Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3139302e322e3138372e302f32342d3234203d3e20323730353634.roa
File:                     3139302e322e3138372e302f32342d3234203d3e20323730353634.roa (raw, json)
Hash identifier:          /FQe6AmQdla3uxsbwsB/xQvzBIiYudTC4VvyfS2rWTo=
Subject key identifier:   A6:BB:90:58:B5:4F:06:C2:57:F8:D0:6A:B3:2D:0C:69:6D:F2:1D:5A
Certificate issuer:       /CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
Certificate serial:       3296AD7D079601EEE5B3EFC0292DC99CFA24B160
Authority key identifier: 6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3139302e322e3138372e302f32342d3234203d3e20323730353634.roa
Signing time:             Thu 21 May 2026 16:46:06 +0000
ROA not before:           Thu 21 May 2026 16:41:06 +0000
ROA not after:            Thu 20 May 2027 16:46:06 +0000
asID:                     270564
IP address blocks:        190.2.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl
                          rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:96:ad:7d:07:96:01:ee:e5:b3:ef:c0:29:2d:c9:9c:fa:24:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4
        Validity
            Not Before: May 21 16:41:06 2026 GMT
            Not After : May 20 16:46:06 2027 GMT
        Subject: CN=A6BB9058B54F06C257F8D06AB32D0C696DF21D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:47:8b:6c:3c:c1:b0:c8:c9:71:0d:89:b1:
                    4d:b6:a1:58:1f:ef:25:d7:e8:a9:06:48:9e:d1:3e:
                    5b:32:c0:68:52:7c:a6:de:c4:6e:36:bc:d6:16:5d:
                    74:bb:34:3f:be:2e:f6:41:4f:6d:dc:28:89:5c:f0:
                    1e:1f:15:f4:61:89:4e:8b:eb:d5:5c:78:63:e1:89:
                    c2:05:61:2e:d5:80:bb:36:de:84:78:c0:e4:2b:9e:
                    cc:8f:45:8b:00:6b:21:df:0e:d0:a0:b3:04:32:c0:
                    74:8a:6b:82:3c:ec:c6:13:2a:ac:48:c1:0e:5d:e8:
                    70:5c:2d:21:5b:85:63:5d:8e:83:16:e7:a0:3a:33:
                    35:78:7c:b7:6d:dc:6b:7e:55:92:83:7c:9f:fe:47:
                    e1:c5:f1:63:f8:7d:d7:c0:e7:9c:9c:39:19:75:96:
                    f0:dd:a8:d7:d4:9e:ce:07:83:c2:99:57:63:d5:3e:
                    2c:b0:c8:e6:e1:e7:a3:40:6c:75:09:6e:68:31:af:
                    90:43:0e:a5:37:85:18:cb:0f:cf:28:6e:93:98:e0:
                    52:56:26:41:e3:55:54:62:6a:84:1d:d9:a4:66:2e:
                    9d:76:37:f5:2f:75:a4:df:e7:d3:60:e7:fb:c9:a2:
                    5e:a2:c0:9c:50:01:de:da:c2:06:bf:22:85:10:bf:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BB:90:58:B5:4F:06:C2:57:F8:D0:6A:B3:2D:0C:69:6D:F2:1D:5A
            X509v3 Authority Key Identifier:
                keyid:6F:59:F3:AB:3D:9F:CC:2B:E2:66:2F:46:76:35:D1:6B:D4:DE:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F59F3AB3D9FCC2BE2662F467635D16BD4DE92D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/3139302e322e3138372e302f32342d3234203d3e20323730353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:32:11:25:cc:99:0b:38:51:2c:c7:1b:28:77:2b:09:f8:
         e4:84:ba:0b:d0:cf:5f:c3:dc:63:4a:e3:e1:db:7e:c2:cc:e1:
         b7:5d:99:bd:01:6b:b2:9c:46:b0:29:c5:a6:35:d6:a2:38:c0:
         e8:6a:dd:58:7d:b5:54:fe:ad:c9:33:ef:6a:1f:3b:29:00:c0:
         4b:18:e6:e3:35:f6:f0:15:23:43:29:9d:96:d8:51:80:ef:ea:
         c8:e7:0d:d1:3a:0d:a9:30:2d:c6:d0:3f:dc:5a:2f:4f:80:71:
         72:17:d2:8d:0b:09:50:77:cd:aa:2a:89:24:57:2a:fd:70:25:
         63:76:bd:50:77:75:bb:a2:4d:ed:54:12:c9:1a:00:8c:52:46:
         94:30:08:a6:34:c8:21:b0:ad:f7:dd:68:e0:8b:b8:41:b7:03:
         8c:7d:ec:86:66:21:9f:76:a4:fe:8d:5a:d5:05:a2:d6:ab:7f:
         0a:f6:34:f8:ca:3f:89:a7:c7:b5:5e:df:fb:d8:36:5a:30:81:
         ee:57:e4:b6:92:81:31:ca:da:18:dd:b3:6b:40:7d:ee:d6:ec:
         42:a0:5a:39:a2:0b:f6:5b:ed:97:e3:06:70:e3:80:3b:e7:62:
         0d:64:b2:11:14:4a:50:1e:75:07:18:9d:17:b7:ff:81:c9:90:
         dd:1b:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:16:32 2026 by rpki-client