Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa
File:                     3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          2KaaUVRuJxcGAhQJtNZUHgLCe+ENW2hSna6VoAJZXl8=
Subject key identifier:   17:F3:D6:4A:71:CB:A3:FF:F6:43:F8:03:C4:F8:50:4A:31:BE:C6:46
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       641EEB2EE2DF261930042A989AC36C4055D9E0CC
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 25 Feb 2026 14:54:07 +0000
ROA not before:           Wed 25 Feb 2026 14:49:07 +0000
ROA not after:            Wed 24 Feb 2027 14:54:07 +0000
asID:                     61684
IP address blocks:        168.228.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 00:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1e:eb:2e:e2:df:26:19:30:04:2a:98:9a:c3:6c:40:55:d9:e0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Feb 25 14:49:07 2026 GMT
            Not After : Feb 24 14:54:07 2027 GMT
        Subject: CN=17F3D64A71CBA3FFF643F803C4F8504A31BEC646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:18:90:03:b5:fb:d1:fa:6e:e5:86:75:a1:
                    fb:32:c4:b5:8d:10:93:01:d8:00:9c:ad:da:bd:cd:
                    c7:e8:01:67:d9:11:d5:2c:02:05:cc:8d:ca:59:76:
                    87:c9:e6:f1:41:56:1d:79:4b:c9:9f:e4:95:1b:42:
                    c4:70:0d:bd:c6:08:15:00:c5:48:45:e4:6b:44:33:
                    62:8d:f8:cf:f7:c5:16:4d:17:4c:9f:4b:18:ec:06:
                    ae:f6:9a:57:a8:16:e2:56:f7:f7:cf:fb:5f:b7:ad:
                    af:e9:10:66:1d:57:9b:6b:92:c3:e0:99:58:8b:4c:
                    ed:16:92:4b:c1:d3:f4:4e:e4:db:ec:94:8f:cf:4f:
                    0f:40:56:b7:bd:04:0e:40:8c:22:4a:5f:3b:d9:ab:
                    56:ab:17:59:00:c3:7b:c8:d2:71:19:e6:27:d0:cd:
                    ce:4f:de:6a:3a:af:b3:5f:c1:d6:82:55:c1:9e:2b:
                    0e:e1:14:d4:ab:49:77:d5:2d:d7:cc:3d:33:5b:86:
                    e0:0e:63:85:de:10:9a:19:ec:05:21:7c:dd:02:85:
                    58:8b:f9:95:ff:79:55:32:58:5f:d2:34:6c:d7:66:
                    f2:56:02:1f:11:02:da:16:d9:46:15:39:49:dc:a7:
                    3e:40:70:28:cf:35:dd:57:6f:58:37:3c:01:44:e5:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:D6:4A:71:CB:A3:FF:F6:43:F8:03:C4:F8:50:4A:31:BE:C6:46
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130312e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:49:b7:11:c2:30:13:4e:12:39:38:9b:a1:fc:24:a5:95:9d:
         a8:92:36:45:d6:4c:2e:d1:18:d6:96:5c:57:1b:9c:01:20:0c:
         21:fe:c2:c3:9d:7c:9e:d5:85:4c:80:a0:15:ba:5a:26:56:6e:
         fb:0d:48:81:d8:a9:c4:5b:e7:83:9f:e8:51:45:7a:68:43:99:
         61:fa:c2:a8:c8:a2:38:c7:3a:27:55:0e:aa:8b:bf:b8:f0:5d:
         63:54:dc:d7:90:98:58:c9:67:1c:f7:51:53:f5:3b:73:e4:70:
         c1:42:be:4b:4b:25:25:70:37:79:c3:25:3c:cb:36:31:49:45:
         26:71:80:e5:db:02:7c:f0:8a:65:82:f5:c4:5a:7c:c6:86:2e:
         3a:8e:4e:38:c7:03:85:96:a5:f9:32:e1:9a:74:10:7e:ff:c8:
         2d:bf:ef:7a:db:1c:0b:42:a9:af:98:18:56:12:db:12:a1:fb:
         30:6f:e3:98:52:de:49:db:f9:3b:9c:bf:70:b6:b7:c7:b5:af:
         06:6d:d4:44:69:3b:44:a4:18:46:91:ea:49:9e:28:46:9b:b5:
         24:f4:01:d9:34:c1:67:6d:cb:60:94:b4:4d:5e:46:c5:d6:38:
         dc:42:82:8e:0e:74:65:af:81:46:d1:6d:1b:47:0b:34:fa:67:
         6f:a5:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:45:34 2026 by rpki-client