Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3234203d3e20313938393439.roa
File:                     3136382e3138312e342e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          i5H8X2mtCo6qKNu+pt5MIKw7AZlN/xcejluTKolRtj4=
Subject key identifier:   EA:9C:0D:74:6D:6B:FA:D8:76:7E:DC:50:F6:99:E7:42:B4:3D:51:90
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       3D9DEC704C13219F2666201A2350D0DA99FD82BE
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3234203d3e20313938393439.roa
Signing time:             Tue 09 Jun 2026 18:57:03 +0000
ROA not before:           Tue 09 Jun 2026 18:52:03 +0000
ROA not after:            Tue 08 Jun 2027 18:57:03 +0000
asID:                     198949
IP address blocks:        168.181.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 11:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9d:ec:70:4c:13:21:9f:26:66:20:1a:23:50:d0:da:99:fd:82:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun  9 18:52:03 2026 GMT
            Not After : Jun  8 18:57:03 2027 GMT
        Subject: CN=EA9C0D746D6BFAD8767EDC50F699E742B43D5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:4c:d3:f7:cc:4c:f7:43:60:c9:5c:a9:c8:
                    49:41:d6:9b:e3:6a:03:90:d6:c2:36:43:d8:45:01:
                    7f:ff:be:3f:1b:f8:c6:9a:88:4e:f7:cb:48:84:21:
                    9b:1c:cb:1a:68:17:cb:e5:c8:d9:56:68:ed:63:95:
                    17:d6:35:84:a5:8f:56:bd:8a:e6:29:cc:8c:4b:08:
                    57:27:bf:71:43:4f:62:7f:5e:cb:7a:c1:18:d7:bf:
                    70:46:03:e0:9a:84:c6:61:71:be:ee:fa:e4:94:31:
                    b4:c3:79:d8:e4:59:27:88:c4:08:74:9b:5c:63:fa:
                    46:f6:81:55:9d:15:a9:2e:a1:05:9f:cf:d0:13:5c:
                    ac:ac:98:1a:89:8d:7a:00:e4:f8:98:48:7a:45:76:
                    f1:28:4d:98:c4:a6:38:d5:76:4b:25:b8:22:73:e6:
                    18:8d:c5:be:18:c4:6c:65:3e:28:7a:3f:05:ad:0c:
                    26:ad:ac:90:0b:f2:3a:4f:a4:67:e1:9c:4e:f8:45:
                    f8:fe:29:b7:3f:54:c2:51:69:c6:8c:6e:90:bf:cb:
                    c8:95:7d:f7:51:06:66:95:c9:29:f6:cf:68:73:4f:
                    9d:14:2b:71:84:6a:f9:e6:88:b3:6e:ff:61:ca:b6:
                    24:61:c1:48:ae:1e:0f:81:50:1f:c6:9e:84:60:4c:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:0D:74:6D:6B:FA:D8:76:7E:DC:50:F6:99:E7:42:B4:3D:51:90
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/3136382e3138312e342e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:63:78:76:bb:d5:16:f1:5c:74:d0:4e:e1:ba:5a:b4:66:
         be:e8:60:e7:1d:38:ac:77:24:cc:9c:72:bd:63:2c:f3:4f:92:
         c4:a9:1a:c1:12:95:03:b3:9b:73:9d:ae:40:24:a8:58:41:81:
         de:51:b3:3d:a7:f7:f5:6e:14:d6:5a:35:9f:01:f6:40:ee:bd:
         6b:1f:3f:d1:92:e4:5c:5c:1d:53:18:94:ad:c6:1a:fc:d0:3b:
         73:6e:50:99:74:49:04:74:70:8d:f6:3b:36:e6:8b:6d:5f:4c:
         26:00:f8:7e:b1:08:9b:30:c5:14:2d:98:88:00:d0:c2:83:3d:
         62:f1:05:fc:db:0f:1d:9f:1b:b6:bd:67:f9:e5:ce:b1:52:07:
         4b:ca:b6:98:94:59:cb:4c:be:43:56:a2:33:a8:32:a6:4f:04:
         60:d3:a8:60:61:2b:56:20:80:d5:43:12:cc:59:58:c6:cd:e7:
         ec:cf:13:3a:da:33:7e:9c:f0:7e:b7:8b:df:91:88:77:b2:c1:
         80:75:fa:fc:15:43:58:38:49:a9:13:5b:c7:f7:e7:79:c7:3d:
         73:35:e3:ef:6e:d4:fe:0e:84:58:75:ae:b5:b9:0d:ce:04:93:
         7a:09:8d:11:e4:f5:3e:99:e5:eb:c3:00:a2:b0:23:bd:64:e6:
         8a:86:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:39:41 2026 by rpki-client