Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa
File:                     3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          mpbRTaxQwntCOPVnwr2SRzsdRg1JlTtFdGxMALddNHg=
Subject key identifier:   7A:E2:D6:F0:71:55:25:3A:6E:C5:41:34:ED:2D:1A:E2:ED:17:5B:F2
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       22C45C97A4EA9F1170001EEA5FEF81221502BC21
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:47:19 +0000
ROA not before:           Mon 13 Apr 2026 13:42:19 +0000
ROA not after:            Mon 12 Apr 2027 13:47:19 +0000
asID:                     52974
IP address blocks:        167.249.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c4:5c:97:a4:ea:9f:11:70:00:1e:ea:5f:ef:81:22:15:02:bc:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:42:19 2026 GMT
            Not After : Apr 12 13:47:19 2027 GMT
        Subject: CN=7AE2D6F07155253A6EC54134ED2D1AE2ED175BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:d4:36:e8:f3:b1:e1:cf:bf:8a:8d:41:72:
                    c7:83:4d:17:27:05:ac:af:ff:14:e8:26:f4:d3:1d:
                    3f:a7:10:0a:14:71:13:5b:d1:da:b9:15:cd:ed:fa:
                    f3:34:0d:c8:95:8b:49:e5:d8:57:4f:61:5c:69:48:
                    ff:19:11:54:c4:f7:fd:56:66:4e:a4:d7:70:20:e8:
                    52:e9:10:69:bf:fb:bf:1e:c9:ca:6c:f0:64:02:58:
                    1a:29:4d:15:fa:ef:41:df:bf:7c:07:36:ce:3c:70:
                    47:ef:ea:40:06:8d:56:a9:de:77:95:e1:1e:2d:e1:
                    b2:fe:7d:9e:0f:96:dd:72:ad:93:14:e8:dc:d6:30:
                    0d:0a:03:69:4e:b2:7a:1f:db:a6:60:ec:a7:e0:57:
                    2c:f3:17:40:40:cd:82:75:49:1c:eb:b3:98:f1:26:
                    c5:09:f5:26:1a:52:5e:88:5c:c5:1d:9c:2e:98:56:
                    fb:58:7d:19:06:7c:ce:4d:2f:b6:4f:dd:3a:a0:0a:
                    fb:fd:d1:cf:1b:0a:6d:90:7f:cf:00:28:06:18:ac:
                    e9:67:61:a8:73:32:b3:75:6d:27:15:d0:3f:c5:d5:
                    ae:56:3e:74:5a:05:f0:36:a7:96:7f:13:be:23:74:
                    23:d1:5c:e4:3c:4a:3b:ec:16:58:c7:4c:ca:bd:3a:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:D6:F0:71:55:25:3A:6E:C5:41:34:ED:2D:1A:E2:ED:17:5B:F2
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136372e3234392e3138382e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:19:58:15:62:78:53:24:87:43:3d:f3:4f:e2:47:02:90:72:
         24:3e:d4:8a:f1:1b:48:0b:d0:c7:f5:09:a1:a1:6a:f1:e2:ca:
         89:a1:39:ba:ef:85:19:98:1c:9a:07:1d:51:88:df:db:d3:ea:
         e7:48:62:9b:e8:64:5c:7b:a1:c8:d9:82:7c:f4:1e:79:21:33:
         2a:f2:a9:00:c1:2e:41:fb:7a:71:aa:86:6e:32:a2:c0:f8:28:
         d6:25:32:2f:08:22:a1:20:88:04:16:2c:f9:72:9b:71:39:0a:
         c5:bc:3d:be:a8:bf:be:55:a1:3e:b9:83:2d:39:5a:9f:25:0a:
         98:17:16:60:c2:0a:5c:d1:e2:99:b4:22:68:e3:8b:d1:6e:23:
         60:ef:6f:2f:a2:18:00:c2:eb:37:a6:b0:b5:f0:ca:10:75:a0:
         46:2c:90:3e:a0:bf:89:10:87:a3:0c:38:b6:e0:4b:3d:09:d7:
         7a:09:f6:12:0b:4e:88:47:40:04:6a:38:b7:9a:d3:85:0a:dc:
         2f:60:2a:1a:5c:7a:88:74:c6:8e:be:7a:0f:78:11:bb:a2:d6:
         8d:28:a4:c7:9b:d4:0e:21:f5:da:14:6c:c5:62:c8:60:47:fb:
         66:26:ad:b1:25:9e:5d:b5:fc:fe:45:ce:93:fe:c5:2a:e3:9e:
         a1:43:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:03:16 2026 by rpki-client