Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa
File:                     3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          JJQgTJWb8UpCUI2mUargcAn8OL9ztJoMcmXESyteooc=
Subject key identifier:   40:ED:13:A9:91:E9:FD:9D:D7:F7:BF:EC:50:27:61:E7:95:80:61:8C
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       1E70E5264A76AF86F7843D06BA4C29ADD718D9B0
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:43 +0000
ROA not before:           Mon 13 Apr 2026 15:39:43 +0000
ROA not after:            Mon 12 Apr 2027 15:44:43 +0000
asID:                     262296
IP address blocks:        168.181.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:e5:26:4a:76:af:86:f7:84:3d:06:ba:4c:29:ad:d7:18:d9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:43 2026 GMT
            Not After : Apr 12 15:44:43 2027 GMT
        Subject: CN=40ED13A991E9FD9DD7F7BFEC502761E79580618C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:d0:9a:59:47:08:55:0d:85:f7:f1:c3:5f:
                    7f:a3:09:7d:56:41:f5:03:5c:37:f6:07:27:12:1a:
                    4e:1d:e8:4d:fe:04:e7:53:ca:38:5f:f4:5e:15:87:
                    40:e0:a1:7e:91:ac:18:97:8a:4f:35:c2:fc:e5:29:
                    58:b6:e3:50:0a:2b:91:50:c3:e3:88:e5:c9:10:7c:
                    36:43:1f:a7:34:80:19:21:a9:30:64:4d:06:97:3e:
                    ff:02:8d:6b:64:3e:5f:d8:a0:68:01:66:fb:42:8e:
                    71:4e:c1:89:c2:94:ab:05:69:c1:6f:37:9e:7c:26:
                    87:95:f9:23:6d:db:f9:e5:f2:0d:bb:10:08:9d:9c:
                    10:95:cf:d6:89:26:1b:9d:16:45:7b:8c:53:c9:83:
                    83:f6:62:d4:38:5d:a2:7d:bd:9b:93:b4:37:ad:04:
                    aa:dd:a8:2f:82:52:1d:77:c1:b8:9d:53:4e:52:4c:
                    57:4c:cf:5e:b2:19:c3:fe:b9:e5:c4:47:59:a2:db:
                    29:47:f3:6e:39:01:25:43:57:c1:8a:f2:ce:5e:d9:
                    27:27:f7:05:d9:a2:48:63:2f:b6:b1:9d:28:42:d6:
                    74:0e:14:5d:7d:1b:45:db:7e:ce:f0:d1:22:dd:d3:
                    d1:c1:ff:af:f6:3a:47:e0:76:9c:dc:19:fb:d7:59:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:13:A9:91:E9:FD:9D:D7:F7:BF:EC:50:27:61:E7:95:80:61:8C
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:c2:fc:ec:ba:55:42:24:b4:aa:4e:d1:b8:13:a6:e7:ee:
         c8:39:93:b7:92:71:91:97:bb:c9:20:41:ed:36:67:19:0e:d4:
         5f:15:0d:b4:09:cf:7b:1b:f0:89:d4:3c:f7:ed:25:60:0e:c4:
         f5:84:86:4c:5e:f6:39:59:bb:c0:14:36:2d:fa:00:85:ce:9b:
         97:f4:6b:3b:88:ae:4b:cd:98:6c:3f:8c:13:fa:ab:54:c4:f5:
         08:31:d5:b5:d9:2c:93:d2:cc:d8:68:5d:cb:63:04:50:65:02:
         45:df:f3:11:d9:cb:c6:9a:67:37:52:07:39:8d:80:28:45:09:
         d5:2c:c3:e2:f1:b0:d6:5b:04:56:38:68:79:af:d3:21:8e:76:
         6e:78:cb:61:30:d2:42:da:4f:99:7c:85:ff:a2:a9:8f:82:2f:
         fc:59:ef:62:07:af:4e:b4:7c:16:d8:68:49:09:24:6d:dd:94:
         2b:af:21:2e:75:4f:01:bf:ed:c2:be:7e:c5:0c:3b:b4:89:a7:
         ab:58:1a:7b:ff:71:96:5d:77:b9:79:9e:b1:3d:5d:fa:04:27:
         39:42:a7:98:9d:c9:c2:74:20:cd:0c:b0:88:eb:d5:d8:a8:97:
         c3:62:60:e6:1b:98:50:4c:52:ca:0e:50:35:09:be:b0:c0:ff:
         63:83:3e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:20:26 2026 by rpki-client