Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa
File:                     3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa (raw, json)
Hash identifier:          CXd1o7mhapKzS3/kufqApABlJcEynXV+O6whBUELAGU=
Subject key identifier:   A4:6B:AC:3A:11:64:93:5C:41:7E:A9:07:83:BB:10:8F:FB:D2:C0:EA
Certificate issuer:       /CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
Certificate serial:       594D178F3D8AF3A61D9394357C1386F9DA6331B6
Authority key identifier: D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa
Signing time:             Wed 25 Feb 2026 17:00:01 +0000
ROA not before:           Wed 25 Feb 2026 16:55:01 +0000
ROA not after:            Wed 24 Feb 2027 17:00:01 +0000
asID:                     265488
IP address blocks:        168.197.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl
                          rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 06:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4d:17:8f:3d:8a:f3:a6:1d:93:94:35:7c:13:86:f9:da:63:31:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95EAB9296B47F53E06E1370749CCDB5566F072F
        Validity
            Not Before: Feb 25 16:55:01 2026 GMT
            Not After : Feb 24 17:00:01 2027 GMT
        Subject: CN=A46BAC3A1164935C417EA90783BB108FFBD2C0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:18:68:f5:c4:09:8d:df:93:27:c5:bc:28:
                    b0:2c:ad:76:74:48:a0:53:65:28:83:48:3b:8a:83:
                    73:92:4c:bf:db:af:1f:d8:66:a4:6b:58:26:0e:7a:
                    f2:5e:43:9e:6e:eb:eb:a5:37:5f:8b:33:f0:12:b0:
                    5b:81:ca:e0:8b:1d:72:84:19:16:0f:38:6a:73:93:
                    91:71:86:9e:3b:62:9a:8d:51:9e:7f:55:ba:c6:76:
                    2f:3a:22:6e:7c:0d:d0:60:49:ca:54:8b:92:98:54:
                    e4:a1:b6:4c:4d:57:4e:91:f7:f2:4b:d6:e0:ad:e5:
                    79:5d:c5:52:4a:9b:61:cb:c3:f2:46:c0:af:cd:58:
                    74:c0:81:f1:1d:7c:65:e9:c0:e9:a5:66:14:7e:93:
                    66:83:ff:eb:af:3b:c3:7a:f4:76:7f:bd:22:80:1c:
                    2c:e3:45:44:04:6f:c4:c0:ac:5b:9a:3a:b3:eb:20:
                    00:4c:c6:7f:cb:bd:61:92:01:e6:a1:ac:ee:f9:e8:
                    5f:82:8b:62:29:e8:9a:a3:bf:b5:dd:0e:5e:7f:18:
                    92:71:9f:44:7f:b3:9a:47:2b:c6:d5:34:d6:57:42:
                    a6:81:09:98:fd:f8:1a:41:d0:20:04:b5:e3:3b:f6:
                    cb:43:d6:d1:d6:13:58:6c:1e:ae:9d:fe:55:f4:dd:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6B:AC:3A:11:64:93:5C:41:7E:A9:07:83:BB:10:8F:FB:D2:C0:EA
            X509v3 Authority Key Identifier:
                keyid:D9:5E:AB:92:96:B4:7F:53:E0:6E:13:70:74:9C:CD:B5:56:6F:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/D95EAB9296B47F53E06E1370749CCDB5566F072F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95EAB9296B47F53E06E1370749CCDB5566F072F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6Xq8RFz8cdVpBN6NVcFj9Jd1GYoDqtuEzzRzfFq5JB5/0/3136382e3139372e3137362e302f32322d3234203d3e20323635343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:0b:b3:f5:af:9a:2c:1f:17:4f:47:20:a4:c8:b4:a7:83:63:
         d5:08:0c:04:08:43:67:b6:b2:89:cf:01:d5:38:6a:22:da:01:
         5d:c7:cd:fd:fa:e3:78:20:ca:e5:49:d6:16:60:e4:7c:56:1b:
         87:09:c5:4f:34:63:35:94:f7:18:c3:64:71:5d:2f:64:5e:0f:
         29:52:94:f3:38:6e:8c:da:28:5f:87:46:01:27:f3:2f:ba:f5:
         cb:1b:4a:af:c1:0f:1f:ba:67:88:30:ca:2e:45:66:e7:fd:cb:
         4d:5e:80:56:fa:60:04:26:bc:ef:3f:3a:2e:73:f9:f2:d8:41:
         bd:2b:71:d7:a5:de:14:ea:56:45:77:53:b0:e2:ae:2c:7a:29:
         e7:1a:b0:d4:63:50:60:b1:eb:0c:36:45:87:b6:d3:2b:38:98:
         f8:28:b0:34:bc:52:60:b3:02:40:9c:24:d4:f4:25:3f:99:0c:
         dd:9f:bb:e4:a8:63:19:5e:eb:23:eb:ce:e3:94:7a:34:dd:c3:
         69:f7:4b:37:d1:e4:95:1f:e9:31:9d:8c:23:7b:6e:ba:e3:3c:
         c4:0c:a6:64:16:ca:7d:2f:a1:fe:f0:b7:87:46:b6:e7:ca:4a:
         d3:5e:3b:c9:80:47:00:3e:0f:57:1b:43:e4:ad:d7:20:f2:ab:
         9f:38:21:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:36:08 2026 by rpki-client