Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa
File:                     3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa (raw, json)
Hash identifier:          Dgcv0SjW+NhXp4ZmMarF/zApOmgmuVKlDFLYagPKAhM=
Subject key identifier:   76:D2:26:E7:47:3D:5E:18:67:7C:BC:46:16:74:94:DB:7D:0A:D1:C7
Certificate issuer:       /CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
Certificate serial:       104AB0CA6BEAE6F347819ED739AF2AAE2D69CC69
Authority key identifier: F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa
Signing time:             Sat 21 Mar 2026 12:25:28 +0000
ROA not before:           Sat 21 Mar 2026 12:20:28 +0000
ROA not after:            Sat 20 Mar 2027 12:25:28 +0000
asID:                     265237
IP address blocks:        167.250.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4a:b0:ca:6b:ea:e6:f3:47:81:9e:d7:39:af:2a:ae:2d:69:cc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
        Validity
            Not Before: Mar 21 12:20:28 2026 GMT
            Not After : Mar 20 12:25:28 2027 GMT
        Subject: CN=76D226E7473D5E18677CBC46167494DB7D0AD1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:00:ca:92:12:f9:2c:bd:1b:f4:80:47:df:37:
                    93:f6:2a:75:fb:b2:eb:04:29:5b:cf:d4:b6:0b:27:
                    54:d2:18:af:06:9b:63:a3:bd:f1:50:20:ca:b8:9a:
                    fb:e6:4f:7a:b2:fc:88:46:04:e8:89:a5:21:0b:6f:
                    f3:b2:42:41:8c:47:8b:8e:5d:77:02:9a:80:71:3f:
                    00:b7:d1:23:2f:da:21:58:ba:5a:94:be:76:62:87:
                    3c:e1:85:ce:28:71:6e:80:c0:30:97:87:57:5c:36:
                    ea:17:37:2b:15:33:99:bb:07:e6:3e:29:70:02:9b:
                    dd:d1:dd:57:e8:90:c0:f4:6d:0d:2d:b9:c9:51:4d:
                    dc:a1:74:3e:e1:f8:c5:d6:16:aa:b7:94:92:78:41:
                    05:76:76:59:e6:24:63:80:81:98:be:0b:b6:dc:5b:
                    de:90:1d:e2:b5:3b:15:48:36:68:36:fa:86:49:ae:
                    1c:64:45:eb:2c:66:3f:32:d4:83:a1:9d:3b:9a:b9:
                    24:a6:ff:fe:a5:b6:f3:9e:81:66:c1:10:74:64:6e:
                    d6:81:51:d7:ea:a4:96:98:33:72:38:3f:bc:0d:d3:
                    21:b1:e2:f0:99:e5:95:91:84:f7:9f:28:7c:9a:9b:
                    1f:ba:59:3c:3c:85:52:da:91:d6:75:88:8b:a0:99:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:26:E7:47:3D:5E:18:67:7C:BC:46:16:74:94:DB:7D:0A:D1:C7
            X509v3 Authority Key Identifier:
                keyid:F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32332d3233203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:4c:a1:c0:9e:9e:ca:c9:de:5d:48:51:e8:e0:f0:36:55:9d:
         12:d5:93:2f:7d:13:8c:88:1c:f3:ba:f9:8c:3f:79:95:89:b0:
         b8:e3:c0:cf:4a:2d:69:47:43:7a:fd:1a:fd:43:be:0d:90:1b:
         e9:87:ff:fc:24:94:b0:f1:45:83:a0:7a:8f:b0:d2:8b:2d:ae:
         05:10:d5:3d:72:02:c1:a9:11:bd:05:17:12:89:cd:a3:a1:4c:
         d0:c7:5a:81:93:5a:8a:cc:23:ee:09:5e:95:00:df:ca:0f:25:
         47:06:9d:f6:ae:6d:85:06:1a:c7:d4:7f:62:57:27:59:7a:0f:
         f3:36:cd:c2:d6:b9:1e:6c:02:c5:69:1a:7b:c3:a3:0f:ec:f3:
         95:b8:5b:b9:23:c6:cb:55:62:c8:8c:28:d3:ee:96:86:ca:3a:
         aa:04:57:6a:00:cc:59:6e:43:32:00:2f:15:86:22:8b:c9:cb:
         79:0d:5f:b4:67:04:4d:05:05:45:26:6b:13:5b:32:88:e1:29:
         25:c2:fc:cf:ac:98:d2:de:bf:45:13:ea:e4:19:89:a3:4c:11:
         47:e2:fd:f6:53:f2:c5:26:76:65:64:10:18:7a:f4:3d:0a:b3:
         e2:0a:2e:18:25:db:c1:f0:cd:23:5c:66:4d:32:b3:72:58:3b:
         9d:af:43:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:53:04 2026 by rpki-client