Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
File:                     3139322e31322e3131322e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          5AlfVOEKh4aGDgamW6LgPBzM9IIMT2YGRydnyqqOrhA=
Subject key identifier:   E6:A5:91:2D:E1:8B:97:9A:A8:D6:44:EB:05:3E:85:EF:F3:BA:49:CF
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       491FE5EC025AED161D41AA0F1BD438B998DD736B
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 23 Feb 2026 15:04:35 +0000
ROA not before:           Mon 23 Feb 2026 14:59:35 +0000
ROA not after:            Mon 22 Feb 2027 15:04:35 +0000
asID:                     61942
IP address blocks:        192.12.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 03:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1f:e5:ec:02:5a:ed:16:1d:41:aa:0f:1b:d4:38:b9:98:dd:73:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Feb 23 14:59:35 2026 GMT
            Not After : Feb 22 15:04:35 2027 GMT
        Subject: CN=E6A5912DE18B979AA8D644EB053E85EFF3BA49CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:21:fb:79:5a:52:42:3f:3f:45:19:d0:4c:9f:
                    c3:97:16:59:71:d8:df:e1:f2:76:41:67:c0:81:52:
                    ab:e7:3f:06:4b:e5:a0:4b:3f:07:54:5d:76:b3:d6:
                    1a:90:fe:e0:27:69:45:7e:37:cd:62:df:1a:3c:cd:
                    04:c8:e1:c6:b8:26:e2:80:80:42:7f:3f:2b:09:86:
                    8a:fe:00:32:e0:5c:88:09:20:87:b6:fa:98:a6:c0:
                    96:4d:03:7f:82:29:e3:35:a1:9d:d6:33:28:84:7e:
                    44:c2:40:d7:da:3e:45:92:99:2c:d9:46:78:e9:dd:
                    96:d4:39:30:71:b8:6c:a8:c5:67:dd:2a:2f:ed:11:
                    b1:e3:6d:04:63:f9:ca:6d:78:03:19:98:bf:df:5c:
                    12:23:a9:fe:50:5f:3d:5b:39:33:cb:51:f4:5b:4a:
                    9f:88:1a:da:d4:15:6d:5d:5d:c8:c7:1b:fc:b3:5b:
                    45:2a:31:68:17:5d:46:1a:7f:27:37:4d:fd:44:e7:
                    19:2d:ca:60:6e:e2:17:81:fd:40:6b:58:6b:da:d5:
                    40:6c:dc:22:41:e5:6d:d3:d7:f3:5c:4d:6c:09:6b:
                    36:fe:64:5e:ad:e8:a0:a6:71:ca:1f:9b:32:35:c5:
                    68:f2:72:87:d6:fa:c9:48:6d:e5:2a:d8:d7:6b:f0:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:91:2D:E1:8B:97:9A:A8:D6:44:EB:05:3E:85:EF:F3:BA:49:CF
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3139322e31322e3131322e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:64:1e:6b:07:c2:e6:60:e8:5b:fa:85:c7:8f:b5:0f:f6:4f:
         2e:9a:9a:cb:83:82:e1:a7:25:73:c2:c6:c7:bd:e6:eb:2a:2c:
         b0:29:49:1b:77:47:4a:d1:52:6c:ac:25:62:3d:8b:80:90:f2:
         78:53:11:18:59:34:ac:c5:64:f3:12:ef:ec:1c:c3:52:8f:b2:
         f2:f6:c3:07:c0:64:66:ca:a1:38:23:f8:a3:34:0b:ad:f8:eb:
         11:c7:f2:15:a9:71:b9:d9:fd:9b:09:55:f2:08:b4:90:17:b0:
         a1:1f:f8:f6:67:92:4e:42:95:53:13:ba:01:58:a5:16:7e:40:
         5a:03:57:79:5b:e1:e2:9b:a0:80:57:fd:c9:45:61:b5:9c:3f:
         70:7c:59:7e:b9:41:8a:cb:56:24:5f:fb:91:ce:46:37:82:7f:
         3c:af:b6:51:14:14:41:b3:1f:1e:0b:37:25:fd:8a:b2:af:93:
         d6:c9:6e:d5:34:e9:77:d5:f4:b7:db:8e:43:a3:2b:36:ca:11:
         42:2d:fa:0a:a8:44:37:13:82:3f:0b:b3:b5:53:e0:dd:a4:28:
         06:76:35:d0:fe:22:5f:bb:03:71:45:72:1f:7f:22:5c:76:3a:
         56:74:05:31:f0:14:08:bb:8a:1e:eb:b9:97:72:d2:73:04:de:
         50:5c:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:55:51 2026 by rpki-client