Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138312e302f32342d3234203d3e20323633303938.roa
File:                     3136372e3234392e3138312e302f32342d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          FXGOcsw2AdXXdHYr9Wycnf5DyWUFnjUv2XI4aOLcwO4=
Subject key identifier:   64:C0:90:43:B7:36:B8:3C:B1:C9:4F:2E:77:AA:95:AE:FC:1F:25:04
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       09F1394D76F18AB0FCCDB09895FCFBD4D3B7AA76
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138312e302f32342d3234203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:25 +0000
ROA not before:           Wed 03 Jun 2026 16:06:25 +0000
ROA not after:            Wed 02 Jun 2027 16:11:25 +0000
asID:                     263098
IP address blocks:        167.249.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f1:39:4d:76:f1:8a:b0:fc:cd:b0:98:95:fc:fb:d4:d3:b7:aa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:25 2026 GMT
            Not After : Jun  2 16:11:25 2027 GMT
        Subject: CN=64C09043B736B83CB1C94F2E77AA95AEFC1F2504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:56:03:8d:e8:b4:0a:9c:2b:e1:d2:ac:ed:32:
                    d3:ef:b2:11:8f:fa:14:7b:37:31:dc:9b:db:96:8d:
                    11:4b:c8:ac:54:be:4b:98:6e:0a:60:9a:c1:31:ae:
                    ad:36:ba:28:c2:6b:33:2a:13:ce:65:21:97:53:38:
                    84:94:93:16:5d:ac:f2:e8:43:c5:1c:f2:33:c2:2f:
                    f6:ec:03:ce:f0:fe:be:db:e3:9b:9b:1f:e8:20:5e:
                    cd:41:8a:b3:ba:bc:78:a3:eb:43:31:16:86:2c:7c:
                    0e:5d:72:76:73:1f:25:67:cd:ad:d3:fa:76:33:4a:
                    e7:85:3f:4e:1e:55:0c:5e:9d:1c:a3:9b:13:56:a2:
                    57:14:ed:0b:6e:ab:c9:33:cd:ea:b7:b9:90:58:f4:
                    44:e8:28:f8:4a:65:a3:3b:e4:1d:84:24:d4:7a:72:
                    cb:00:88:7c:e9:31:21:8f:88:79:cb:12:6a:bf:39:
                    fe:40:aa:f9:67:16:fe:b5:8b:d5:c7:36:c3:42:61:
                    0f:e6:a8:e2:0b:1b:8d:cd:9b:1f:14:79:a5:27:66:
                    77:a5:36:85:92:42:ed:7f:76:ae:c3:ab:9f:d5:91:
                    20:87:1f:85:2d:e8:57:9b:f6:97:ef:ce:19:de:70:
                    3c:05:6f:11:87:4d:83:59:7c:c8:ab:52:80:9a:c5:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C0:90:43:B7:36:B8:3C:B1:C9:4F:2E:77:AA:95:AE:FC:1F:25:04
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138312e302f32342d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:45:af:d4:9a:4e:2d:21:93:f3:bf:6c:33:59:6e:69:52:
         56:77:62:ce:06:c4:8c:50:fc:c0:4c:d1:b6:ec:7e:05:34:e9:
         13:ba:79:91:99:13:5a:1f:eb:49:9f:78:aa:56:7e:09:7a:b8:
         09:17:40:f1:cd:e9:9b:91:19:95:83:4d:be:bb:6e:a0:30:3b:
         01:5a:0b:bd:47:f3:be:74:5d:d5:e3:bb:62:3f:0c:25:27:72:
         36:fc:11:fb:7e:44:1e:de:04:dc:a0:7c:2b:06:44:9e:c0:2c:
         71:13:ff:0b:a5:ad:16:a4:66:bf:09:df:cb:81:f0:e1:77:bf:
         69:46:52:9b:f1:32:89:ab:06:41:f7:e3:84:e7:cd:88:7d:00:
         0a:e6:05:42:db:f8:ce:36:24:6b:45:ff:ed:54:69:d3:c6:21:
         82:d8:b1:41:8e:88:73:b6:16:0a:5c:8a:1e:19:23:b7:4d:ae:
         4d:e8:a7:a2:a0:d7:96:86:4f:72:6d:57:cb:2c:7c:1b:69:a4:
         30:46:c1:4c:99:41:e5:e1:22:67:a9:49:9e:00:1b:eb:8e:2a:
         52:8f:ae:d4:75:c2:41:ba:b0:b4:4f:02:74:29:88:5b:68:92:
         3a:bc:b6:b2:3d:f4:39:6f:d0:b6:f3:54:a0:bb:b0:7a:28:08:
         c6:b5:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:56 2026 by rpki-client