Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32342d3234203d3e20323634393330.roa
File:                     3136382e3232382e3231322e302f32342d3234203d3e20323634393330.roa (raw, json)
Hash identifier:          RB1/ZX/WqGW8I6y3Bzwlmwh7UYm3/in0e2rBNH0Yf1o=
Subject key identifier:   C4:F7:E8:E0:DA:56:25:BB:02:95:EB:81:9D:00:5E:90:42:05:E5:CE
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       359B0BD4C8C1D91150331DB06A1290F8EE811C89
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32342d3234203d3e20323634393330.roa
Signing time:             Tue 14 Apr 2026 17:05:23 +0000
ROA not before:           Tue 14 Apr 2026 17:00:23 +0000
ROA not after:            Tue 13 Apr 2027 17:05:23 +0000
asID:                     264930
IP address blocks:        168.228.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9b:0b:d4:c8:c1:d9:11:50:33:1d:b0:6a:12:90:f8:ee:81:1c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Apr 14 17:00:23 2026 GMT
            Not After : Apr 13 17:05:23 2027 GMT
        Subject: CN=C4F7E8E0DA5625BB0295EB819D005E904205E5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:7d:45:ab:33:ef:43:09:78:c1:b9:cc:c7:
                    57:2a:51:6c:ff:3f:a8:20:88:17:c7:4a:b1:a3:6d:
                    99:d1:7c:6a:78:ed:0c:1c:b5:39:07:39:89:21:ce:
                    26:3e:15:84:0b:2d:59:bc:a9:66:12:61:a6:6d:b2:
                    62:42:47:74:12:a1:ff:99:67:51:c3:90:9c:2d:e7:
                    a9:1e:ca:54:dc:a1:c4:ad:44:13:11:57:14:bb:06:
                    9b:a4:55:e6:f4:51:1a:00:db:09:05:a7:39:c4:f8:
                    e7:d3:d0:a1:f2:63:e5:6a:1a:86:00:3c:26:c5:d7:
                    13:f8:58:7a:7d:31:d1:02:a3:f5:8c:d0:4e:76:46:
                    71:41:d3:1c:20:29:b9:69:17:24:3a:a8:2e:74:4b:
                    d4:80:3f:72:0d:17:08:79:4d:f7:c5:0f:1d:4f:be:
                    a5:68:39:bd:ea:0b:b0:e8:72:4f:f6:9f:6d:56:e0:
                    46:4a:ef:f1:b0:33:7d:fa:6c:72:52:26:31:e2:3b:
                    43:91:88:34:ef:cd:a5:3c:41:2f:3b:b9:50:13:ae:
                    42:d9:47:e3:84:61:01:57:8c:ba:43:7d:6f:4f:01:
                    2d:6a:f0:8c:b3:14:b7:a1:38:e1:83:a0:c2:a7:e4:
                    5c:72:93:85:1d:a4:e4:3b:3a:52:33:da:46:ba:59:
                    59:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:E8:E0:DA:56:25:BB:02:95:EB:81:9D:00:5E:90:42:05:E5:CE
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231322e302f32342d3234203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:04:04:c3:0e:ce:5b:c1:2c:50:9b:ef:08:05:f7:b0:55:25:
         41:ee:76:85:e9:17:91:f4:a9:3c:f9:bf:d4:59:ec:7e:03:d5:
         a4:21:6b:e8:0e:9c:05:e0:c5:bf:0f:31:4d:05:c5:82:21:10:
         8f:d7:bc:bd:a4:7b:a4:f1:c1:d5:6f:ad:1c:09:b4:22:68:77:
         a4:b6:61:9a:03:be:db:34:6b:b0:4e:fb:92:c4:f2:b6:17:45:
         9f:00:a2:f8:aa:4e:da:ef:54:57:65:66:65:1a:d2:90:c0:d0:
         41:dd:e7:b5:a2:ea:1c:0c:54:9c:d5:d3:b1:13:27:e8:46:55:
         ca:be:16:21:49:ff:aa:ae:41:19:ab:93:c3:08:48:1b:30:bf:
         37:e6:4d:07:29:81:d0:c5:70:50:1a:c9:83:8e:8e:61:32:1b:
         3f:86:62:60:0b:14:73:e5:e7:b5:d0:e6:70:f9:fc:cb:5b:86:
         18:29:26:09:3c:7f:0c:32:c7:f2:8c:9b:4d:e2:88:e5:33:bc:
         e3:6f:b4:b5:4c:32:a1:e6:c2:0e:e4:1c:ca:71:a7:5c:d1:02:
         f7:09:d0:25:ce:27:14:ec:38:5d:af:a0:bd:b2:6d:af:41:1d:
         da:f4:a0:8d:e7:58:6d:59:70:9e:f4:e7:ae:04:7a:56:77:84:
         f8:b2:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:59 2026 by rpki-client