb:29:53:40:11:3c:
         67:e3:90:63:dd:40:84:40:8b:24:b9:98:27:b1:a2:a7:d4:33:
         45:0b:d1:44:45:8d:4e:a6:1a:eb:c7:77:0d:34:3a:10:56:0d:
         8e:4b:ac:19:79:d9:6e:ae:9d:b8:c4:1c:e4:e9:09:ee:dc:b0:
         10:9d:d6:8b:ce:f8:dc:7a:2f:67:8f:a6:bf:5d:71:20:9f:de:
         56:89:a8:89:0a:fb:80:f4:62:99:42:50:b5:64:11:ab:30:8a:
         14:df:c7:1a:cf:85:9b:69:5e:e5:28:77:ad:c6:47:5b:20:05:
         e1:28:22:3e:3e:76:ae:43:4c:25:43:7d:0f:4d:7e:29:71:63:
         44:9f:50:52:4c:17:17:02:d7:cd:17:1b:68:63:a5:60:87:1d:
         ae:6d:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:51:47 2026 by rpki-client