Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          4wPTh/z3Jjb1oTVIxAP61tUwkh3sKcUvVQHC5yFt0E8=
Subject key identifier:   7A:7E:C5:74:9F:22:E7:1B:50:C5:25:BE:23:D1:1F:0B:F4:66:7D:21
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       07A4928361615E7345EA1EF2142009F33C395B40
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa
Signing time:             Tue 28 Apr 2026 08:25:36 +0000
ROA not before:           Tue 28 Apr 2026 08:20:36 +0000
ROA not after:            Tue 27 Apr 2027 08:25:36 +0000
asID:                     264886
IP address blocks:        168.227.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a4:92:83:61:61:5e:73:45:ea:1e:f2:14:20:09:f3:3c:39:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Apr 28 08:20:36 2026 GMT
            Not After : Apr 27 08:25:36 2027 GMT
        Subject: CN=7A7EC5749F22E71B50C525BE23D11F0BF4667D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:3b:47:9c:2a:c2:7b:cb:12:e0:5e:30:3d:
                    8e:cf:69:72:8e:de:8f:3b:c6:9f:15:4a:19:e7:8d:
                    82:d9:51:0e:70:7a:8f:af:b9:c1:89:f1:8f:fc:02:
                    bb:db:9b:90:5c:f7:58:af:51:c1:d6:1c:fc:6c:99:
                    e2:69:a3:6e:25:7f:ae:f5:70:7b:74:65:92:0f:08:
                    b6:87:f4:be:97:cd:fe:7e:7b:2d:a5:d0:f1:dd:4f:
                    9f:77:0e:be:9d:2f:16:2b:59:c6:fd:88:76:21:fa:
                    dc:28:a3:7c:dd:60:42:a3:e1:5a:4e:11:d6:03:39:
                    79:49:be:79:66:37:d0:2e:78:00:bc:27:88:dc:9d:
                    86:a1:a6:68:ba:fc:c1:2f:00:be:b3:ee:a6:3b:f7:
                    65:ad:92:33:bd:ba:86:15:60:73:ad:26:00:cf:a2:
                    e1:b0:6e:60:c1:24:e5:f2:50:db:05:27:4a:c2:5b:
                    d9:ff:61:1d:55:50:82:f2:7f:9c:95:35:e0:2e:f6:
                    4b:9b:b6:90:09:4c:93:d2:c4:d9:cf:e3:0b:9f:dd:
                    f5:95:1c:8e:5e:e0:29:38:65:23:e2:10:42:96:7a:
                    1a:80:b7:60:f5:3b:0a:dc:74:f2:c8:77:4d:c1:fe:
                    ed:f1:ec:1c:e6:b1:b6:c8:3f:5b:3b:3a:46:81:4a:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:C5:74:9F:22:E7:1B:50:C5:25:BE:23:D1:1F:0B:F4:66:7D:21
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138302e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:fb:8e:18:6c:bb:bc:70:36:6b:ca:9d:94:fe:d3:df:c7:69:
         26:ae:67:a3:ce:53:b4:c2:52:fc:5e:19:11:7d:07:a3:18:69:
         68:c3:2e:7a:47:8d:11:2f:25:b6:7b:2b:a8:ee:e0:18:ef:b4:
         e7:65:9f:41:46:55:ed:04:53:e8:90:17:78:d6:3a:3e:b7:e3:
         80:bb:7c:9f:1b:fc:ce:84:16:85:3a:5b:d6:b7:92:c8:26:c9:
         f4:b7:af:27:4b:94:b0:54:84:81:63:9b:db:e9:aa:81:ce:6a:
         96:7b:42:5b:11:b0:6e:44:a7:4d:3f:44:27:a0:c5:1d:5f:03:
         92:8b:b8:d9:7a:50:2a:d0:d6:6c:77:62:18:45:22:01:9a:f9:
         40:e1:44:56:0d:57:12:14:c4:2a:ad:cc:7a:cb:be:3f:39:e4:
         11:63:ba:83:24:ea:eb:6a:b3:b4:fc:3f:b3:1a:58:af:c5:71:
         09:c3:d3:f4:73:16:6b:c1:92:3f:9c:f6:de:86:63:ef:49:ae:
         58:d0:73:b9:69:92:2c:42:4c:37:ab:a4:d5:b9:31:c0:73:18:
         ec:8e:7a:7e:dd:24:5b:5b:96:eb:bd:c6:93:7f:06:9c:e1:74:
         4f:fc:8e:c6:61:5b:26:42:d1:a3:a5:70:24:0c:ef:7b:c9:08:
         8e:ac:4d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:25 2026 by rpki-client