Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32332d3233203d3e203631363834.roa
File:                     3136382e3232382e3130322e302f32332d3233203d3e203631363834.roa (raw, json)
Hash identifier:          e4AXbUjggmBrRiPDqt0U53QWTZpBG2S9KF1LeQ+UqBE=
Subject key identifier:   43:C9:0C:06:24:1B:12:77:E3:CF:5E:E0:6C:4A:A8:D2:57:98:4E:B4
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       619996FFAEE0913DCC5E193BE9A29152E1BDE65D
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32332d3233203d3e203631363834.roa
Signing time:             Wed 25 Feb 2026 14:54:07 +0000
ROA not before:           Wed 25 Feb 2026 14:49:07 +0000
ROA not after:            Wed 24 Feb 2027 14:54:07 +0000
asID:                     61684
IP address blocks:        168.228.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 00:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:99:96:ff:ae:e0:91:3d:cc:5e:19:3b:e9:a2:91:52:e1:bd:e6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Feb 25 14:49:07 2026 GMT
            Not After : Feb 24 14:54:07 2027 GMT
        Subject: CN=43C90C06241B1277E3CF5EE06C4AA8D257984EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:a8:9d:94:d4:97:84:0c:89:1b:ac:5a:41:
                    c5:f4:f5:af:6d:35:66:c1:50:60:ee:e0:e8:c8:cf:
                    b9:af:75:23:55:9f:6a:6a:f1:20:20:19:d0:09:a4:
                    24:29:35:80:c0:f6:99:55:66:6a:da:94:3e:3d:2b:
                    ae:46:49:fa:4c:72:78:a2:3d:b0:87:97:61:8a:52:
                    27:5f:fd:12:54:8d:a4:56:64:90:bd:92:0c:64:c6:
                    6b:e3:8c:52:76:45:0c:81:1d:c0:d7:4c:14:e6:b0:
                    5f:36:7a:4c:bc:a6:70:dd:63:ec:f1:09:5e:02:24:
                    75:9d:0c:00:01:a7:7f:96:26:08:28:22:b0:e8:da:
                    b5:a5:a4:e2:ed:cc:96:2b:c4:39:8e:99:8e:f0:ef:
                    55:d2:84:0c:b0:d9:ca:96:9a:14:6c:d0:eb:50:8b:
                    31:ea:3e:50:a7:5f:82:86:80:6f:cc:f4:cd:b1:d9:
                    34:ee:0f:d8:4c:fe:11:f7:03:c5:c9:9d:39:eb:5e:
                    22:1b:46:86:7f:c1:38:f4:2a:df:46:1e:39:40:21:
                    d2:e8:a1:0f:e0:9c:12:48:92:71:7a:b5:62:23:90:
                    68:4d:03:50:41:be:36:0e:33:5d:bc:16:7d:1e:b3:
                    d4:79:b8:d0:32:e3:74:d1:bb:e2:e3:66:00:99:ea:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C9:0C:06:24:1B:12:77:E3:CF:5E:E0:6C:4A:A8:D2:57:98:4E:B4
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32332d3233203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:ac:25:16:07:ef:3a:61:6e:9e:c7:c4:fb:a2:a8:e6:15:
         99:61:8b:db:d0:32:c6:53:b5:e9:b9:70:86:ec:bb:16:62:32:
         29:51:e6:fa:9f:35:89:06:c3:ab:8c:2d:cb:7b:13:a7:8f:75:
         4e:ac:7a:c4:9e:05:27:be:51:7a:97:6f:71:50:d3:8e:c3:8f:
         9f:ba:f2:82:e3:07:0b:a7:0a:da:70:15:88:fa:63:a9:db:38:
         40:24:2b:f9:01:8b:04:fc:18:ca:78:42:5f:a7:0a:f1:ca:1e:
         ac:26:8b:9b:66:5e:b3:60:af:86:29:32:70:a7:52:58:05:da:
         73:e0:40:c8:6c:a9:af:3d:d4:8a:52:34:c6:d1:cf:55:32:b5:
         ff:b3:0c:bb:0b:3c:7d:dd:aa:be:a7:25:40:04:e5:2a:07:b2:
         a1:12:0b:05:89:18:63:a8:ea:33:85:18:34:1b:98:f0:cd:e0:
         4e:e7:1e:79:0e:b4:0f:bb:d7:ab:4e:47:32:7a:72:b5:ea:aa:
         65:5a:38:70:05:be:39:06:cf:37:3b:9d:27:34:d2:dd:1a:c0:
         25:0d:a6:30:ff:12:79:7b:86:27:39:8d:e9:44:00:3d:20:a0:
         bf:6f:9e:89:68:db:79:a3:fd:db:35:a5:d7:c3:e3:00:8b:c9:
         de:07:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:45:17 2026 by rpki-client