Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
File:                     3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa (raw, json)
Hash identifier:          5IY/6uG4CyR655ILi5bdFV+IOQx5WlLX+fn+vGvIgDk=
Subject key identifier:   C9:4E:A6:6A:39:4B:DE:3E:A9:F2:62:69:47:35:8C:34:06:F9:A4:07
Certificate issuer:       /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial:       3877341914FEAEC22983FF34B1EF93CE5D355AE1
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa
Signing time:             Wed 25 Feb 2026 14:54:11 +0000
ROA not before:           Wed 25 Feb 2026 14:49:11 +0000
ROA not after:            Wed 24 Feb 2027 14:54:11 +0000
asID:                     61684
IP address blocks:        168.228.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
                          rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 00:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:77:34:19:14:fe:ae:c2:29:83:ff:34:b1:ef:93:ce:5d:35:5a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
        Validity
            Not Before: Feb 25 14:49:11 2026 GMT
            Not After : Feb 24 14:54:11 2027 GMT
        Subject: CN=C94EA66A394BDE3EA9F2626947358C3406F9A407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:b2:46:67:39:74:e8:61:3d:a7:88:fc:c3:
                    db:9b:3a:d1:7d:05:99:6a:70:e0:76:0d:71:fe:8c:
                    85:12:0e:fc:33:3c:3a:af:e4:67:fa:20:fe:b4:06:
                    12:d7:98:65:64:fa:61:a3:2f:c4:91:fd:34:5e:70:
                    5c:1a:37:e9:b5:6f:1f:0e:5a:81:99:8e:2e:3c:32:
                    12:65:26:43:55:c1:8c:02:f6:bd:e3:73:7f:55:7a:
                    c8:42:ea:39:eb:61:8c:82:28:14:b4:cf:46:d0:bb:
                    26:b6:09:b7:c0:46:3a:04:62:c2:54:a5:d5:ef:af:
                    dc:82:86:03:c4:5b:44:8c:fd:7e:83:dd:e9:b1:78:
                    26:b2:b4:24:01:f1:a4:ea:92:ee:9c:63:e1:49:b8:
                    63:b7:26:e0:c0:ca:22:8f:a7:19:cc:58:3d:56:29:
                    7e:82:56:ad:97:44:62:45:a8:e9:3b:b4:05:97:c1:
                    79:2e:4c:8f:3b:36:e7:98:50:3b:28:47:55:d3:30:
                    9c:0b:8a:a8:3b:d7:52:0c:9c:26:d2:06:49:cf:34:
                    d3:0e:9c:f0:41:9f:a4:ea:b6:62:6e:96:65:b4:1a:
                    66:13:d3:b8:23:60:a9:b8:04:8c:86:8b:6f:b0:2a:
                    fa:10:40:16:53:fc:91:bd:6f:b3:66:02:31:70:90:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4E:A6:6A:39:4B:DE:3E:A9:F2:62:69:47:35:8C:34:06:F9:A4:07
            X509v3 Authority Key Identifier:
                keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/3136382e3232382e3130322e302f32342d3234203d3e203631363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:38:63:6f:a6:3e:11:5f:76:b4:74:aa:3f:c3:43:8d:31:6a:
