Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
File:                     3136382e3232382e34302e302f32322d3332203d3e203631373531.roa (raw, json)
Hash identifier:          9x4MfAbQvHWHYeeA5I1VesIh9Y6TtKLUPRCxGe+PXZs=
Subject key identifier:   9E:1C:B0:70:E1:20:11:DC:65:55:74:88:DC:DE:2D:5E:F5:1E:09:C2
Certificate issuer:       /CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
Certificate serial:       33ABE8D69629EDA58FED536CD9B920C0EAE8201A
Authority key identifier: 6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa
Signing time:             Mon 18 May 2026 18:16:33 +0000
ROA not before:           Mon 18 May 2026 18:11:33 +0000
ROA not after:            Mon 17 May 2027 18:16:33 +0000
asID:                     61751
IP address blocks:        168.228.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl
                          rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:e8:d6:96:29:ed:a5:8f:ed:53:6c:d9:b9:20:c0:ea:e8:20:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB
        Validity
            Not Before: May 18 18:11:33 2026 GMT
            Not After : May 17 18:16:33 2027 GMT
        Subject: CN=9E1CB070E12011DC65557488DCDE2D5EF51E09C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:46:dd:b4:3c:4f:e8:89:44:d9:e9:53:4b:
                    c1:b0:60:a4:cb:4e:24:3b:05:92:e6:6d:6f:23:57:
                    84:87:ed:a6:d8:2b:55:01:4f:7c:92:3f:d6:17:d5:
                    7d:a5:01:99:82:7d:57:0c:c5:02:91:fd:53:7c:87:
                    a0:34:7f:69:70:4b:a4:50:2b:f3:c1:3d:c0:5e:24:
                    61:48:fb:e9:08:ac:68:91:d0:f1:d9:5b:da:11:51:
                    14:3d:30:e0:0a:a4:17:1a:35:4d:b9:c3:f8:aa:f5:
                    cd:9f:ca:69:67:a9:ef:7c:e8:de:6e:d7:1e:34:d2:
                    e7:3d:2d:a4:ad:bf:f1:7e:50:39:bb:3e:cf:8c:16:
                    75:61:81:06:5b:90:a4:38:79:95:04:00:79:27:27:
                    9e:42:6d:10:e8:8e:27:8c:3d:12:3d:ea:f8:2e:28:
                    58:17:ec:fc:06:27:20:03:51:bf:42:40:c5:ce:31:
                    c3:29:0c:f6:dd:97:08:07:90:8f:a6:6b:ba:bb:37:
                    34:45:24:ce:20:66:a9:24:ef:58:79:e8:bc:19:19:
                    d6:ac:a8:23:41:ce:5b:dc:1a:5e:b5:c7:58:ac:2e:
                    e5:8d:8b:2c:69:d1:fc:06:27:3b:51:ec:f4:de:94:
                    87:cb:31:9b:d1:e1:69:ce:d0:f0:5f:c9:cc:6d:85:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1C:B0:70:E1:20:11:DC:65:55:74:88:DC:DE:2D:5E:F5:1E:09:C2
            X509v3 Authority Key Identifier:
                keyid:6E:0A:8E:49:B9:63:4E:FE:81:81:6E:DD:1A:25:DC:1B:54:E6:17:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E0A8E49B9634EFE81816EDD1A25DC1B54E617DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/74A3MPCwX7JL3jQK9r5dGAiHuo9VSMjKTN5Ngqk6vZPS/0/3136382e3232382e34302e302f32322d3332203d3e203631373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:51:cb:bb:a4:23:43:fd:84:25:24:ba:1e:44:3c:d3:69:b4:
         d7:d2:c3:8a:32:81:f8:34:7f:18:6e:cf:b6:ff:02:21:b9:05:
         82:ab:67:8c:2a:ad:49:71:68:86:cd:41:eb:9e:d2:24:54:e0:
         f9:50:dd:01:9a:66:38:63:d9:86:29:6e:d6:ca:8e:bb:9b:20:
         f5:49:dd:12:f6:e0:ea:2c:57:b4:7e:c0:3a:b6:69:86:f2:4b:
         32:c2:20:69:09:af:ef:aa:54:34:16:a9:bd:67:1e:c6:e6:fa:
         a2:0b:5a:44:f8:3e:7e:0b:df:82:43:70:d4:8e:de:75:ba:12:
         2c:84:c9:0f:14:ff:3f:22:16:3a:fc:6b:3e:24:78:91:1f:f7:
         20:fd:70:f1:cc:36:c8:ed:e8:89:7b:f4:6e:0c:d1:38:32:1d:
         cb:5f:6c:07:62:b2:29:b9:31:d9:88:8a:fe:e7:3d:d1:90:1b:
         e8:3f:8c:c6:7b:c1:9d:91:ec:07:31:6f:4b:c5:a9:fd:37:e9:
         bc:69:a3:41:28:93:5b:f1:ad:50:90:04:8f:ca:58:84:63:05:
         19:4a:a7:ec:73:a5:3e:51:6f:c3:43:11:72:0a:b2:51:fa:9e:
         2b:47:6b:bb:31:f0:55:ef:d3:44:ee:c2:ef:e6:38:4a:37:1c:
         89:02:d4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:35:52 2026 by rpki-client