Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32332d3233203d3e20323634393532.roa
File:                     3136382e3233322e3234322e302f32332d3233203d3e20323634393532.roa (raw, json)
Hash identifier:          mCIXMlSzRicr5ecYB952ppA9SHrvLsUYDTlbIe59LSc=
Subject key identifier:   CC:43:8A:92:EE:8C:5F:37:81:B7:0C:43:7B:75:BF:DD:EF:84:10:54
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       68D4980EF6688F810F2934E0AACF72BA38093B35
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32332d3233203d3e20323634393532.roa
Signing time:             Tue 03 Mar 2026 15:49:24 +0000
ROA not before:           Tue 03 Mar 2026 15:44:24 +0000
ROA not after:            Tue 02 Mar 2027 15:49:24 +0000
asID:                     264952
IP address blocks:        168.232.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:98:0e:f6:68:8f:81:0f:29:34:e0:aa:cf:72:ba:38:09:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Mar  3 15:44:24 2026 GMT
            Not After : Mar  2 15:49:24 2027 GMT
        Subject: CN=CC438A92EE8C5F3781B70C437B75BFDDEF841054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:1c:1e:73:3e:ce:6c:75:54:cf:d1:51:f5:
                    21:6e:e0:f9:90:9b:be:4f:d0:89:4a:30:01:af:2b:
                    0d:92:21:53:c3:03:f8:51:16:d0:b5:d4:39:ad:15:
                    55:60:16:5f:c4:1d:c0:b0:c1:9d:07:27:0b:bb:99:
                    69:4f:5f:fc:9b:cb:99:4c:56:c9:47:28:62:d1:a0:
                    85:bb:11:34:d6:1d:9e:bc:6c:e5:e3:ed:0a:c9:51:
                    5b:7c:e9:95:18:99:9c:07:7a:ca:ef:b4:39:12:fe:
                    3e:68:8c:16:12:3d:57:80:22:86:c5:ba:2f:24:76:
                    bb:ac:11:21:f5:f6:db:2b:5f:7a:2e:84:a3:76:8a:
                    c1:03:9e:a7:f9:02:7a:25:98:dc:62:ac:5d:e6:8d:
                    31:ce:8c:96:86:9b:02:c6:f0:c0:5c:43:f9:b8:db:
                    79:0a:8b:cb:cd:27:21:ab:b4:73:86:50:4a:fc:e7:
                    e0:d9:d6:0d:b2:4f:d6:b1:97:7b:1c:c0:10:0f:37:
                    01:06:02:9f:73:18:ed:71:3b:81:85:16:79:70:0e:
                    3a:89:a9:e8:dc:dc:45:2a:95:6c:d5:84:cc:06:8b:
                    27:b9:3a:4c:bf:aa:91:7a:71:00:f8:58:ba:1e:ad:
                    00:75:a8:66:8f:c4:ec:4a:5c:66:d1:a8:eb:a1:8a:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:43:8A:92:EE:8C:5F:37:81:B7:0C:43:7B:75:BF:DD:EF:84:10:54
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3136382e3233322e3234322e302f32332d3233203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:da:73:83:c8:fb:c8:a4:3a:23:e2:82:8d:bd:39:d3:93:ac:
         1f:d5:fd:00:3c:0c:d7:71:02:f1:12:29:48:d0:c8:9c:49:bb:
         1b:0d:fc:53:1c:59:ac:a2:2e:99:11:e5:f7:a6:5f:52:d8:24:
         0d:5f:de:9c:77:6a:6c:6a:8f:ad:6d:bc:49:1f:82:32:27:60:
         6a:0f:98:c3:69:69:a1:f0:24:63:62:c4:a5:06:81:2b:77:c2:
         17:8e:b7:ef:5e:0d:23:84:f0:87:b7:23:17:0f:eb:e6:5f:62:
         3f:11:4d:87:b8:af:8b:56:7d:a2:c5:34:ac:d4:59:9c:bd:a4:
         5a:60:3a:b3:a4:33:e9:a9:01:14:de:be:42:c9:49:98:9c:ab:
         a2:b6:28:5f:2d:f7:39:b6:6a:1e:d1:ed:ef:67:56:5a:74:11:
         ef:97:e9:78:4a:d6:17:da:95:7c:13:45:45:94:72:63:f0:73:
         c6:ea:3f:dc:ad:a4:62:64:d3:17:92:96:0d:4b:e2:a3:a5:5e:
         e8:91:1d:3f:ae:3c:f9:d4:12:e1:b7:ae:66:b9:c8:57:55:39:
         2f:43:93:44:79:72:99:54:c1:11:22:6d:13:67:5e:11:f3:78:
         83:55:81:8a:8c:64:ad:d0:03:25:16:ef:2b:68:d6:67:32:c5:
         45:d5:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:22:12 2026 by rpki-client