Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          kcbQ5eq2STHZrvYL26cDDKxeMcs6GK4uZnEZ8Lfqrbo=
Subject key identifier:   33:F8:C8:CC:0D:E2:3D:13:F0:5C:CC:A0:C3:DD:9B:2B:D5:82:8A:33
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       1C5AAFA79B81EF2B63D693656AC1D81BA07B7799
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:44 +0000
ROA not before:           Mon 13 Apr 2026 15:39:44 +0000
ROA not after:            Mon 12 Apr 2027 15:44:44 +0000
asID:                     262296
IP address blocks:        168.181.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:af:a7:9b:81:ef:2b:63:d6:93:65:6a:c1:d8:1b:a0:7b:77:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:44 2026 GMT
            Not After : Apr 12 15:44:44 2027 GMT
        Subject: CN=33F8C8CC0DE23D13F05CCCA0C3DD9B2BD5828A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:f4:50:62:19:ed:50:cd:19:10:67:2f:ce:
                    0e:a2:92:69:93:74:13:03:cb:2e:59:b9:09:92:72:
                    c9:81:a5:28:73:b3:b5:45:32:56:42:65:9f:cd:be:
                    41:3e:35:7a:60:d6:ec:c8:18:fe:1e:e6:a1:80:4b:
                    4e:6a:91:5e:07:99:3f:17:ec:18:dc:18:28:a6:b7:
                    99:99:df:08:c0:20:92:27:91:d0:00:a7:7c:57:95:
                    cd:c1:b6:5a:5c:cd:11:85:05:6f:a9:15:52:93:bb:
                    e7:1b:a0:4f:43:44:7e:c4:01:03:54:12:dc:9f:19:
                    83:b7:0b:cc:6e:17:ed:99:ad:b2:08:29:60:ae:13:
                    01:03:c0:c6:c2:59:f5:e1:ff:c2:d2:6b:d7:be:4f:
                    1a:df:fa:ca:4a:7e:8b:ae:f2:77:07:43:33:34:48:
                    fd:40:39:0c:85:35:6d:83:a4:bd:31:45:2e:a5:95:
                    61:97:86:b4:51:1f:1c:5d:1c:2e:35:a2:1b:fc:ac:
                    20:c1:02:14:67:62:88:b9:94:84:1d:3e:f4:74:37:
                    4b:8f:84:ee:33:37:11:a5:03:0f:11:18:17:93:a5:
                    3a:da:55:ee:ad:77:3d:a3:c5:63:c9:45:eb:f9:0b:
                    bc:72:ef:41:7b:f5:5d:50:6f:c4:32:f4:80:89:76:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:C8:CC:0D:E2:3D:13:F0:5C:CC:A0:C3:DD:9B:2B:D5:82:8A:33
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:06:c6:41:14:b7:70:9e:50:ae:af:83:67:db:4c:6e:df:
         55:cf:19:a4:80:eb:ac:be:9f:c3:ed:96:74:eb:ea:33:cc:d3:
         2a:f6:97:d7:d4:85:e3:c9:af:eb:cb:e4:93:b1:24:0b:6e:a8:
         42:c5:a4:57:e4:89:70:17:6d:4b:77:ee:ba:68:72:1a:9a:f3:
         72:eb:24:31:ac:74:4f:bc:1d:ed:ff:99:b1:6a:fb:67:ac:01:
         3d:25:5c:8e:56:7b:45:27:a2:65:df:f7:81:7e:40:eb:86:4f:
         cc:19:fd:ae:ed:a4:da:9e:aa:7b:d9:80:9a:77:ef:5c:95:b2:
         3d:55:32:c8:c1:b4:9f:e4:c4:96:4d:10:a5:60:59:86:98:64:
         52:f1:67:4a:61:b6:b7:6e:5e:19:8f:d9:4a:c2:18:89:10:0d:
         85:6c:ac:f2:d2:f1:aa:fc:2c:e5:dc:36:92:f4:65:df:b6:e5:
         1c:ae:34:b0:d9:ad:b7:ef:b7:5f:de:71:b3:7f:fd:1f:b6:8e:
         39:89:7d:78:a4:15:36:1f:cb:55:d0:56:e5:e3:36:b0:81:22:
         01:98:65:66:c8:c3:b6:07:b6:31:ab:dc:6c:dc:9c:16:a2:7a:
         d2:40:6d:f9:dc:3b:bd:e9:8c:90:1c:18:d3:a5:7a:ce:15:19:
         21:31:e8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:20:14 2026 by rpki-client