Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3235203d3e203631373438.roa
File:                     3136382e3138312e3139322e302f32322d3235203d3e203631373438.roa (raw, json)
Hash identifier:          u7WNxaKW9O4uWjB1Ty0N+nRcAualYvNSd2tf+0rox8s=
Subject key identifier:   36:DD:D2:EC:00:52:33:2A:B4:6B:F3:7C:B4:9C:E1:79:94:49:5E:A8
Certificate issuer:       /CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
Certificate serial:       7AE65CA177AA02883CB9C753207D805CF1E6EBB5
Authority key identifier: A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3235203d3e203631373438.roa
Signing time:             Wed 15 Jul 2026 19:54:25 +0000
ROA not before:           Wed 15 Jul 2026 19:49:25 +0000
ROA not after:            Wed 14 Jul 2027 19:54:25 +0000
asID:                     61748
IP address blocks:        168.181.192.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e6:5c:a1:77:aa:02:88:3c:b9:c7:53:20:7d:80:5c:f1:e6:eb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C
        Validity
            Not Before: Jul 15 19:49:25 2026 GMT
            Not After : Jul 14 19:54:25 2027 GMT
        Subject: CN=36DDD2EC0052332AB46BF37CB49CE17994495EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:7c:ed:81:e3:6b:2e:2c:80:ea:66:82:e6:
                    f6:f2:99:3e:85:b8:9f:d0:57:08:d7:2d:6a:7e:a9:
                    d6:bd:ce:23:bc:75:f6:36:56:60:2f:c5:8c:59:cb:
                    59:c2:c5:07:e2:e0:86:b0:4e:c0:5c:4c:f4:b4:27:
                    03:55:7a:a9:f4:d7:91:29:83:12:9e:43:10:e6:77:
                    3c:50:8d:cb:b6:e5:11:0c:76:71:65:91:b8:ce:9d:
                    72:dd:28:e6:44:a9:30:2b:a7:b3:14:01:d3:19:ec:
                    75:51:a7:a5:51:85:a0:59:81:84:14:2f:5d:3a:8c:
                    c3:70:80:fe:a1:c2:9b:8b:bd:c8:0a:8f:f3:50:d2:
                    c5:e5:66:88:2e:b6:3e:73:4b:e6:94:6e:55:88:99:
                    3c:9f:0e:27:cd:fc:32:75:7c:dc:14:81:d1:c3:0c:
                    53:37:ef:66:6e:cb:29:32:91:51:93:81:d7:35:fa:
                    36:cd:e5:e0:b7:df:a2:6f:69:ca:10:f2:e9:70:62:
                    db:42:16:9c:ab:9a:7b:55:41:ea:9f:aa:6c:0d:93:
                    27:0f:9b:bb:56:7d:2a:cd:4b:be:c8:45:da:31:5a:
                    f2:a2:be:79:23:6b:48:cc:0a:cc:73:af:29:fd:c3:
                    7d:82:49:57:be:ec:02:4e:ae:db:37:1b:76:6f:b7:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:D2:EC:00:52:33:2A:B4:6B:F3:7C:B4:9C:E1:79:94:49:5E:A8
            X509v3 Authority Key Identifier:
                keyid:A8:32:2B:46:0E:AB:5F:E9:E7:55:5A:B2:A3:86:7A:74:FA:84:EB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8322B460EAB5FE9E7555AB2A3867A74FA84EB7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/3136382e3138312e3139322e302f32322d3235203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:0a:8f:d4:d3:38:d3:9f:73:ad:36:fd:3e:95:13:d1:78:f8:
         19:1f:88:ec:c6:e4:6a:a3:ac:c3:98:c4:14:c6:46:62:7c:b1:
         f5:19:d5:4e:95:1b:0c:f7:64:9b:90:d0:1f:26:a9:14:9a:76:
         8a:01:73:cb:a6:ed:94:7b:24:ec:2e:c1:73:c5:39:a3:44:e1:
         ef:ac:3a:4e:c1:06:80:66:29:8a:59:ba:5b:86:04:26:96:13:
         b2:c2:8b:22:af:42:8e:48:ef:cd:f2:bc:0b:17:61:b6:16:fc:
         31:ed:0e:33:5f:30:0b:0e:70:fc:91:9c:2d:2e:c7:60:c1:8a:
         42:ee:16:c4:e0:ca:0b:ec:a1:ee:d4:e7:70:4c:49:38:f7:29:
         68:03:9c:ec:f4:64:d3:63:a9:78:6d:79:f8:88:f4:d2:7b:2e:
         a5:b2:64:f9:c4:40:2a:e8:cb:2c:0d:55:69:dc:a9:a3:ed:b4:
         b5:05:1e:6e:0c:49:f1:6c:66:b7:6a:db:66:c4:80:75:b2:d9:
         58:04:73:ae:0d:f1:ba:00:a4:e9:e4:11:e1:2d:7d:e6:e5:5c:
         ff:d6:cc:41:d8:1c:02:f8:a9:7b:13:88:28:a1:b4:41:46:1e:
         ee:44:ad:6f:1d:7c:08:46:90:55:71:f4:62:1b:54:53:df:b7:
         f6:d2:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:11 2026 by rpki-client