Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3332203d3e203631353739.roa
File:                     3136382e39302e3234302e302f32322d3332203d3e203631353739.roa (raw, json)
Hash identifier:          mrM6bXSUl3T24pGCTJHMwMbz/zdHZsSB3NKY1dV9uCw=
Subject key identifier:   54:40:FC:3C:E3:18:4D:32:22:B0:95:B7:F7:3D:7D:3D:AF:17:6D:C7
Certificate issuer:       /CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
Certificate serial:       1FA16C3DC414BCC454885A3BC0EA8FCB066F9E14
Authority key identifier: 36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3332203d3e203631353739.roa
Signing time:             Mon 01 Jun 2026 18:22:38 +0000
ROA not before:           Mon 01 Jun 2026 18:17:38 +0000
ROA not after:            Mon 31 May 2027 18:22:38 +0000
asID:                     61579
IP address blocks:        168.90.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl
                          rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a1:6c:3d:c4:14:bc:c4:54:88:5a:3b:c0:ea:8f:cb:06:6f:9e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC
        Validity
            Not Before: Jun  1 18:17:38 2026 GMT
            Not After : May 31 18:22:38 2027 GMT
        Subject: CN=5440FC3CE3184D3222B095B7F73D7D3DAF176DC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:c4:19:9d:1d:45:ed:93:6b:60:d5:fe:a8:
                    30:bc:d8:56:5a:9c:ca:09:67:1f:c1:be:29:92:30:
                    ae:7d:f6:09:d7:99:2c:cc:aa:d2:5b:3d:9b:01:ee:
                    8b:86:4f:24:55:bc:dd:a5:54:65:56:a5:44:f0:be:
                    7b:0b:50:d7:d2:b0:4a:59:25:f4:06:16:08:a2:d6:
                    0a:89:93:ab:e9:05:4e:29:6f:c4:89:2d:f4:7b:e8:
                    ae:2d:e9:1f:dc:0b:73:e3:cc:36:10:38:31:df:70:
                    a4:65:e6:88:c8:a5:95:e5:7a:0b:42:b5:46:e0:c0:
                    27:a2:c3:9b:61:41:8d:53:b2:75:20:0c:6a:00:a9:
                    d0:3b:db:71:e9:bd:e9:b5:1c:0b:69:30:ac:eb:4b:
                    21:2c:92:14:7a:c7:75:03:db:83:e6:6b:8b:65:77:
                    7e:96:7b:e4:c9:9a:f8:01:90:ab:fc:64:92:7e:b4:
                    df:b7:1a:6b:31:7b:6d:29:a6:f6:e3:e6:4e:42:d1:
                    34:95:c3:78:5c:4a:e2:82:3b:5e:1f:20:ef:6d:18:
                    16:c3:40:ba:34:9d:0d:78:d5:5d:ac:a0:9a:f6:bf:
                    a7:45:fc:d1:89:51:40:a9:7c:22:09:36:eb:5f:1e:
                    90:b9:b2:9a:bd:e8:3b:34:90:11:62:ba:47:10:f4:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:FC:3C:E3:18:4D:32:22:B0:95:B7:F7:3D:7D:3D:AF:17:6D:C7
            X509v3 Authority Key Identifier:
                keyid:36:28:F4:DC:97:DE:BF:13:9D:AB:6C:FD:17:DF:6F:A9:D6:2D:26:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3628F4DC97DEBF139DAB6CFD17DF6FA9D62D26DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41KBi8ksutJo9dzsKVzaMwQPGh6oNJyFLdX12iA67Uns/0/3136382e39302e3234302e302f32322d3332203d3e203631353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:8d:dc:8e:5b:1b:29:76:30:76:d9:38:8c:d7:3d:6a:0b:
         93:72:e5:68:2b:a6:b0:b5:2e:6a:75:1c:d3:77:57:3d:52:a7:
         59:11:26:06:71:f2:d7:4b:90:f3:41:71:70:31:7c:3a:f4:4d:
         3c:5c:03:6a:89:a9:69:3b:e9:f1:7b:94:11:ff:9d:e3:d4:d3:
         91:11:e6:39:03:27:d7:8a:97:65:a4:f3:7f:e1:8a:61:d1:62:
         1f:88:94:22:a2:5f:14:dd:0f:bd:a1:38:a1:c4:53:aa:58:21:
         ca:fc:c3:c0:9a:b4:18:e6:81:6a:a5:51:d1:6d:81:9b:08:f0:
         1b:04:d0:ec:35:b1:f6:f0:f1:22:ec:51:1e:47:1e:14:fa:ce:
         9c:ef:b6:42:05:16:13:9a:d8:29:6b:eb:2e:c3:c8:5a:26:ce:
         72:d4:70:ad:e0:e4:47:4e:14:fe:82:36:84:ff:0a:0c:5c:de:
         ae:47:93:2b:cd:8b:29:60:13:fe:5e:a5:9f:58:27:9e:57:37:
         f7:84:3f:8e:3f:27:b3:e9:9f:59:07:b2:e0:c3:a4:65:97:5a:
         06:5d:0a:88:f0:3f:e3:22:d7:aa:67:38:fa:ca:a8:29:af:b7:
         98:21:bb:f3:fa:2a:73:7a:02:8a:5c:eb:9b:10:8e:bf:30:6f:
         b8:0c:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:50 2026 by rpki-client