Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32342d3234203d3e20323634393330.roa
File:                     3136382e3232382e3231342e302f32342d3234203d3e20323634393330.roa (raw, json)
Hash identifier:          11MUnh204oCpxuzGyP8vnn63dOOLWCvSJGkfi1xaCbM=
Subject key identifier:   66:C1:BF:88:D2:28:C9:8D:50:37:0A:6E:B3:F1:7D:83:3F:9A:5F:E8
Certificate issuer:       /CN=39E1F5197664D9A2E3133424783F9B2651CB8874
Certificate serial:       3273A1EE7D63E5039086BC0A8C1299B60AF757C2
Authority key identifier: 39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32342d3234203d3e20323634393330.roa
Signing time:             Tue 14 Apr 2026 17:05:23 +0000
ROA not before:           Tue 14 Apr 2026 17:00:23 +0000
ROA not after:            Tue 13 Apr 2027 17:05:23 +0000
asID:                     264930
IP address blocks:        168.228.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl
                          rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:a1:ee:7d:63:e5:03:90:86:bc:0a:8c:12:99:b6:0a:f7:57:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39E1F5197664D9A2E3133424783F9B2651CB8874
        Validity
            Not Before: Apr 14 17:00:23 2026 GMT
            Not After : Apr 13 17:05:23 2027 GMT
        Subject: CN=66C1BF88D228C98D50370A6EB3F17D833F9A5FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0f:f8:a1:10:88:48:45:6f:bf:6d:8c:8a:26:
                    9f:5c:a5:d8:37:2b:29:27:37:0c:84:df:f2:25:a2:
                    00:a6:5b:9d:55:dd:06:29:b7:ad:f1:7d:68:62:0b:
                    eb:90:72:a3:a5:9c:89:c6:24:96:7c:cb:7c:9d:18:
                    84:79:1c:df:1c:47:f8:bd:ab:c5:30:b8:13:ed:c6:
                    94:16:ee:d4:d5:4b:a8:58:46:a9:31:2d:1e:c6:5d:
                    88:bc:65:ec:d4:dc:b0:62:11:b1:1e:59:f8:9b:c5:
                    13:c7:77:4f:70:7b:2c:fa:2e:53:56:74:9e:d6:92:
                    06:d2:5b:12:8a:8a:6d:45:ec:78:b7:8e:3d:2a:4d:
                    e6:02:a7:b7:11:ed:68:9d:94:32:3a:dc:c3:98:c7:
                    40:f0:1c:0f:63:8e:d2:8c:ac:a2:51:ce:e5:db:69:
                    2c:25:51:70:ec:72:8e:a4:c4:f2:a4:96:f5:6e:22:
                    b6:1f:26:e5:ce:fa:13:e1:91:21:fe:5f:49:15:8a:
                    40:d0:60:b5:ba:9b:85:72:ce:22:d6:db:80:f3:f1:
                    25:1c:75:21:b5:38:0b:2c:c1:0b:b3:58:c1:61:ef:
                    33:80:3b:e4:f7:7c:23:22:3f:55:10:08:d6:4f:6d:
                    1c:2f:21:3b:3c:ba:8e:a0:31:64:c0:11:1e:ca:39:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C1:BF:88:D2:28:C9:8D:50:37:0A:6E:B3:F1:7D:83:3F:9A:5F:E8
            X509v3 Authority Key Identifier:
                keyid:39:E1:F5:19:76:64:D9:A2:E3:13:34:24:78:3F:9B:26:51:CB:88:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/39E1F5197664D9A2E3133424783F9B2651CB8874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E1F5197664D9A2E3133424783F9B2651CB8874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyuYfGLAWR34gKwwp4ZvjoKbCNYBmgCmcvZLtzNkxziY/0/3136382e3232382e3231342e302f32342d3234203d3e20323634393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:59:d4:df:33:cf:bd:d8:f1:4c:d3:a2:86:b2:f1:bb:48:74:
         f0:2f:5f:54:14:cb:ba:ac:96:c4:c7:5c:d5:51:a9:1f:46:62:
         b3:a2:4a:2a:39:25:83:38:6f:0c:c3:a5:66:0a:b6:f6:33:8c:
         aa:0e:8f:2e:2d:eb:47:4e:34:c4:d5:bf:9f:e3:2f:b9:d8:b2:
         7d:75:56:ef:4e:0d:61:8f:42:2a:17:72:87:91:59:a9:6f:57:
         cf:9a:d2:fe:f9:45:79:4d:82:09:07:b0:3e:d3:ff:a9:cf:05:
         b0:1f:8e:cf:80:29:06:8a:b3:00:54:89:33:d7:0c:ca:d8:ae:
         ab:49:87:26:0a:25:1d:0a:fb:4b:0a:25:98:a1:65:72:31:5c:
         7a:80:a3:88:b3:67:66:3b:e3:30:c6:0c:20:40:cc:22:16:18:
         22:55:c5:cd:42:9a:7e:7b:87:15:98:74:83:89:9b:54:b9:64:
         c6:d3:cf:2d:5a:4b:6d:5b:a8:e6:72:37:ba:b2:d5:76:3a:63:
         d2:f0:fd:74:d1:91:b3:93:cc:8e:17:b8:86:63:62:1e:d0:9c:
         3e:77:af:7d:70:9f:91:77:7b:bd:c1:b9:1c:d4:cd:98:80:4d:
         9e:af:58:5c:5b:00:e3:70:48:75:f7:22:6e:1b:c1:ce:24:16:
         7b:f4:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:32:22 2026 by rpki-client