Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa (raw, json)
Hash identifier:          ujZcYFd9co+/HpFzkrQL9kq/ifn/VPwvif3Dtt2TacI=
Subject key identifier:   2A:80:B6:F3:37:77:88:8D:52:B4:4B:10:B4:07:84:DB:76:5F:80:06
Certificate issuer:       /CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
Certificate serial:       57BEFB7803DC45E27649FCF45E736B5E6CDDF202
Authority key identifier: 58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa
Signing time:             Fri 05 Jun 2026 14:55:54 +0000
ROA not before:           Fri 05 Jun 2026 14:50:54 +0000
ROA not after:            Fri 04 Jun 2027 14:55:54 +0000
asID:                     265394
IP address blocks:        168.194.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 10:59:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:be:fb:78:03:dc:45:e2:76:49:fc:f4:5e:73:6b:5e:6c:dd:f2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
        Validity
            Not Before: Jun  5 14:50:54 2026 GMT
            Not After : Jun  4 14:55:54 2027 GMT
        Subject: CN=2A80B6F33777888D52B44B10B40784DB765F8006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:1d:a1:b4:f8:e3:b6:2e:78:72:16:fe:7e:
                    4a:18:9f:e6:6e:02:49:01:e3:6a:a7:fe:8b:cd:ee:
                    a3:a7:5e:49:ef:82:a3:bc:ad:ad:88:3f:7b:48:db:
                    bd:4d:8d:09:2d:89:1d:36:22:fd:57:21:c9:e1:04:
                    53:2c:7f:2b:d8:64:07:6a:bc:2e:eb:51:61:f4:45:
                    82:98:b4:fd:17:53:42:f2:23:9e:f6:5b:8f:3e:14:
                    ed:fc:01:34:d1:2f:df:43:62:77:81:9a:de:41:21:
                    aa:f0:68:a7:69:d4:b9:a5:59:1e:50:e5:eb:44:ab:
                    c2:4f:d6:2f:bf:be:5b:59:01:d0:ce:ba:fc:7e:5c:
                    fe:08:a4:1f:e0:df:43:83:c6:ce:95:fd:16:fb:a7:
                    4b:91:8c:c7:21:66:00:40:ae:6e:a0:d9:b6:ac:16:
                    72:56:bb:ab:2c:fd:22:4a:f7:63:28:83:06:59:f0:
                    69:29:bd:ea:0d:53:e4:8e:9e:20:73:d7:5b:ad:0d:
                    75:af:b3:68:e6:97:00:f9:c4:08:3e:23:3b:02:d7:
                    e2:8e:0c:bf:23:8f:af:8f:7a:33:a4:fb:96:98:d3:
                    d6:85:8a:50:a5:aa:3f:9f:da:e5:22:03:13:ba:8a:
                    94:69:3b:50:e2:69:c3:8c:35:f5:df:f4:f0:4d:38:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:B6:F3:37:77:88:8D:52:B4:4B:10:B4:07:84:DB:76:5F:80:06
            X509v3 Authority Key Identifier:
                keyid:58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32342d3234203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:11:87:e2:b3:16:02:a7:c0:9e:d0:b2:51:fc:59:e3:04:
         96:58:bd:22:e2:72:d9:82:43:99:fe:c9:7e:a9:d1:a2:1a:4a:
         12:2e:7a:cd:df:6a:42:04:d2:36:e6:2d:3f:27:5f:9b:cc:86:
         ae:55:37:1d:a1:8f:94:30:52:e9:58:9a:3d:04:d5:e0:9c:61:
         3c:0f:d5:b0:20:75:07:d9:33:bc:5c:5e:f2:93:77:14:47:f2:
         3e:6d:32:76:4d:ac:ff:8a:39:54:fb:38:a9:13:86:0f:be:e7:
         b9:51:56:47:96:b6:2c:d8:7f:a6:d6:a2:c7:b3:9e:78:9d:ad:
         5b:e8:9e:09:4f:29:a4:cf:d3:29:19:45:de:ba:97:ff:b8:71:
         69:05:04:ff:14:b3:fa:09:91:e1:b5:d2:bd:1b:5e:34:fc:a4:
         7e:72:8c:e8:a7:ca:94:e9:4f:25:de:a6:ce:a2:91:bc:03:69:
         ad:79:1b:d6:0c:ac:1b:1d:76:c6:68:0a:5a:9e:88:63:73:bc:
         ad:2f:77:48:ab:e4:94:de:db:4f:c2:9e:2a:8f:8d:f1:59:be:
         8e:b2:b2:4d:6d:7d:8a:bc:84:f3:c0:ee:10:4d:97:f3:4b:42:
         a7:98:ec:97:c3:c4:ea:f3:45:d6:b6:66:82:9e:79:00:f4:bd:
         86:a0:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:03:01 2026 by rpki-client