Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa
File:                     3136382e39302e302e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          tlR4y5t9LIns2FHrpFk0pedEKjfE0nyP7jxIwrmH4ZQ=
Subject key identifier:   D8:F2:A4:D1:04:01:98:15:7D:4A:57:4C:31:FC:E4:1B:26:7B:F6:BC
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       6289F3B8F8FF53EDA7D7B8A818A6052F7A9BA72B
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 13 Jun 2026 23:53:20 +0000
ROA not before:           Sat 13 Jun 2026 23:48:20 +0000
ROA not after:            Sat 12 Jun 2027 23:53:20 +0000
asID:                     61678
IP address blocks:        168.90.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:89:f3:b8:f8:ff:53:ed:a7:d7:b8:a8:18:a6:05:2f:7a:9b:a7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 13 23:48:20 2026 GMT
            Not After : Jun 12 23:53:20 2027 GMT
        Subject: CN=D8F2A4D1040198157D4A574C31FCE41B267BF6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:02:0d:a5:73:7c:5a:c4:fa:68:6a:69:0e:bb:
                    5a:24:a1:ff:d4:19:25:ed:4d:3d:ab:11:da:4e:7d:
                    99:d6:2d:84:55:20:44:86:87:aa:46:39:bc:f2:3b:
                    5b:be:02:9b:cb:3d:3b:ba:ff:34:12:bc:50:8d:ef:
                    20:8f:48:4c:ab:a2:82:39:08:da:7d:23:9d:b7:3c:
                    42:55:d7:e4:2f:2e:2a:ab:13:5e:90:be:c1:cb:68:
                    ed:5c:60:48:91:0a:5e:2c:de:a7:32:f5:d8:ca:e2:
                    26:22:a1:e1:80:cd:90:97:06:e2:5f:f6:a1:31:e9:
                    fa:fe:86:6f:81:fd:f6:52:23:80:63:bb:bb:96:64:
                    b7:ab:85:27:22:a0:4b:db:dc:c4:14:e1:b8:96:05:
                    63:4a:5f:c2:d6:40:cf:b6:83:a7:88:95:6e:b1:95:
                    06:19:9a:86:37:b9:3f:2b:42:cd:8a:61:89:dd:5f:
                    61:e1:8e:2a:b4:6c:ec:83:ff:ad:12:8d:17:a8:f7:
                    cf:c4:25:43:bf:4f:b1:8a:c3:13:0e:9a:51:d7:1c:
                    cb:3a:3e:8c:f7:15:58:73:be:6c:3a:01:72:4b:16:
                    56:31:60:27:ea:da:5f:63:bd:f2:18:8f:00:65:13:
                    52:12:bf:7a:e1:ed:ec:3a:b7:a9:c4:8e:9c:b2:bb:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:A4:D1:04:01:98:15:7D:4A:57:4C:31:FC:E4:1B:26:7B:F6:BC
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3136382e39302e302e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:08:9e:35:e3:11:8e:dd:eb:2a:fd:11:69:64:92:d6:50:ab:
         f6:76:80:2c:81:e2:9e:31:73:8d:58:3a:5b:20:55:57:e8:fc:
         0b:06:83:e4:f9:10:37:1e:9d:40:ce:e2:03:5e:ae:83:f6:df:
         73:c4:7d:6c:cb:56:77:37:48:4e:2b:11:90:47:0f:6b:62:23:
         1c:36:19:26:97:91:c5:68:c8:b5:96:0b:47:de:70:91:2e:d7:
         d9:70:23:7e:d4:3e:2f:81:c4:d5:84:92:83:d3:3d:54:cc:d4:
         50:31:d0:08:3c:11:63:31:31:0b:00:fe:47:69:48:99:6c:23:
         68:3a:0c:f6:52:4d:8b:8a:5c:32:57:76:dd:bd:60:83:74:2b:
         c8:99:62:65:09:b1:4a:a4:26:33:a9:64:12:82:24:01:47:33:
         e4:c7:f7:4d:9b:57:09:81:bd:d2:a9:43:7a:b6:62:0f:0a:1d:
         5c:d4:1f:62:87:00:4d:02:7c:90:ee:fd:91:e4:2c:c6:f2:64:
         16:ed:6c:f5:5d:d5:49:3c:af:cf:d0:c6:d5:3b:9c:6d:63:63:
         76:db:1e:ad:9a:e8:5f:7a:90:97:70:44:f4:21:76:d5:64:8b:
         13:95:45:8a:a0:f8:fc:b2:12:d3:f6:b2:33:d2:71:64:ed:8f:
         f7:d7:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:26:13 2026 by rpki-client