Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa
File:                     3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa (raw, json)
Hash identifier:          81O5aVE/AVoMsdybtDERLTdHRsuPjrchUSIALjQ61Kc=
Subject key identifier:   7A:69:13:1C:F1:F1:24:B6:12:D9:52:8D:CE:FA:5D:28:AA:39:3A:97
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       3828B7A7D5C11BD069949A3C5B19B3DDF15DC277
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa
Signing time:             Tue 03 Mar 2026 15:49:25 +0000
ROA not before:           Tue 03 Mar 2026 15:44:25 +0000
ROA not after:            Tue 02 Mar 2027 15:49:25 +0000
asID:                     264952
IP address blocks:        168.232.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:28:b7:a7:d5:c1:1b:d0:69:94:9a:3c:5b:19:b3:dd:f1:5d:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Mar  3 15:44:25 2026 GMT
            Not After : Mar  2 15:49:25 2027 GMT
        Subject: CN=7A69131CF1F124B612D9528DCEFA5D28AA393A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:bb:57:e6:24:f8:6a:72:ee:52:09:64:fc:
                    e9:5d:a9:af:10:9b:4b:53:c5:62:72:f4:24:6e:4d:
                    1e:9d:6f:b0:09:2f:c9:33:b8:15:67:fd:66:46:c2:
                    52:97:da:09:07:28:61:dd:b1:74:38:5d:61:d1:b9:
                    7f:3e:66:ae:47:93:2c:f7:b8:23:1c:1b:47:61:52:
                    d5:5e:16:22:c3:9a:de:9e:ec:4b:ea:4e:1e:a8:91:
                    39:b5:79:c4:d5:8c:46:6d:70:e1:78:5b:e5:f2:6d:
                    bf:31:39:44:bd:43:ff:4e:3e:bb:11:1b:59:6d:30:
                    96:62:3f:14:7e:5f:53:33:fb:39:20:1e:ff:ee:4a:
                    52:ef:71:19:fd:12:72:b2:c2:e2:7e:12:ff:89:eb:
                    f2:fd:83:73:96:29:6b:a7:73:5e:d4:8f:ce:fd:a5:
                    c7:44:ff:ce:cd:12:ad:36:1f:2f:99:f5:b5:34:e8:
                    93:dd:90:af:bc:57:56:f8:2e:f6:0e:63:b2:2f:bc:
                    84:14:b5:d5:ac:aa:1b:c8:fd:f7:fc:00:10:cf:a2:
                    34:7f:41:4f:cf:d4:00:1f:a6:84:58:9d:0e:e9:21:
                    bc:4c:d4:8c:65:9e:af:fe:26:80:94:07:96:94:c1:
                    a5:66:42:39:b7:8a:c7:54:04:2b:e7:c4:08:e1:3b:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:13:1C:F1:F1:24:B6:12:D9:52:8D:CE:FA:5D:28:AA:39:3A:97
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234302e302f32342d3234203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:ed:3b:19:95:70:ef:a9:98:26:5e:7a:30:71:28:39:f5:
         13:70:86:a1:10:9d:a9:de:1c:ca:33:41:b2:de:b6:56:4e:3f:
         a7:f2:1d:f7:77:46:88:70:ca:49:b8:22:50:24:4a:0e:85:9f:
         e2:12:0b:f3:e4:c9:4b:ac:97:8b:d8:44:21:01:fc:a7:02:dc:
         df:54:0e:a8:b6:40:f5:d3:d6:eb:0e:68:1e:76:03:c6:23:1b:
         fc:7b:9e:b9:3f:59:05:3d:15:b1:0e:35:86:a5:bf:81:ef:42:
         58:05:57:c2:fb:27:fe:6e:78:9d:9c:8e:f0:8c:11:db:ae:41:
         ea:7f:8d:24:b4:6f:19:0d:c1:26:06:66:93:86:a7:ee:c5:ad:
         4b:7e:c8:68:78:d0:df:ea:1b:ca:fa:d2:71:3e:72:64:f9:1a:
         bf:9b:91:c1:2a:54:c0:5e:cc:4c:99:6e:ee:ef:31:11:89:02:
         fd:25:0f:17:e1:b9:6c:3b:c2:a6:96:ea:e5:1a:12:78:d6:8b:
         73:af:7e:84:80:be:46:e4:a3:ab:97:17:c6:af:db:be:27:c7:
         64:a0:d5:03:aa:a3:d4:c5:a7:32:02:64:ec:9a:2d:ba:8c:6a:
         86:b8:1d:70:28:d2:fb:74:35:f5:77:11:e8:ad:d8:9f:72:a3:
         cf:a5:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:16:10 2026 by rpki-client