Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa
File:                     3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa (raw, json)
Hash identifier:          zpcE8/7pyncVhh2QpA40PjXv8CenddsgICfD3s5AIAY=
Subject key identifier:   1C:35:FD:65:2E:98:1B:2F:E2:1B:EC:B3:0F:B8:81:63:D6:1F:19:7B
Certificate issuer:       /CN=5668EE81C8705A595C00BF220C5BB48B38682B81
Certificate serial:       6E766A988F26A4FBE2A4A093BA8864E8162BF885
Authority key identifier: 56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa
Signing time:             Sun 22 Feb 2026 00:00:19 +0000
ROA not before:           Sat 21 Feb 2026 23:55:19 +0000
ROA not after:            Sun 21 Feb 2027 00:00:19 +0000
asID:                     263558
IP address blocks:        186.237.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl
                          rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 11:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:76:6a:98:8f:26:a4:fb:e2:a4:a0:93:ba:88:64:e8:16:2b:f8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5668EE81C8705A595C00BF220C5BB48B38682B81
        Validity
            Not Before: Feb 21 23:55:19 2026 GMT
            Not After : Feb 21 00:00:19 2027 GMT
        Subject: CN=1C35FD652E981B2FE21BECB30FB88163D61F197B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:cb:20:0c:62:5e:fa:f4:76:65:76:6e:15:
                    ef:c6:3a:0c:de:19:aa:94:37:ba:78:f9:a3:60:de:
                    06:ff:79:a1:e9:35:36:76:67:72:d4:ad:b7:27:13:
                    16:8f:7b:89:a3:5b:45:a2:5d:92:90:ab:ba:4e:34:
                    dd:5d:fd:49:a7:74:38:4d:b9:22:67:df:d6:d3:26:
                    47:6c:f2:c5:45:b8:fe:78:ff:eb:bf:ce:ee:90:10:
                    72:94:b5:27:66:d5:8d:90:ee:d1:49:b5:bf:82:ad:
                    ad:dd:c0:fe:29:dd:ae:66:e0:01:b1:22:a0:32:f5:
                    2a:f7:5d:b3:6d:f7:00:c0:a8:59:2e:6f:8f:8f:ce:
                    35:1b:c8:9a:c1:bb:1b:36:78:57:13:39:df:cb:61:
                    dc:bb:a0:80:7c:0f:54:ed:89:89:20:45:1e:49:64:
                    45:cf:21:b0:d3:d1:36:e9:0d:10:f1:6a:ee:38:7f:
                    a1:90:bb:c7:18:aa:74:08:85:9a:18:63:69:61:bf:
                    77:f9:d4:08:fb:00:21:9c:02:c3:a4:34:fa:72:15:
                    2a:0e:db:09:41:c3:18:a0:28:06:81:9c:29:d7:c7:
                    de:ed:87:37:b0:15:ef:b4:83:2f:62:06:06:af:8e:
                    a3:fd:e0:39:a7:3c:59:cb:71:6b:7a:39:fb:7f:39:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:35:FD:65:2E:98:1B:2F:E2:1B:EC:B3:0F:B8:81:63:D6:1F:19:7B
            X509v3 Authority Key Identifier:
                keyid:56:68:EE:81:C8:70:5A:59:5C:00:BF:22:0C:5B:B4:8B:38:68:2B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/5668EE81C8705A595C00BF220C5BB48B38682B81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5668EE81C8705A595C00BF220C5BB48B38682B81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/0/3138362e3233372e3231362e302f32312d3332203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:1a:1d:2d:aa:53:f4:7a:af:49:f8:96:26:71:fc:e6:2c:8c:
         17:09:ee:6d:6c:0e:e3:7d:df:0d:11:96:8a:83:c1:c5:2f:4d:
         d3:88:a7:89:bf:6a:8f:c0:88:b3:28:d0:f4:4e:de:56:66:76:
         9c:ad:54:e7:8e:df:89:76:cd:21:88:f3:09:db:da:f5:01:28:
         f7:fd:a3:d0:47:9d:57:eb:6e:90:9d:7f:98:4a:e9:c8:f3:6f:
         ae:84:93:17:2f:33:12:07:89:43:0b:97:b7:c7:df:5a:02:13:
         d6:e0:74:6f:ff:64:b3:e5:2c:64:68:71:0a:f5:69:d5:b4:a4:
         a3:8a:0f:a6:eb:77:9e:ad:18:20:96:89:e3:f3:2b:7c:62:9a:
         18:cc:0e:1c:2e:41:f8:b5:6d:19:2d:a4:aa:39:98:3a:56:9e:
         95:e7:bc:a7:18:9f:03:a0:fc:6f:05:7b:1d:3e:35:57:6d:d7:
         ef:79:95:3f:e2:26:29:9e:82:48:4e:f8:ad:23:8b:da:11:c0:
         c6:6a:2f:a6:f0:98:36:de:a9:06:18:18:03:bb:be:6a:96:69:
         f1:16:b5:a1:5f:86:8f:31:2a:31:6a:44:5a:a5:5a:1b:11:b3:
         a4:6e:4c:30:b7:47:ca:ec:4b:69:46:fa:9f:f8:aa:8d:fc:5c:
         52:2a:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:31:03 2026 by rpki-client