Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa
File:                     3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa (raw, json)
Hash identifier:          LQfEs5BsnJRWNQT6AAbr+cgTKDJiMzbQS+Ni1JHpza0=
Subject key identifier:   BD:52:A7:17:87:86:89:EB:EA:5F:AD:D5:59:0D:F6:62:83:E4:A0:79
Certificate issuer:       /CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
Certificate serial:       213AC6F2A6D4719EE1D2AA6B862BA2980FD2BB80
Authority key identifier: 8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa
Signing time:             Sat 13 Jun 2026 23:53:20 +0000
ROA not before:           Sat 13 Jun 2026 23:48:20 +0000
ROA not after:            Sat 12 Jun 2027 23:53:20 +0000
asID:                     61678
IP address blocks:        170.246.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl
                          rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:c6:f2:a6:d4:71:9e:e1:d2:aa:6b:86:2b:a2:98:0f:d2:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC
        Validity
            Not Before: Jun 13 23:48:20 2026 GMT
            Not After : Jun 12 23:53:20 2027 GMT
        Subject: CN=BD52A717878689EBEA5FADD5590DF66283E4A079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:e2:39:66:e8:19:21:ee:44:23:8d:f0:e6:
                    8f:ac:b1:6e:ba:6c:4b:22:fc:5c:1d:44:25:2d:15:
                    d9:ca:ef:2e:e6:62:73:38:17:fb:0f:05:5a:d5:7b:
                    37:16:cd:e2:2b:37:14:25:8a:eb:3f:46:0b:60:e9:
                    b0:27:2c:33:c6:39:e6:70:d8:50:f2:4c:8b:36:8f:
                    5e:5c:99:5b:a0:1f:6c:03:3c:1d:e7:8b:a6:a4:80:
                    c7:97:b1:ff:d6:e2:30:83:e0:12:e4:25:81:63:59:
                    53:6a:0d:f7:80:59:82:ef:33:29:d0:b0:d7:79:57:
                    14:ba:53:86:31:7e:3b:ef:05:bd:54:26:98:f0:b6:
                    c4:b9:9b:e1:a1:d6:e8:72:11:6e:a3:15:f6:44:7f:
                    04:84:1e:4a:6e:b1:e5:fc:91:b4:c0:1a:0b:91:91:
                    d8:95:73:02:bd:c5:91:c6:b8:bc:39:5b:4e:b4:f7:
                    f4:4d:d5:5e:12:f2:56:81:26:f9:77:d8:40:10:22:
                    5c:58:e1:4d:d2:99:7f:d3:17:13:a5:30:66:3b:26:
                    ba:a5:1f:87:b3:39:82:3c:d8:d8:60:92:25:45:01:
                    79:78:c9:1f:18:6a:3b:a8:0d:3c:07:fd:dd:de:2f:
                    28:46:01:af:86:ce:5d:54:b3:ec:ac:07:b1:1f:26:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:52:A7:17:87:86:89:EB:EA:5F:AD:D5:59:0D:F6:62:83:E4:A0:79
            X509v3 Authority Key Identifier:
                keyid:8E:52:C6:A9:BE:AD:79:DC:95:0F:9D:A5:60:C5:30:F2:8B:C6:FC:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E52C6A9BEAD79DC950F9DA560C530F28BC6FCDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3137302e3234362e3233362e302f32322d3332203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:72:24:f4:60:be:9b:96:76:89:05:f1:4c:20:bf:89:7d:
         35:87:8e:3b:4a:d0:f6:94:77:6c:af:50:ac:a2:71:ff:8b:0d:
         c4:8e:9e:72:c2:55:93:dd:89:ac:f5:18:aa:35:28:5d:8a:98:
         25:ef:2a:b3:12:2b:0d:3e:f5:ce:b9:44:cc:b9:00:cc:96:7b:
         1f:0f:98:d1:81:c3:a6:2d:f8:22:1f:9f:2f:4e:89:e1:61:1e:
         e6:47:8d:f7:f0:6b:4a:96:7c:da:7d:4b:8a:a6:dc:3b:b4:e6:
         d3:25:f1:4f:a1:f7:81:fe:da:48:bb:52:b6:82:51:d4:81:17:
         ef:8d:95:66:fe:db:78:e5:f5:45:3e:4c:42:a8:9d:08:b4:15:
         a7:80:ec:8e:7d:0f:75:4c:dc:50:c9:fe:48:13:f3:03:e1:6d:
         9e:4c:75:cc:bd:30:60:80:63:8d:90:53:57:32:9b:97:54:26:
         4d:10:67:85:6c:e4:4b:01:79:0f:78:56:3a:09:3d:12:e2:4f:
         5d:88:dd:5c:d8:0f:c6:5a:7a:0f:c6:19:c1:5f:ad:4a:9a:e2:
         c4:29:b1:e9:0b:fd:f4:6d:27:6a:42:0d:f0:89:cb:1f:dc:70:
         3f:d0:41:23:b7:72:46:d2:fa:83:cb:0b:6a:4d:60:7c:69:5f:
         a2:07:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:45:30 2026 by rpki-client