Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa
File:                     3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa (raw, json)
Hash identifier:          5fwxo/xLeZgxGg/to0pXx+X1QYz2KKyEzx6SM8UbjD0=
Subject key identifier:   AE:33:BA:1B:FB:E5:C8:FC:58:46:76:B9:8A:EE:1E:47:5A:0E:16:AA
Certificate issuer:       /CN=7958C661EB8D493DABCAD14C921B052049BB4E87
Certificate serial:       15F55F30AFAA469DBC0230F4EA207D3EC3B7686C
Authority key identifier: 79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa
Signing time:             Fri 20 Mar 2026 13:25:26 +0000
ROA not before:           Fri 20 Mar 2026 13:20:26 +0000
ROA not after:            Fri 19 Mar 2027 13:25:26 +0000
asID:                     263450
IP address blocks:        168.232.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl
                          rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:5f:30:af:aa:46:9d:bc:02:30:f4:ea:20:7d:3e:c3:b7:68:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7958C661EB8D493DABCAD14C921B052049BB4E87
        Validity
            Not Before: Mar 20 13:20:26 2026 GMT
            Not After : Mar 19 13:25:26 2027 GMT
        Subject: CN=AE33BA1BFBE5C8FC584676B98AEE1E475A0E16AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9c:ca:12:c8:d4:a3:e1:03:06:b7:93:f5:00:
                    a0:ae:75:d1:5a:82:6a:f6:d6:40:4b:e9:6f:1e:c5:
                    14:35:89:de:ca:b0:34:91:72:93:d9:10:f3:a4:aa:
                    8b:bc:1d:6d:e2:7c:52:87:8c:54:c1:f0:b9:a4:46:
                    df:db:3d:22:91:79:27:0b:a8:e2:63:ee:02:47:d8:
                    9c:e2:14:fd:4f:41:32:ff:1e:13:02:1d:34:70:52:
                    b6:48:0b:e6:ca:d7:f1:2c:48:8e:81:49:dd:d6:94:
                    26:fc:9b:22:c6:a0:78:c8:fb:36:b4:af:2e:34:63:
                    da:b2:87:cf:cf:14:07:51:18:53:f5:a4:28:06:57:
                    38:1d:ac:49:11:4c:02:b2:eb:7e:9c:c7:80:1d:50:
                    1d:24:69:da:0d:30:da:74:30:bb:fb:da:4d:a3:00:
                    5e:98:f6:70:9c:02:6f:4c:56:8d:db:ca:d4:8a:eb:
                    14:e7:6f:df:60:85:ec:5b:5f:7a:8c:36:72:af:50:
                    69:5d:20:20:88:29:d1:d6:30:c8:56:04:f2:cf:ba:
                    4e:0c:10:2e:c7:fd:7c:df:3c:1e:8f:8f:9a:8e:0f:
                    1c:38:74:52:cd:f2:84:3e:df:b5:bd:bf:3c:bb:0f:
                    e7:95:59:fb:6d:d4:60:fe:3d:fb:96:09:ac:4a:7b:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:BA:1B:FB:E5:C8:FC:58:46:76:B9:8A:EE:1E:47:5A:0E:16:AA
            X509v3 Authority Key Identifier:
                keyid:79:58:C6:61:EB:8D:49:3D:AB:CA:D1:4C:92:1B:05:20:49:BB:4E:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/7958C661EB8D493DABCAD14C921B052049BB4E87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7958C661EB8D493DABCAD14C921B052049BB4E87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/3136382e3233322e3135362e302f32322d3332203d3e20323633343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:d9:c6:2e:25:e7:e4:2f:14:0e:dc:ae:29:b3:1c:17:91:
         aa:3a:00:7c:82:f6:2c:ce:ea:22:ed:b8:68:56:d4:df:c7:a7:
         9b:13:00:75:64:ab:f1:f9:72:25:57:c1:c1:db:7b:97:50:5a:
         aa:2a:09:0b:19:0b:2a:8d:71:dd:eb:d9:70:24:ef:7d:32:10:
         5c:62:e8:37:34:92:78:b0:11:0f:45:52:84:50:df:a0:23:ff:
         46:2e:90:1d:30:f0:d7:6b:97:4a:96:76:79:01:d3:dd:e9:32:
         17:4e:82:79:16:a6:38:9d:9d:b9:22:ea:33:5f:7b:99:08:77:
         47:4f:4e:32:c3:7c:02:51:2c:41:35:dd:8c:8f:ba:c5:92:ec:
         a6:f6:92:b6:33:1a:b7:37:e6:1f:4a:40:51:8e:2c:98:53:7f:
         90:b2:13:c1:dc:4c:08:99:5b:8d:37:42:c6:fa:b6:c1:4e:3d:
         4c:7f:d5:3b:3f:9f:2d:1b:a5:d1:bf:08:34:f8:3f:4d:24:01:
         51:d1:d4:01:14:2e:0d:da:cc:66:fd:89:fa:93:e4:0f:85:d9:
         b0:2d:43:6f:e6:b6:b8:95:eb:58:d6:f0:f1:67:8b:b0:02:38:
         ad:44:e7:0b:cf:99:ad:0f:b5:5c:52:13:71:4b:93:1c:0b:eb:
         ab:c5:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:23:38 2026 by rpki-client