Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/3136372e3235302e3232382e302f32322d3234203d3e20323635323237.roa
File:                     3136372e3235302e3232382e302f32322d3234203d3e20323635323237.roa (raw, json)
Hash identifier:          oPXnb3FVPDLKaQgFQYZgF0vWwnMI8KkIcO3jmRvG+Gk=
Subject key identifier:   A8:C7:A5:7A:63:E6:5B:4D:6A:10:BB:22:9B:0C:2C:16:76:51:18:C8
Certificate issuer:       /CN=7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3
Certificate serial:       03C4FC3150BB448C03ECD0501531811FF14BFDD4
Authority key identifier: 7B:A5:FB:6A:0A:9C:AA:95:AD:98:B8:F0:B6:06:88:5B:41:2F:65:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/3136372e3235302e3232382e302f32322d3234203d3e20323635323237.roa
Signing time:             Wed 27 May 2026 18:40:58 +0000
ROA not before:           Wed 27 May 2026 18:35:58 +0000
ROA not after:            Wed 26 May 2027 18:40:58 +0000
asID:                     265227
IP address blocks:        167.250.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.crl
                          rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c4:fc:31:50:bb:44:8c:03:ec:d0:50:15:31:81:1f:f1:4b:fd:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3
        Validity
            Not Before: May 27 18:35:58 2026 GMT
            Not After : May 26 18:40:58 2027 GMT
        Subject: CN=A8C7A57A63E65B4D6A10BB229B0C2C16765118C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:52:d5:b0:2a:bd:f8:05:3c:e2:4f:99:b9:
                    b2:47:b1:18:b9:11:da:42:4b:f1:4f:a3:9b:68:38:
                    f4:85:75:5d:e3:5a:1b:7a:13:e7:88:e1:b7:f3:2b:
                    70:1d:6b:cf:3f:8a:23:9d:93:07:db:be:02:21:b0:
                    3a:2a:9d:62:9a:19:e5:78:89:9a:34:c5:81:72:75:
                    4b:de:c8:a2:2c:db:69:e1:41:7a:04:c3:56:d2:49:
                    4d:81:39:7b:06:7d:a3:db:e8:7c:5c:4d:fe:47:ff:
                    37:49:cb:f1:47:3c:e3:59:3c:e2:79:21:ec:09:35:
                    7b:0e:24:69:c7:46:f9:6d:a9:6a:1b:16:46:5f:e6:
                    09:61:d6:49:96:c5:fe:4d:11:35:ca:73:9d:f8:04:
                    ea:30:a9:8c:0e:cc:7f:68:f8:06:f4:f9:0f:12:f8:
                    72:03:d1:33:27:b2:74:2d:36:6d:bd:99:70:84:66:
                    70:45:5e:ad:2c:15:40:63:69:79:cc:e3:c5:69:e8:
                    d1:61:7b:e0:f2:75:5f:79:aa:f4:06:de:cb:0c:05:
                    a1:37:66:27:8c:b8:a3:b8:ff:51:a8:a4:ed:f1:80:
                    3d:fd:e3:c0:c0:2e:b5:24:dc:e8:53:de:b8:a7:c9:
                    e1:fe:66:03:cd:87:0a:55:22:80:4b:23:44:c8:9a:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:A5:7A:63:E6:5B:4D:6A:10:BB:22:9B:0C:2C:16:76:51:18:C8
            X509v3 Authority Key Identifier:
