Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
File:                     3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          yyRI4K7tIdz59xf6Kmvu1YuBRFTX0Le8eJaGFAl4yyA=
Subject key identifier:   EC:06:60:2C:CC:51:87:31:DF:50:CE:1A:C0:57:E4:5B:54:D6:47:E5
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       1A9C7F2D372A5BD6171ED378F4507D6F2B50B56D
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:40 +0000
ROA not before:           Mon 13 Apr 2026 15:39:40 +0000
ROA not after:            Mon 12 Apr 2027 15:44:40 +0000
asID:                     262296
IP address blocks:        168.181.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9c:7f:2d:37:2a:5b:d6:17:1e:d3:78:f4:50:7d:6f:2b:50:b5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:40 2026 GMT
            Not After : Apr 12 15:44:40 2027 GMT
        Subject: CN=EC06602CCC518731DF50CE1AC057E45B54D647E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:08:c4:58:e9:76:8b:f5:a3:5d:05:c5:25:
                    b0:21:b0:33:42:ef:4f:b0:61:8f:34:37:67:6d:d4:
                    ed:f4:1e:bf:bd:7b:f3:41:d1:ad:a7:73:17:f3:ec:
                    66:b3:e0:b0:41:58:bd:3e:f4:e7:7f:4c:33:03:b2:
                    dc:af:b3:07:cb:9c:0d:59:c7:72:86:ff:63:00:47:
                    12:61:18:20:cf:75:db:40:6d:60:98:7b:06:a6:36:
                    12:3e:fe:13:39:ab:4b:81:84:f5:c5:3d:4e:30:4b:
                    32:03:9a:fd:cd:99:33:00:2a:d9:ba:80:3a:f2:09:
                    e9:e3:e8:a7:01:7e:a7:18:57:2b:e7:84:a8:0d:27:
                    9b:f6:46:be:4a:ca:db:25:1b:b9:d8:c2:c0:9a:7b:
                    1c:2d:1b:f1:a6:99:e6:4e:dc:0f:36:5f:4a:01:44:
                    e6:80:9c:3c:ea:d1:1d:5e:ac:e0:85:c7:20:a9:c9:
                    8f:81:e4:69:8a:bb:c8:e0:1f:40:9c:70:0c:a5:3d:
                    da:de:f0:08:79:ba:e4:98:49:87:92:a8:3c:bb:42:
                    2d:23:83:af:b3:06:9f:2a:b4:9e:9e:99:a9:c2:68:
                    32:f4:f6:b0:ac:c3:db:79:6c:75:d5:67:6d:75:c1:
                    5b:77:b3:ec:76:61:72:2a:d4:8d:c8:76:80:1c:03:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:60:2C:CC:51:87:31:DF:50:CE:1A:C0:57:E4:5B:54:D6:47:E5
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139362e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:76:f0:e1:1a:cb:34:72:76:d1:63:ea:d1:2f:95:c5:7f:49:
         56:fa:82:48:d8:97:d2:d8:73:5b:db:95:c2:98:61:ab:3c:48:
         f6:3e:4a:6b:0e:05:11:fa:1c:31:3f:5b:fb:7e:c8:d7:31:94:
         20:76:b1:aa:d5:2e:37:e9:6b:eb:20:c6:f2:b3:74:25:f8:3c:
         fd:64:b5:6b:c8:2b:d3:3b:92:50:f6:d9:26:fa:07:09:1e:8e:
         e3:0c:6c:67:5a:98:e1:f3:8b:6d:44:e5:82:db:8a:b3:48:f4:
         4d:fb:5f:9f:e9:f2:28:2e:99:37:2b:e3:bb:d2:5f:fd:a7:54:
         66:9e:51:e7:0c:d8:0b:56:a4:32:af:db:70:63:6e:15:f4:e7:
         9d:24:7e:94:de:41:4e:f4:f2:3e:8a:08:c5:34:72:3e:4c:d6:
         5b:12:60:c7:48:f3:fc:f0:ca:b7:8b:f8:fd:ee:14:b2:d7:70:
         8a:20:55:11:4a:39:c0:8c:81:a3:90:00:b7:46:22:54:15:b5:
         a7:d4:4a:c5:91:47:d3:76:0a:93:8c:fb:c0:83:f3:d9:da:fa:
         e1:99:09:31:5a:d9:67:d0:20:f0:8b:45:e8:99:09:13:20:9e:
         f7:2f:63:6f:a1:18:64:45:3b:a1:87:2a:72:63:9d:a6:6a:55:
         2c:8a:e7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:47 2026 by rpki-client