Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa
File:                     3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa (raw, json)
Hash identifier:          SxZQAE35KjoIKxtvw4hCd1ykd1xc9GMr7GBWpJeHEWE=
Subject key identifier:   99:D2:2E:95:53:C5:FA:71:BD:D6:A4:6B:8A:98:8D:8E:23:BE:58:FF
Certificate issuer:       /CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
Certificate serial:       2606EF8E916BD48E18B758D858C03E43819545BB
Authority key identifier: 4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa
Signing time:             Tue 12 May 2026 19:11:48 +0000
ROA not before:           Tue 12 May 2026 19:06:48 +0000
ROA not after:            Tue 11 May 2027 19:11:48 +0000
asID:                     265473
IP address blocks:        168.196.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl
                          rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:06:ef:8e:91:6b:d4:8e:18:b7:58:d8:58:c0:3e:43:81:95:45:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4
        Validity
            Not Before: May 12 19:06:48 2026 GMT
            Not After : May 11 19:11:48 2027 GMT
        Subject: CN=99D22E9553C5FA71BDD6A46B8A988D8E23BE58FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:f7:b1:84:1e:6f:54:6e:64:59:e1:af:ab:
                    cc:5b:e6:77:23:89:e4:4a:37:e6:2b:85:c8:f3:c3:
                    88:ee:b0:a4:be:37:99:b3:ce:34:ae:0f:25:86:b4:
                    d6:0f:26:ec:fa:23:87:d3:ed:8e:c0:42:63:50:b3:
                    13:78:c5:51:10:3c:92:bf:68:a5:d5:a6:25:5c:a2:
                    9f:f6:8c:2a:1a:ae:09:aa:88:7c:60:2d:b2:9f:54:
                    95:14:49:e7:71:66:04:2d:a0:69:a8:4c:15:88:f5:
                    2f:ab:7a:26:7b:2f:b7:1f:96:dd:14:d9:33:f8:18:
                    7c:27:2e:a8:c0:1c:e3:ed:f4:e6:c3:79:06:f9:64:
                    bf:a5:a3:43:bc:45:18:42:21:2e:d6:20:68:46:4a:
                    87:0d:0d:20:94:ab:be:d1:12:fd:21:07:bc:2c:e2:
                    5f:d2:d9:ed:70:14:e1:68:67:f4:80:9f:50:e7:0a:
                    d9:6c:51:e7:ad:01:32:4e:ff:41:27:40:0d:35:10:
                    49:cb:f0:2d:55:64:24:ce:cc:af:03:5b:9a:ea:53:
                    3c:c9:53:2c:c8:c2:45:09:48:ea:d6:f1:38:d4:26:
                    3d:9d:24:af:31:7c:5a:b2:04:5a:29:aa:b9:a2:fc:
                    6e:67:b9:bb:f4:de:ca:cf:34:c3:c0:f5:78:aa:0d:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:2E:95:53:C5:FA:71:BD:D6:A4:6B:8A:98:8D:8E:23:BE:58:FF
            X509v3 Authority Key Identifier:
                keyid:4E:F0:7D:51:4B:A1:D6:B2:FB:DA:6C:4D:C3:60:BE:B7:50:D3:C9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EF07D514BA1D6B2FBDA6C4DC360BEB750D3C9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XzaGJC4m4BYx2omZnK3tZ8pUzGCYGSUnQdvm1QFLyVs/0/3136382e3139362e3231362e302f32322d3234203d3e20323635343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:8d:22:cf:54:fe:5d:b6:17:6b:fd:ab:7d:36:aa:94:52:ef:
         b0:20:b0:9a:87:fc:30:bf:2f:21:e0:b0:3e:93:41:20:6d:f2:
         4c:c7:7f:a4:f6:e1:a1:91:9a:a6:84:34:18:40:6c:bf:14:86:
         64:f4:7e:41:5c:69:2a:2b:22:22:bb:d2:63:f1:f3:29:e3:42:
         f2:80:90:d8:2a:11:5f:a4:2b:7a:3d:55:23:e6:dc:64:0d:db:
         66:b1:52:9c:24:bf:7f:5c:76:24:b9:d8:e8:5c:e2:9b:97:9c:
         b2:a3:b0:40:b9:50:ef:fc:73:cc:fd:19:d3:cf:e5:d7:af:5c:
         87:dd:a4:55:da:c5:be:4e:f4:d4:89:ee:d6:9b:97:01:65:d6:
         ba:69:cc:08:ba:40:90:9e:73:67:a9:6f:86:90:c9:51:cd:61:
         0b:aa:74:00:13:1c:b9:b7:9e:38:5a:60:85:5b:a9:8c:0c:98:
         09:4b:88:2c:64:b5:15:dc:f7:71:28:b1:08:57:c3:58:91:e9:
         3e:ef:ea:e3:85:c3:77:fc:04:ee:03:ab:7e:0b:af:48:a7:cd:
         cd:de:7e:f4:b5:e7:7f:ff:6d:4d:ca:d4:d8:b2:37:a3:34:a8:
         b3:d1:9d:fb:7a:85:c1:7a:f5:88:f0:39:92:29:44:d5:2f:73:
         80:db:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:59:53 2026 by rpki-client