                keyid:7B:A5:FB:6A:0A:9C:AA:95:AD:98:B8:F0:B6:06:88:5B:41:2F:65:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BA5FB6A0A9CAA95AD98B8F0B606885B412F65A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcNnt52aUayrVBCi7Ar3gXSW8Ay8EcGGjTyZmN41Jx52/0/3136372e3235302e3232382e302f32322d3234203d3e20323635323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:55:a4:74:df:65:07:1e:14:56:36:6c:4f:f0:9e:66:92:e2:
         a8:71:44:90:b2:19:01:ba:b8:a5:01:66:20:e0:ea:24:99:b5:
         54:ce:30:34:ed:8d:35:7a:6a:1c:da:00:cf:dd:6c:59:69:88:
         e7:2c:00:61:3e:f3:0e:b3:53:e3:23:d1:49:29:8b:d4:b1:dc:
         d9:b1:f3:d5:f8:de:73:c9:07:d9:f6:58:2c:db:64:27:2b:e8:
         5e:7b:04:47:a1:0c:c5:c6:2e:29:38:af:73:9a:36:3f:67:25:
         46:28:29:1d:30:8b:80:84:b4:c2:64:dd:25:3e:a6:15:b0:1b:
         a1:68:23:90:65:d4:e1:52:fa:3e:f4:94:b4:94:d1:a3:36:0e:
         51:1e:e5:4b:b2:cf:06:1c:c1:e7:29:d2:61:19:b5:05:f7:e4:
         7d:a9:0c:0c:b9:a5:4e:7a:15:b5:08:eb:fc:78:78:ae:a1:f3:
         59:5e:0b:f4:a3:fd:2b:50:5e:53:bd:97:92:77:1b:5b:12:cd:
         e2:0f:79:fd:05:1b:6f:16:71:f2:06:68:d4:43:a1:85:da:fa:
         54:ab:79:a9:78:ab:ab:4d:e8:f6:2c:bb:35:42:85:54:74:17:
         44:9b:fa:ad:c3:ed:f3:31:e3:64:23:8b:bd:69:e0:8c:11:ae:
         67:eb:e9:0c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUA8T8MVC7RIwD7NBQFTGBH/FL/dQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JBNUZCNkEwQTlDQUE5NUFEOThCOEYwQjYwNjg4NUI0
MTJGNjVBMzAeFw0yNjA1MjcxODM1NThaFw0yNzA1MjYxODQwNThaMDMxMTAvBgNV
BAMTKEE4QzdBNTdBNjNFNjVCNEQ2QTEwQkIyMjlCMEMyQzE2NzY1MTE4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYs1LVsCq9+AU84k+ZubJHsRi5
EdpCS/FPo5toOPSFdV3jWht6E+eI4bfzK3Ada88/iiOdkwfbvgIhsDoqnWKaGeV4
iZo0xYFydUveyKIs22nhQXoEw1bSSU2BOXsGfaPb6HxcTf5H/zdJy/FHPONZPOJ5
IewJNXsOJGnHRvltqWobFkZf5glh1kmWxf5NETXKc534BOowqYwOzH9o+Ab0+Q8S
+HID0TMnsnQtNm29mXCEZnBFXq0sFUBjaXnM48Vp6NFhe+DydV95qvQG3ssMBaE3
ZieMuKO4/1GopO3xgD3948DALrUk3OhT3rinyeH+ZgPNhwpVIoBLI0TImr3LAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqMelemPmW01qELsimwwsFnZRGMgwHwYDVR0j
BBgwFoAUe6X7agqcqpWtmLjwtgaIW0EvZaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNObnQ1MmFVYXlyVkJDaTdBcjNnWFNXOEF5OEVjR0dqVHlabU40MUp4
NTIvMC83QkE1RkI2QTBBOUNBQTk1QUQ5OEI4RjBCNjA2ODg1QjQxMkY2NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCQTVGQjZBMEE5Q0FBOTVB
RDk4QjhGMEI2MDY4ODVCNDEyRjY1QTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjTm50NTJhVWF5clZCQ2k3QXIzZ1hTVzhBeThFY0dHalR5Wm1ONDFKeDUyLzAv
MzEzNjM3MmUzMjM1MzAyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMyMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf65DANBgkqhkiG9w0BAQsFAAOCAQEAZlWk
dN9lBx4UVjZsT/CeZpLiqHFEkLIZAbq4pQFmIODqJJm1VM4wNO2NNXpqHNoAz91s
WWmI5ywAYT7zDrNT4yPRSSmL1LHc2bHz1fjec8kH2fZYLNtkJyvoXnsER6EMxcYu
KTivc5o2P2clRigpHTCLgIS0wmTdJT6mFbAboWgjkGXU4VL6PvSUtJTRozYOUR7l
S7LPBhzB5ynSYRm1BffkfakMDLmlTnoVtQjr/Hh4rqHzWV4L9KP9K1BeU72Xkncb
WxLN4g95/QUbbxZx8gZo1EOhhdr6VKt5qXirq03o9iy7NUKFVHQXRJv6rcPt8zHj
ZCOLvWngjBGuZ+vpDA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:01:53 2026 by rpki-client