Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
File:                     3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          F1Kr/qcyX+Pgx2BchpFvDte42NPC1+GG8eozsDnEms8=
Subject key identifier:   6C:E5:D0:96:C0:CB:71:51:87:D2:68:D9:75:7A:D7:9C:36:79:DC:82
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       61E405C57D4C69FB799691DE66C17BB533084B4A
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:16 +0000
ROA not before:           Mon 02 Mar 2026 18:30:16 +0000
ROA not after:            Mon 01 Mar 2027 18:35:16 +0000
asID:                     262296
IP address blocks:        168.181.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e4:05:c5:7d:4c:69:fb:79:96:91:de:66:c1:7b:b5:33:08:4b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:16 2026 GMT
            Not After : Mar  1 18:35:16 2027 GMT
        Subject: CN=6CE5D096C0CB715187D268D9757AD79C3679DC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:09:fd:e0:3c:f3:8c:18:74:e3:f9:72:03:89:
                    76:d9:55:a7:77:f7:d2:3b:60:6d:79:a6:4d:af:54:
                    13:b5:87:01:8d:dc:86:fa:b1:4a:2c:f0:ca:eb:fa:
                    12:58:88:d5:92:c7:e2:36:ab:c6:81:16:b7:94:c5:
                    66:9b:eb:65:0e:ec:50:f0:11:d1:9b:5d:08:6d:95:
                    78:36:fb:c8:12:4d:b0:d3:d6:c9:e5:e1:64:8d:5c:
                    e3:dc:b6:68:ae:ab:df:47:fb:5f:65:e2:7a:b8:19:
                    eb:ce:a5:44:bc:02:40:b4:27:17:86:d2:f9:52:ec:
                    a2:8e:82:82:8b:d1:65:13:43:88:6b:f1:5a:e0:57:
                    64:81:13:d0:07:77:93:db:02:cf:57:49:ae:64:33:
                    b7:41:ca:44:f1:bf:f8:57:ab:aa:f4:ec:8d:7d:8b:
                    91:a2:2d:3a:60:15:87:ec:68:d1:09:5d:c4:d8:28:
                    9f:39:83:6e:1a:87:48:7d:33:c9:92:2b:57:33:84:
                    5d:ce:a1:e0:f5:91:1f:99:0c:2e:63:bd:5f:2d:8c:
                    42:b4:af:92:12:d5:ad:93:47:fb:c6:03:09:4e:1a:
                    5d:eb:e1:0e:6b:41:bb:c1:bb:44:59:10:bc:42:64:
                    97:e3:c9:ef:65:cb:0b:bf:c5:88:13:c4:f0:cb:78:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:D0:96:C0:CB:71:51:87:D2:68:D9:75:7A:D7:9C:36:79:DC:82
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139392e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:05:d4:85:a0:c0:f8:6a:89:ce:f9:57:83:0e:16:13:50:3e:
         76:d7:e1:b7:ef:fa:9c:70:bb:5d:3e:93:c2:60:0f:a9:e0:35:
         15:2b:d9:f8:dd:b5:4d:88:db:8e:f9:4a:33:4b:9f:83:da:96:
         f5:ec:d7:38:e2:04:ca:69:ec:19:81:25:fb:6e:81:49:fb:6a:
         9c:7c:3f:1a:b4:95:32:fa:3e:25:fc:dd:09:3a:fd:9f:68:2a:
         3e:7c:14:17:86:69:58:9a:8e:4a:dd:b9:e5:5e:43:2b:d7:62:
         e0:1f:38:91:9d:a5:6c:ce:2a:a8:06:23:dd:f0:5e:39:52:6f:
         37:b5:61:41:63:07:dd:ea:e2:55:64:07:b3:db:9a:11:b6:0b:
         32:b7:00:4f:7b:a4:d4:d6:1d:8f:83:be:5e:3e:a9:8b:78:11:
         60:d0:20:99:58:02:17:d3:42:13:07:14:3f:83:62:13:e6:80:
         2c:60:0a:22:26:cb:10:ed:21:5d:15:90:a6:8f:fa:37:c3:c4:
         3a:bf:70:29:36:e2:89:b7:7d:79:0b:27:aa:46:01:63:ab:a4:
         f5:d6:a2:df:99:bd:04:b9:33:72:d9:d9:f6:a9:51:c2:ed:9b:
         b6:65:1c:eb:eb:9f:dd:f6:84:0e:d0:ec:3f:0b:59:be:d8:01:
         a5:44:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:27 2026 by rpki-client