Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa
File:                     3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa (raw, json)
Hash identifier:          P3pFgDvAdqyxUjtH5c8VLTftQc8B9OA/g5mxP3VjWkU=
Subject key identifier:   71:E4:52:E3:4F:9A:F2:37:26:62:3E:3C:76:2B:55:02:42:2C:BC:68
Certificate issuer:       /CN=8F66558670F52B216CF1A300EE9109FB19CBD795
Certificate serial:       21542A98261D040898FD9BABECEEFAF189B8A359
Authority key identifier: 8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa
Signing time:             Sat 23 May 2026 15:34:55 +0000
ROA not before:           Sat 23 May 2026 15:29:55 +0000
ROA not after:            Sat 22 May 2027 15:34:55 +0000
asID:                     265466
IP address blocks:        168.196.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl
                          rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 20:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:54:2a:98:26:1d:04:08:98:fd:9b:ab:ec:ee:fa:f1:89:b8:a3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F66558670F52B216CF1A300EE9109FB19CBD795
        Validity
            Not Before: May 23 15:29:55 2026 GMT
            Not After : May 22 15:34:55 2027 GMT
        Subject: CN=71E452E34F9AF23726623E3C762B5502422CBC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:59:78:a8:c4:c0:79:64:11:36:21:a7:3c:
                    68:c3:19:54:63:4b:66:01:5d:87:b1:7f:c8:51:02:
                    7c:dc:1e:e3:3b:0a:6f:b0:d6:11:43:a6:8c:28:56:
                    e8:79:b2:e3:17:53:aa:bb:ad:18:41:d6:a9:9d:ee:
                    b1:0c:50:b6:b1:f3:ed:6a:8d:cc:1a:ab:80:e0:13:
                    95:8c:91:c2:ab:9c:ff:74:67:a6:0b:ff:90:cb:e1:
                    02:97:a2:78:6c:0a:92:c2:54:90:a1:ed:8a:42:5a:
                    1d:ab:ea:a8:d0:70:2e:f6:d9:45:28:3a:8f:a7:90:
                    13:8a:61:d1:23:55:25:5c:12:4b:eb:38:5d:26:ac:
                    59:c2:fc:22:a3:4f:67:c6:88:ab:d5:3f:8e:aa:5f:
                    f1:69:c1:01:27:ae:45:45:f8:67:42:4a:a9:66:ab:
                    ca:37:03:ef:d1:55:28:ba:60:1f:e1:4f:8b:38:00:
                    75:0f:39:10:45:2b:b8:c7:28:41:16:a9:6c:02:be:
                    d5:a9:a5:33:32:10:3c:1b:29:38:f6:2c:25:56:63:
                    c4:5a:a4:3b:d7:b9:88:cb:60:c4:f8:af:2e:cf:53:
                    ee:d1:39:0d:13:44:1d:03:59:72:30:06:c8:cb:22:
                    17:65:72:59:88:d8:03:1e:49:86:89:eb:98:e6:8d:
                    bc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:52:E3:4F:9A:F2:37:26:62:3E:3C:76:2B:55:02:42:2C:BC:68
            X509v3 Authority Key Identifier:
                keyid:8F:66:55:86:70:F5:2B:21:6C:F1:A3:00:EE:91:09:FB:19:CB:D7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/8F66558670F52B216CF1A300EE9109FB19CBD795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F66558670F52B216CF1A300EE9109FB19CBD795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EtNBxUeou5hKm3EgFWrKtgNosxj2ACfSB1qAh5XHN9C/0/3136382e3139362e3137362e302f32322d3234203d3e20323635343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:a1:10:88:ef:56:23:ec:9f:44:03:84:37:ba:93:d3:8b:97:
         03:90:e9:18:8c:3e:8c:25:f4:4f:59:d5:3f:ef:e2:86:c0:f1:
         a2:4c:86:42:53:39:40:ae:4a:04:6e:ff:b1:b0:4c:3f:5c:55:
         b7:92:80:9a:9b:8a:f9:22:d1:18:10:24:54:ab:3d:c7:8c:3a:
         56:6d:b0:44:4d:b9:ba:77:5f:40:78:d4:c9:f1:08:03:92:31:
         00:a1:a4:8d:6a:ac:06:32:02:15:71:3f:10:ef:ff:e0:45:a2:
         25:7f:6d:58:d9:c6:0e:bb:76:80:29:92:57:04:4d:e4:bc:d0:
         ef:46:25:aa:96:77:1f:f5:73:2b:63:68:91:17:40:58:10:94:
         39:32:2b:1e:e5:e7:f1:d8:73:93:4f:ba:86:e5:7c:f6:39:d9:
         a0:20:d6:5b:6c:b6:af:b3:b8:a7:c1:37:44:ec:ee:95:c0:66:
         61:c5:42:8b:ec:c1:f9:73:13:4e:ee:1d:a4:bc:40:dd:9c:df:
         44:1b:4d:07:f5:d4:21:a1:fe:16:03:25:9d:ff:93:1d:e1:ef:
         61:f8:e6:89:8b:01:4e:4d:a1:bb:37:86:71:1a:91:e7:ad:2c:
         a7:62:a2:09:9e:ab:ed:9c:c7:5d:63:88:b2:b2:8a:47:83:85:
         56:5e:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:39:13 2026 by rpki-client