Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa
File:                     3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa (raw, json)
Hash identifier:          RJ4or1gXvQwkygV4y0M5OOKh/lexlzaWnOR94PJNSQ8=
Subject key identifier:   C7:C2:CF:A3:8A:51:B6:F6:1F:6B:AA:85:95:FA:6C:38:A6:7A:FE:E2
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       326BE923DAD9C7653E92923120B2BC19D3414A48
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa
Signing time:             Tue 03 Mar 2026 15:49:25 +0000
ROA not before:           Tue 03 Mar 2026 15:44:25 +0000
ROA not after:            Tue 02 Mar 2027 15:49:25 +0000
asID:                     264952
IP address blocks:        168.232.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6b:e9:23:da:d9:c7:65:3e:92:92:31:20:b2:bc:19:d3:41:4a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Mar  3 15:44:25 2026 GMT
            Not After : Mar  2 15:49:25 2027 GMT
        Subject: CN=C7C2CFA38A51B6F61F6BAA8595FA6C38A67AFEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:e9:d8:d9:d2:f7:b5:cb:da:3b:35:c9:fd:
                    c3:13:20:e0:ec:17:b8:f6:03:f9:8a:4c:bd:41:87:
                    f3:23:f2:5a:c3:4d:e6:21:d0:c8:bf:50:e7:f5:f7:
                    26:73:0e:25:48:dc:d9:df:ca:52:80:78:77:1e:06:
                    f1:c8:d3:2b:10:3e:a7:c6:30:5f:0f:3b:99:38:d0:
                    89:ab:d6:b5:ee:8b:55:fa:f9:e2:4d:0b:dd:1c:ae:
                    f6:1e:d6:15:5b:ec:25:d8:6c:42:0e:cb:e5:dd:80:
                    8a:bc:09:49:29:e3:59:4b:61:73:75:ec:a3:48:4e:
                    c2:0a:fb:6f:5c:5b:02:38:70:41:77:f9:9f:4f:8f:
                    05:a0:08:79:59:e6:91:89:99:11:c5:2b:d4:df:f9:
                    43:e5:8d:2a:4a:e3:44:9c:07:6c:fa:3a:c7:46:ee:
                    1f:8c:1e:ea:42:89:62:65:80:a8:ab:93:fd:fd:67:
                    55:a5:76:f9:5e:04:c9:9e:81:59:a9:ca:7b:8e:ca:
                    2e:a4:a6:0f:f1:5a:51:1b:29:ed:e9:f6:66:52:ab:
                    8d:fe:b6:ee:dd:c7:49:73:09:1f:e0:ac:43:b4:d3:
                    27:6e:92:c1:ef:ed:bb:6b:34:84:48:b2:3e:08:47:
                    94:82:ce:ca:f4:c5:eb:2c:47:09:bf:f3:bd:67:f9:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:CF:A3:8A:51:B6:F6:1F:6B:AA:85:95:FA:6C:38:A6:7A:FE:E2
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32332d3233203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:65:8d:fb:73:e9:e7:c2:ac:9c:00:15:f1:c4:db:68:48:64:
         c4:d8:06:b3:a3:cf:c6:72:06:12:67:51:56:2a:c5:f4:79:5c:
         00:3d:26:8d:f1:8b:34:60:0b:6a:44:f4:83:35:4e:66:34:8b:
         7d:7b:83:b0:c1:9a:6a:50:ab:48:63:9b:39:51:e2:37:38:1c:
         1d:cd:ba:32:6c:ee:8b:ca:ef:2e:20:24:24:ec:7c:04:3c:88:
         ca:10:bc:73:86:a2:f7:3d:65:3e:0f:07:c2:15:d4:f5:91:29:
         ca:0d:ad:8f:2c:88:15:c7:46:e1:ee:66:52:a0:ca:b1:c1:62:
         4e:58:4e:4f:a4:4f:83:00:31:e7:0e:27:06:6e:a9:37:8c:bc:
         39:86:50:13:57:28:2f:8c:f6:86:fa:ef:c0:d5:7b:ea:1e:45:
         01:9d:12:81:8e:1f:f5:1a:d8:79:af:8a:86:61:85:fe:b2:55:
         65:ff:4f:40:83:13:a9:5e:05:d3:5f:c2:d1:b6:68:e9:ea:84:
         46:ca:83:71:50:4b:3d:4c:b6:8a:29:5d:de:25:e7:32:31:0d:
         46:c7:ca:af:ef:82:2d:34:04:d3:58:e2:02:86:cf:ff:ce:70:
         00:76:2c:18:9b:62:ae:00:c1:0a:19:48:fe:2f:70:91:76:44:
         ef:35:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:21:59 2026 by rpki-client