Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
File:                     3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa (raw, json)
Hash identifier:          Dr/1zgY/1fBbN5qhqCE3cEauv89JjhU46Wq49sh/TLo=
Subject key identifier:   BF:B0:22:63:E7:F1:71:EB:9C:61:88:E9:BB:4F:81:14:45:D9:60:A3
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       670D508B44B0C6244BE4EBE9DB0F4103E6401465
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa
Signing time:             Mon 23 Mar 2026 19:54:12 +0000
ROA not before:           Mon 23 Mar 2026 19:49:12 +0000
ROA not after:            Mon 22 Mar 2027 19:54:12 +0000
asID:                     271253
IP address blocks:        164.163.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 23:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0d:50:8b:44:b0:c6:24:4b:e4:eb:e9:db:0f:41:03:e6:40:14:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Mar 23 19:49:12 2026 GMT
            Not After : Mar 22 19:54:12 2027 GMT
        Subject: CN=BFB02263E7F171EB9C6188E9BB4F811445D960A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:22:4b:81:a5:bb:d1:43:85:78:62:f1:c1:
                    e0:83:da:a2:f3:10:0f:6c:08:00:53:57:bc:95:3f:
                    90:86:ce:59:9e:60:82:fa:68:40:55:83:70:d8:b4:
                    a4:c8:85:6c:00:40:ab:9c:91:da:18:83:2c:44:d0:
                    fc:1a:64:f0:86:72:84:c5:bb:92:47:ed:a8:6e:e5:
                    46:7a:2b:77:1d:84:6a:f2:aa:f7:83:31:90:51:81:
                    30:79:d8:b1:dc:f8:f0:05:4e:fe:bb:7f:a8:fc:75:
                    78:5c:b2:3d:c6:7a:be:7d:cf:79:0f:5d:72:8c:4e:
                    c0:e7:76:d5:bc:9d:35:20:3a:0f:25:70:be:f2:19:
                    87:d8:5a:f1:67:9e:88:42:29:6a:44:7c:67:a0:c0:
                    3c:1c:0c:5c:86:6a:1e:80:f8:ea:fc:d6:d3:12:71:
                    5f:7e:b7:51:15:c7:25:3e:15:07:37:16:b0:da:3d:
                    fc:d5:16:38:a9:1f:3c:9f:a6:ec:57:29:e6:94:4e:
                    65:09:54:f4:b4:b4:62:3d:93:e4:c7:d0:09:2d:20:
                    35:34:ac:c1:e9:5f:c3:e0:b8:d5:3f:53:ba:02:f0:
                    c0:fd:1c:89:a3:81:fa:a8:2f:b0:de:e5:01:b9:34:
                    e9:ab:86:59:9d:c1:9b:3a:5a:94:2b:89:2b:79:6d:
                    80:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B0:22:63:E7:F1:71:EB:9C:61:88:E9:BB:4F:81:14:45:D9:60:A3
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3136342e3136332e3139322e302f32322d3234203d3e20323731323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:64:d5:53:8c:bd:3e:d2:b0:f8:38:5f:a3:91:fb:02:7c:f3:
         ab:a4:db:fd:12:ff:45:39:61:48:bb:68:df:96:31:4d:6d:27:
         c6:05:9c:b7:e1:ef:57:62:d9:4d:f5:a4:5e:82:03:53:50:15:
         a6:8c:81:76:18:c4:f3:96:a6:00:0d:5f:bb:93:b4:3e:b1:98:
         57:de:bb:ac:55:09:ee:2b:b2:18:ec:07:85:64:c3:ac:c6:45:
         09:0c:9a:e6:d9:3b:c6:34:23:54:fd:3e:00:f1:42:bc:cf:c0:
         fc:75:6d:87:e8:fc:3c:25:4a:de:f1:fd:01:f4:19:09:cb:f0:
         71:7e:d0:a8:e5:c4:8a:54:e8:e1:1e:91:26:3a:1c:3a:5a:41:
         ad:4d:87:1e:77:9f:d6:5d:16:ea:62:0a:bb:f7:dc:bc:27:89:
         a7:42:26:64:a2:36:3e:75:08:92:22:20:12:cf:21:4e:0f:ac:
         59:54:14:88:e8:8e:62:60:77:4b:a0:43:37:4e:ef:00:f7:ba:
         91:8b:6d:4b:d7:4b:90:67:ec:cf:98:3f:6b:d2:4a:e0:ab:1b:
         6e:45:75:d6:ba:f3:5a:b2:c8:d2:93:25:e7:ad:82:37:8a:a2:
         ec:25:f8:0d:e9:78:42:f8:d8:af:ff:46:64:0d:81:c8:b3:74:
         f8:84:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:13:20 2026 by rpki-client