Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
File:                     3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (raw, json)
Hash identifier:          ywjZoh0HrppMCg80HGonS6AHpJJimOXOO0uvBvlf4oQ=
Subject key identifier:   28:79:FF:CD:D0:B6:3A:BB:CA:77:BA:DB:84:96:B6:15:61:C1:63:EB
Certificate issuer:       /CN=BFB702449CB10F3DC44E7121930F9410743965D8
Certificate serial:       33C487B6B89E28E2AE637A95DBEADDFAF5F2ABBB
Authority key identifier: BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
Signing time:             Sat 28 Feb 2026 23:53:32 +0000
ROA not before:           Sat 28 Feb 2026 23:48:32 +0000
ROA not after:            Sat 27 Feb 2027 23:53:32 +0000
asID:                     265397
IP address blocks:        168.194.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.crl
                          rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 16:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c4:87:b6:b8:9e:28:e2:ae:63:7a:95:db:ea:dd:fa:f5:f2:ab:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFB702449CB10F3DC44E7121930F9410743965D8
        Validity
            Not Before: Feb 28 23:48:32 2026 GMT
            Not After : Feb 27 23:53:32 2027 GMT
        Subject: CN=2879FFCDD0B63ABBCA77BADB8496B61561C163EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:de:dd:51:4c:fd:36:cd:64:4a:a4:3c:f0:
                    00:63:a5:d5:4c:03:0b:31:6d:8b:42:74:28:80:c9:
                    80:67:9c:d3:bf:a9:b8:3f:e7:77:52:4a:a4:ee:5b:
                    e6:85:ca:37:2a:34:9f:c3:90:56:2c:e0:bf:4e:70:
                    b2:77:77:5b:e5:7a:1b:a6:9a:b8:1a:8f:49:1a:e3:
                    40:87:a3:23:78:6e:e7:82:73:1f:67:a4:3d:bd:e5:
                    72:22:37:a7:c2:6b:8c:24:cc:b5:38:15:f3:b8:c3:
                    60:04:57:ab:69:06:b2:41:0d:06:48:1d:c6:07:17:
                    1c:af:95:f5:e5:f3:ba:5a:0c:7b:c8:d1:90:1e:96:
                    0b:9d:cd:a5:af:4b:d1:d3:c5:65:9a:cc:16:18:f3:
                    ba:11:99:4d:92:95:29:59:41:36:f2:99:a8:7e:53:
                    ff:11:c3:d0:88:ef:46:98:71:ae:e5:b6:a9:30:2d:
                    34:8b:bc:45:e4:e9:fb:8e:06:b9:d1:e7:94:ea:bf:
                    9f:63:2d:34:ce:1e:9f:2d:0a:5c:77:b3:4d:63:16:
                    cc:38:4b:4e:3b:84:f6:5c:45:50:4e:cf:1f:a1:ca:
                    a1:96:77:4a:60:75:2d:c6:ab:76:b1:0a:f9:8e:99:
                    62:b8:9c:50:0b:24:29:fa:e9:8c:0a:c7:1d:fc:94:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:79:FF:CD:D0:B6:3A:BB:CA:77:BA:DB:84:96:B6:15:61:C1:63:EB
            X509v3 Authority Key Identifier:
                keyid:BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:6d:f4:ad:b3:96:11:63:e2:0c:19:64:c7:47:7c:51:6b:cb:
         e5:95:21:89:5a:7d:b3:9e:ad:64:1a:5f:5a:41:67:e7:54:65:
         6f:64:4d:c9:4e:9f:35:de:60:45:0a:3f:c8:bc:3d:1d:2f:20:
         ef:34:c4:a3:04:43:d2:05:e5:df:d8:52:b2:10:d9:27:68:ba:
         f9:0e:03:ea:98:27:6a:7a:bf:ac:17:bd:12:83:72:eb:91:ec:
         d9:17:be:78:1c:e5:19:ba:b7:0d:55:36:48:39:29:76:0d:80:
         8b:b9:6e:8e:7b:1f:d1:10:9b:d7:cd:3c:7d:28:d8:f5:df:88:
         65:80:90:91:88:04:e5:90:ee:39:25:81:48:ff:65:f3:a2:2f:
         fc:47:34:4b:3b:9d:eb:0b:1a:18:6a:68:09:63:31:0d:0c:e7:
         4b:85:86:04:c2:83:5f:ba:3e:d5:91:33:bf:01:0f:dc:34:ab:
         08:a2:ac:a2:82:68:f7:27:bf:89:8c:9c:c4:73:5d:e5:3a:3d:
         93:37:7c:3e:0b:d1:3e:d8:d3:4d:52:4f:6c:19:45:69:e3:d4:
         26:92:6e:b9:77:4c:68:85:1b:43:bc:b2:c2:90:c9:ff:51:ff:
         e8:49:76:79:d2:03:a4:71:c2:be:25:4d:d4:e1:60:75:e6:d8:
         5b:f2:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:53:17 2026 by rpki-client