Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa
File:                     3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa (raw, json)
Hash identifier:          YKKENE+AjipB95/g9a6cKDxyEyzv3YDkGPlVjb7NSg8=
Subject key identifier:   35:22:AC:2F:A1:DA:D8:71:F0:21:F3:75:FC:14:02:5A:D9:2F:61:FF
Certificate issuer:       /CN=CC58DAF288CB59CD86B813345628DC535B34879B
Certificate serial:       27960F37B763996BB3CA29D83D402DEEE09F5772
Authority key identifier: CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa
Signing time:             Sat 30 May 2026 12:46:56 +0000
ROA not before:           Sat 30 May 2026 12:41:56 +0000
ROA not after:            Sat 29 May 2027 12:46:56 +0000
asID:                     271390
IP address blocks:        181.189.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl
                          rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:96:0f:37:b7:63:99:6b:b3:ca:29:d8:3d:40:2d:ee:e0:9f:57:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC58DAF288CB59CD86B813345628DC535B34879B
        Validity
            Not Before: May 30 12:41:56 2026 GMT
            Not After : May 29 12:46:56 2027 GMT
        Subject: CN=3522AC2FA1DAD871F021F375FC14025AD92F61FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:1a:a9:7a:bb:b4:9b:e3:4e:e3:c0:34:b3:
                    7f:92:88:c0:ed:e9:95:ce:c3:5c:f2:42:58:58:0e:
                    18:b0:e8:56:3c:79:1b:c3:07:28:b3:33:bc:e8:e8:
                    fb:2c:00:29:7e:f0:16:e6:00:f7:5a:34:ff:8d:3a:
                    af:df:d3:f7:fc:eb:de:d0:7f:20:8d:fe:d9:98:ae:
                    09:97:82:3e:34:81:56:c0:5d:d9:5a:20:c3:4d:0f:
                    18:d3:65:00:0c:b2:fe:d8:21:9c:8a:2a:3a:0e:9d:
                    cd:7b:42:94:28:53:c7:49:4f:06:90:55:61:c4:85:
                    a8:15:3b:6b:d6:e4:0c:12:7c:a0:cd:e2:1c:5d:02:
                    17:84:02:7a:23:ce:2a:6b:3d:3a:b4:47:c2:21:d8:
                    a8:ac:72:31:85:76:8b:d8:d1:9a:f4:b7:8d:4a:24:
                    73:e6:aa:39:a2:8d:02:f4:a1:ea:27:73:1c:82:40:
                    b8:50:2a:1b:cd:73:ce:25:ff:05:38:e7:94:05:6a:
                    ef:39:f4:1c:38:91:d8:a1:a4:cf:91:db:74:6e:8a:
                    11:29:46:88:6f:35:42:e4:fb:11:a1:68:64:9a:b7:
                    f5:5d:cd:bd:3a:68:74:28:55:84:c3:69:c3:d5:b3:
                    0d:b4:10:b0:bb:ae:85:17:ea:51:9c:a2:c7:9c:52:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:22:AC:2F:A1:DA:D8:71:F0:21:F3:75:FC:14:02:5A:D9:2F:61:FF
            X509v3 Authority Key Identifier:
                keyid:CC:58:DA:F2:88:CB:59:CD:86:B8:13:34:56:28:DC:53:5B:34:87:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/CC58DAF288CB59CD86B813345628DC535B34879B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC58DAF288CB59CD86B813345628DC535B34879B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2q9vUUfTxTTBoF4KsBqZaRoULPuK7o9T1VgsigwuLrVe/0/3138312e3138392e3130342e302f32322d3332203d3e20323731333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:51:da:6f:69:ef:1e:9c:c2:41:5a:97:96:0f:ab:52:3b:
         76:97:4b:9b:43:08:88:1b:9a:9c:6f:ca:b3:7e:db:d4:48:de:
         a1:6f:72:4b:2f:95:dd:e7:8c:03:d9:85:ab:a0:f6:de:11:00:
         89:00:1f:09:47:20:b1:80:02:19:db:6e:cc:55:32:30:f5:59:
         4c:3f:4e:c4:bb:cd:83:98:f3:ef:c2:0b:99:9e:ee:f5:19:64:
         d7:86:a1:b4:ce:bd:3c:45:39:00:01:d6:f0:b7:8d:8c:38:d3:
         9d:c6:2b:38:eb:96:aa:7f:9a:31:1b:a7:6b:5a:84:f4:ba:b3:
         b6:9c:5f:27:65:92:88:10:40:84:d5:90:8e:c1:81:47:97:31:
         6a:c5:75:96:f5:9f:8f:59:70:79:64:3d:f7:8c:67:ec:78:6a:
         90:bd:ef:e4:06:2d:2e:09:7a:24:6a:04:d6:bd:98:b1:f3:bd:
         79:2c:8f:08:92:d9:78:86:60:e2:48:35:77:84:67:a1:6d:70:
         c3:7b:3b:e2:eb:5c:8d:63:6b:62:63:47:0e:83:7b:52:71:36:
         30:94:fb:da:b8:15:4b:03:3c:1d:95:e2:97:7d:b1:d3:55:c7:
         ce:07:6f:17:82:d9:bd:6c:a3:35:17:59:db:35:ac:90:cb:4a:
         59:38:92:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:27:42 2026 by rpki-client