Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
File:                     3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          C0EYl2BtJWMowVE6GuKr2y/bUTIl6PrPCoFk0AikflE=
Subject key identifier:   8A:E7:7E:0C:C5:26:97:D8:E6:B5:C3:F3:3E:BB:33:0F:A8:40:80:E9
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       557FC52CB7D4364A3AE4C7503FB12FCCB0CE4608
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     262391
IP address blocks:        168.181.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 12:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7f:c5:2c:b7:d4:36:4a:3a:e4:c7:50:3f:b1:2f:cc:b0:ce:46:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=8AE77E0CC52697D8E6B5C3F33EBB330FA84080E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:78:13:69:5c:14:c9:da:c3:ff:2d:ee:03:5d:
                    e6:6d:b4:68:b2:bf:7a:bd:a7:82:70:8a:1e:dc:23:
                    01:12:ed:f3:33:c4:76:14:c6:e4:69:fe:e7:54:c1:
                    97:20:8a:10:ce:6e:1c:75:dc:73:bd:1d:2c:64:ba:
                    2e:93:b3:07:8e:2f:ab:c2:12:bb:b7:c4:fd:f4:5f:
                    ca:82:9a:6e:f0:99:d7:6b:65:05:7a:d0:98:48:5e:
                    a1:a8:09:34:5c:65:82:6f:71:2f:a7:07:c6:ba:5b:
                    0f:f6:4c:ef:b7:90:c7:32:a2:3e:5b:9e:2f:7f:da:
                    9f:71:48:3d:ef:ba:00:3e:a7:56:cf:59:19:a9:a6:
                    af:55:42:a2:56:2d:34:89:3e:49:8d:74:0e:82:e0:
                    5d:4f:e9:5c:a5:47:5a:5b:81:66:79:05:ac:46:c9:
                    60:1b:8e:62:b9:2f:18:a7:e5:ad:e4:71:6e:3c:6b:
                    0c:21:9b:7c:50:52:43:22:d6:bf:7d:6c:1b:ac:09:
                    8a:32:21:7a:54:1b:7f:36:27:56:2e:d4:c4:4d:a4:
                    09:e0:1a:1c:33:12:61:a5:c2:07:78:8a:eb:5f:1e:
                    e3:cb:40:96:4d:fb:a3:e4:79:95:91:3b:29:5d:76:
                    9f:f2:b8:a9:cc:cf:d7:66:4c:1a:34:92:0e:5b:6a:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E7:7E:0C:C5:26:97:D8:E6:B5:C3:F3:3E:BB:33:0F:A8:40:80:E9
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3136382e3138312e36382e302f32322d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:e1:15:7e:62:5a:79:54:11:46:bf:18:a9:cb:41:ed:20:
         d3:6e:01:b7:cf:8b:a9:d6:32:b4:92:59:8a:eb:e7:e4:ac:e3:
         1d:22:48:db:ef:12:e3:05:b8:2e:81:1d:c1:4e:db:4a:5e:d3:
         69:f2:41:dc:f8:ea:08:01:3a:af:5d:f0:11:76:57:9f:c8:44:
         e8:8c:d1:10:3a:12:17:47:d3:a0:b4:fb:7a:32:c1:56:b4:cf:
         cb:47:0c:d6:37:77:e1:b8:d8:c9:a6:4e:06:66:bf:24:71:c9:
         85:fc:cd:54:98:c0:4e:d1:a1:d8:7d:b9:5b:55:26:4c:be:d6:
         0d:7d:9b:37:c5:8f:ca:13:74:0c:24:6e:da:32:ef:03:9c:ef:
         10:ad:50:93:7a:a2:4d:76:ea:80:da:48:84:92:ee:dd:01:98:
         4f:90:73:a6:98:61:92:3d:0e:cc:2c:89:0f:6b:a7:76:89:17:
         8a:7b:e4:c3:35:5d:c5:81:e9:7f:7c:e3:03:98:82:59:91:8b:
         39:c9:5c:49:c6:64:f8:a0:5c:1a:68:1f:48:43:09:0d:f9:85:
         24:ab:c4:6f:67:81:4f:b9:b0:06:d1:0d:a4:0f:59:02:3e:51:
         3d:3d:6b:ed:32:4f:37:c2:34:a8:fc:67:8c:ea:d2:51:37:f6:
         b3:d6:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:10 2026 by rpki-client