Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa
File:                     3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa (raw, json)
Hash identifier:          PbU3Md6B0o26g9Dd1PU1URbwy2+4LCFNqrFqafMOCi8=
Subject key identifier:   A1:78:D7:89:F8:D9:58:AB:50:08:05:3B:E1:BD:8D:CE:2C:CD:03:7D
Certificate issuer:       /CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
Certificate serial:       7B2A02CC0A6B66F57FCA7298BAEF374A89CF52BA
Authority key identifier: F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa
Signing time:             Sat 21 Mar 2026 12:25:30 +0000
ROA not before:           Sat 21 Mar 2026 12:20:30 +0000
ROA not after:            Sat 20 Mar 2027 12:25:30 +0000
asID:                     265237
IP address blocks:        167.250.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 10:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2a:02:cc:0a:6b:66:f5:7f:ca:72:98:ba:ef:37:4a:89:cf:52:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4
        Validity
            Not Before: Mar 21 12:20:30 2026 GMT
            Not After : Mar 20 12:25:30 2027 GMT
        Subject: CN=A178D789F8D958AB5008053BE1BD8DCE2CCD037D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:47:16:3e:f6:70:dc:e7:8c:eb:f1:76:f7:
                    78:52:e3:2a:91:44:dc:e6:b5:7f:2b:7c:42:92:db:
                    db:90:50:f3:b1:48:0e:0b:5c:79:51:6d:1d:82:30:
                    eb:a9:3e:19:25:37:06:25:58:a9:36:f1:ff:e3:4c:
                    5e:1f:8d:37:db:63:62:4e:87:27:1a:6e:65:da:73:
                    3c:73:d1:e4:54:2e:1c:ce:7b:0e:37:f6:dd:7f:fb:
                    9e:96:69:fc:a8:9f:c5:44:86:f1:e3:b3:74:bb:6b:
                    bc:d7:e3:9a:d5:c8:de:76:43:74:1a:0c:e6:5f:7e:
                    34:42:dd:b4:57:a1:28:6c:a0:c5:51:0d:7b:1a:bf:
                    cc:38:0a:25:e1:24:46:ea:99:2f:c6:5f:75:1b:8f:
                    f7:eb:72:97:c2:d5:2c:9a:50:99:d3:d9:83:c0:1c:
                    1b:ec:68:94:35:55:f7:36:36:02:06:5a:37:1c:3f:
                    f6:78:70:c5:48:5a:34:e1:f7:bd:d3:98:f7:06:58:
                    e1:2a:18:c4:dc:6d:21:69:4b:1d:a9:9e:64:79:f2:
                    d0:54:e9:74:c2:24:1d:4a:cf:e8:f8:55:41:d0:4b:
                    aa:fc:c4:89:51:14:75:92:6b:2c:a7:f2:42:5f:8c:
                    40:e6:83:71:23:42:26:dc:aa:84:a9:17:d4:c2:0b:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:D7:89:F8:D9:58:AB:50:08:05:3B:E1:BD:8D:CE:2C:CD:03:7D
            X509v3 Authority Key Identifier:
                keyid:F7:D3:2C:AA:B0:28:9C:C5:E7:FD:17:B9:90:44:6E:5B:E7:50:AA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D32CAAB0289CC5E7FD17B990446E5BE750AAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/3136372e3235302e3234322e302f32342d3234203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:a6:3a:81:68:29:3d:4f:d4:4e:4d:3d:e1:9f:bc:40:dd:
         c0:37:87:fd:9f:19:9f:84:c3:fd:a0:b5:54:44:6d:a2:04:c5:
         26:7f:b1:ca:8b:8c:b1:db:21:ff:35:03:12:51:2c:58:c5:9f:
         80:53:2d:46:40:de:f7:0c:7c:dd:55:7f:0d:7f:67:e1:58:2a:
         e3:ee:f2:18:3c:c6:fc:92:54:16:3d:55:af:fd:90:1d:bf:1b:
         bf:78:0f:75:be:a3:e8:d7:91:0e:1b:e9:b0:18:7b:99:93:f3:
         6a:7e:72:2f:87:f9:01:d9:28:d5:dd:5a:89:f5:27:c9:7c:30:
         a5:b9:0b:3f:39:5f:27:20:a8:90:07:ed:42:98:09:cc:43:b9:
         3d:ca:e4:b5:f2:a5:8d:aa:2b:74:c6:e9:84:5d:ed:5b:1f:c7:
         f4:ef:a5:e4:56:3a:a3:36:62:46:fa:fc:20:ca:c5:50:12:34:
         09:24:02:ef:72:a5:38:30:f6:dd:eb:5d:dd:24:32:6b:19:c8:
         82:23:56:03:12:0f:ca:84:d2:3e:f8:20:27:0e:c0:80:bf:0f:
         7d:ef:ef:35:df:e5:40:65:5f:07:3b:e0:80:8d:86:9e:9b:b2:
         14:00:35:c8:c4:dc:a2:74:a3:85:eb:2b:99:02:21:82:b5:12:
         03:ee:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:58:12 2026 by rpki-client