         83:81:c7:76:17:26:ed:d8:2b:bc:7a:aa:24:36:fe:87:ee:07:
         14:b7:84:3b:4b:62:46:3e:23:e0:da:e6:f3:47:5f:d8:d3:fa:
         54:f0:bf:da:b6:9c:58:1d:aa:40:77:04:e5:b1:8b:c3:1f:0c:
         0e:10:c5:55:55:1c:8f:53:d5:19:10:e6:18:8e:a3:af:1d:a5:
         62:ed:2a:74:e9:12:1a:99:be:43:8d:9e:fd:a1:63:82:6a:40:
         43:ba:fa:cb:d7:c5:c1:1d:51:8d:66:0e:6f:ba:22:82:f2:c5:
         f2:59:21:f4:48:66:c2:6f:12:f9:29:ca:35:bc:72:c8:b7:fe:
         04:be:9e:3e:49:ba:1e:e6:bb:f2:c6:54:dd:61:97:9f:3b:ca:
         5d:48:77:3e:d6:dc:92:79:a6:78:52:40:fb:bc:29:f8:06:93:
         08:b6:06:79:cb:86:f7:e2:31:7f:88:45:d4:fc:ef:2c:68:7a:
         71:7e:66:85:4d:a3:d4:b0:90:13:35:96:87:4e:de:b2:e9:9d:
         f0:c4:01:c1:ab:e4:5f:79:c2:5f:23:da:0c:0e:7f:5b:9b:4a:
         2b:09:8c:c2:c7:ff:6e:03:ff:1b:c3:02:d4:2e:c3:c0:94:8e:
         53:93:06:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOHc0GRT+rsIpg/80se+Tzl01WuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5RjZGMDFCODc1MDA4QUYyQzEzMjAwOUQwNTA5RTY4
MUUyRkE5OTAeFw0yNjAyMjUxNDQ5MTFaFw0yNzAyMjQxNDU0MTFaMDMxMTAvBgNV
BAMTKEM5NEVBNjZBMzk0QkRFM0VBOUYyNjI2OTQ3MzU4QzM0MDZGOUE0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcdbJGZzl06GE9p4j8w9ubOtF9
BZlqcOB2DXH+jIUSDvwzPDqv5Gf6IP60BhLXmGVk+mGjL8SR/TRecFwaN+m1bx8O
WoGZji48MhJlJkNVwYwC9r3jc39VeshC6jnrYYyCKBS0z0bQuya2CbfARjoEYsJU
pdXvr9yChgPEW0SM/X6D3emxeCaytCQB8aTqku6cY+FJuGO3JuDAyiKPpxnMWD1W
KX6CVq2XRGJFqOk7tAWXwXkuTI87NueYUDsoR1XTMJwLiqg711IMnCbSBknPNNMO
nPBBn6TqtmJulmW0GmYT07gjYKm4BIyGi2+wKvoQQBZT/JG9b7NmAjFwkFPfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyU6majlL3j6p8mJpRzWMNAb5pAcwHwYDVR0j
BBgwFoAU+59vAbh1AIrywTIAnQUJ5oHi+pkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEpUTGlyYnlqeWhnQmVVak4xZE5VaXZGUU55Q0RkR0hqaTdjYU1pZWF0
UUIvMC9GQjlGNkYwMUI4NzUwMDhBRjJDMTMyMDA5RDA1MDlFNjgxRTJGQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCOUY2RjAxQjg3NTAwOEFG
MkMxMzIwMDlEMDUwOUU2ODFFMkZBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRKVExpcmJ5anloZ0JlVWpOMWROVWl2RlFOeUNEZEdIamk3Y2FNaWVhdFFCLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNjM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo5GYwDQYJKoZIhvcNAQELBQADggEBAJI4Y2+m
PhFfdrR0qj/DQ40xaoOBx3YXJu3YK7x6qiQ2/ofuBxS3hDtLYkY+I+Da5vNHX9jT
+lTwv9q2nFgdqkB3BOWxi8MfDA4QxVVVHI9T1RkQ5hiOo68dpWLtKnTpEhqZvkON
nv2hY4JqQEO6+svXxcEdUY1mDm+6IoLyxfJZIfRIZsJvEvkpyjW8csi3/gS+nj5J
uh7mu/LGVN1hl587yl1Idz7W3JJ5pnhSQPu8KfgGkwi2BnnLhvfiMX+IRdT87yxo
enF+ZoVNo9SwkBM1lodO3rLpnfDEAcGr5F95wl8j2gwOf1ubSisJjMLH/24D/xvD
AtQuw8CUjlOTBuI=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:31:54 2026 by rpki-client