Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
File:                     3136382e3139342e37362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          C0RZY2YIiz1oJiEB3/1E/x+n94vIgVFxbZ7aVEsWfQw=
Subject key identifier:   76:5A:25:7A:F2:72:46:78:EC:7A:68:28:84:7F:8D:1A:A2:97:B0:ED
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       11A6A8ED0F3CEFD7E92438CA2D40AB2D857833EB
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:47:21 +0000
ROA not before:           Mon 13 Apr 2026 13:42:21 +0000
ROA not after:            Mon 12 Apr 2027 13:47:21 +0000
asID:                     52974
IP address blocks:        168.194.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a6:a8:ed:0f:3c:ef:d7:e9:24:38:ca:2d:40:ab:2d:85:78:33:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:42:21 2026 GMT
            Not After : Apr 12 13:47:21 2027 GMT
        Subject: CN=765A257AF2724678EC7A6828847F8D1AA297B0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f2:c1:3c:99:3e:40:49:80:15:e7:39:b0:30:
                    b7:73:e6:6e:fb:a4:d9:14:4a:8c:2d:da:56:ec:09:
                    84:ce:ce:4b:82:1d:8a:72:af:56:b4:db:7a:72:55:
                    f2:23:ea:b5:80:31:52:12:da:48:56:f3:f1:ff:5f:
                    42:62:12:90:cc:7c:85:87:31:47:50:97:ef:8a:95:
                    74:7d:35:ea:be:29:9e:c6:a4:7c:cc:83:41:1a:f1:
                    61:fb:f2:63:bd:b3:9c:a6:34:97:86:cb:c2:72:23:
                    24:1f:10:5d:66:cb:1d:97:0d:61:b0:ec:49:c8:ee:
                    45:11:a7:43:50:e9:9b:75:a9:fc:92:c6:54:cc:02:
                    fb:4f:b9:08:90:1e:46:f4:15:5e:28:11:1c:a8:f7:
                    6e:61:26:36:b0:c4:2e:22:7f:d0:9f:09:3b:6a:ec:
                    be:fd:35:5c:84:a3:d8:30:b3:90:85:ee:8e:56:3f:
                    11:50:a4:f1:76:7b:31:d0:23:02:3c:4b:1d:6d:d6:
                    90:bc:c3:7f:b6:64:14:e8:1f:ba:eb:35:71:7f:ab:
                    94:0b:08:c1:95:c9:f4:a3:7f:b8:7b:04:9b:92:94:
                    03:85:c4:d5:b3:28:dc:18:3e:53:d4:9b:f9:18:c8:
                    d5:27:6a:1a:96:3b:5b:1d:a6:7e:57:76:5b:b8:ee:
                    ff:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:25:7A:F2:72:46:78:EC:7A:68:28:84:7F:8D:1A:A2:97:B0:ED
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3136382e3139342e37362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:7a:fa:72:97:28:c4:0f:7a:d6:9e:dd:c9:c5:75:d6:df:e1:
         67:00:87:ae:5b:ed:8f:b4:be:59:2d:dd:9c:f7:5a:91:b0:c0:
         43:ae:4a:27:83:d5:e6:b0:86:04:c6:13:7b:9f:b3:37:4a:29:
         60:07:7d:38:22:30:3e:ab:df:1d:cc:74:aa:f2:45:87:5a:02:
         5c:a0:62:40:81:23:2d:09:1d:ae:12:87:84:2d:99:4e:83:28:
         73:4b:4f:02:31:76:37:fe:95:7f:3b:18:09:0e:6f:51:51:a9:
         3d:e7:0c:d4:73:c2:00:27:0f:24:6b:30:26:56:22:f6:d0:3f:
         65:d5:4f:d5:05:8d:cf:88:84:8c:d6:84:08:03:b4:f3:6c:26:
         6b:af:dc:54:28:e3:cd:5b:06:08:3f:f4:28:09:46:85:96:11:
         f4:67:87:c8:4f:4d:e2:56:77:d0:77:66:0f:81:bf:ae:20:98:
         b1:ae:e7:53:99:ca:7a:af:0a:66:21:e1:a2:67:5b:b3:ce:cc:
         38:2b:cc:35:7c:36:08:4a:2f:90:b1:f8:c7:d9:59:2e:24:be:
         c4:93:38:75:2b:8a:85:b2:fd:31:7f:de:c9:bb:2d:02:8d:41:
         e2:36:b4:01:35:bf:10:69:8c:7d:90:a1:fe:5a:d6:47:e4:71:
         43:17:d8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:03:35 2026 by rpki-client