Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38302e302f32342d3234203d3e20323730393433.roa
File:                     3137392e3138392e38302e302f32342d3234203d3e20323730393433.roa (raw, json)
Hash identifier:          gdakRS7GxsJXtZlD6OU5j/LyhmzjqbNjdDDkXcS28I0=
Subject key identifier:   90:B8:10:D8:6B:E5:D5:FB:5C:46:92:93:91:94:EA:3D:C5:74:F5:88
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       6F6DA723B95B6B1CB542C24F14CFF21292611CBD
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38302e302f32342d3234203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:13 +0000
ROA not before:           Mon 23 Feb 2026 20:52:13 +0000
ROA not after:            Mon 22 Feb 2027 20:57:13 +0000
asID:                     270943
IP address blocks:        179.189.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:a7:23:b9:5b:6b:1c:b5:42:c2:4f:14:cf:f2:12:92:61:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:13 2026 GMT
            Not After : Feb 22 20:57:13 2027 GMT
        Subject: CN=90B810D86BE5D5FB5C4692939194EA3DC574F588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:30:2a:bf:bc:de:02:5d:d9:9a:29:20:93:
                    75:b6:38:b2:1e:e4:2f:58:5e:b2:88:d4:13:1b:62:
                    2c:97:31:6b:25:60:6c:cd:8a:98:f5:d4:80:ec:d4:
                    81:ee:74:51:d5:c9:a1:17:91:d2:7e:79:ea:f1:b6:
                    23:b6:52:48:d6:4d:e0:8d:35:5c:39:b3:11:5d:8d:
                    19:99:82:66:38:5e:93:54:4c:61:e9:a3:af:d0:eb:
                    d9:96:fd:c2:32:b7:80:02:6e:38:40:61:5c:d1:10:
                    d1:7d:e9:c3:48:29:56:97:59:c1:a8:53:5f:ff:3c:
                    92:fb:52:16:a3:16:8b:dc:1e:4a:5c:92:37:07:d3:
                    b2:a7:bc:10:f8:44:3b:72:d9:8a:ed:44:52:0a:11:
                    29:ab:99:35:45:9a:f5:d0:8b:9c:32:a6:f0:96:17:
                    2a:fa:0f:c8:4f:0d:63:a5:33:1c:39:f2:1d:92:4e:
                    55:a9:0d:77:3f:8c:f2:c3:88:dd:d5:02:47:c3:75:
                    51:33:ff:39:61:9a:86:ec:7d:0f:cc:03:0f:7b:78:
                    92:b6:4e:0c:35:f9:f8:b3:0e:cb:c9:71:56:ac:28:
                    55:d4:ce:e2:fe:af:60:00:6d:ac:62:74:19:38:9b:
                    b4:4b:ae:38:4d:2d:ea:f6:2c:43:35:97:8b:3a:21:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B8:10:D8:6B:E5:D5:FB:5C:46:92:93:91:94:EA:3D:C5:74:F5:88
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38302e302f32342d3234203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:26:83:09:e1:bd:f5:f5:c0:13:1b:da:3c:37:a9:2d:97:c7:
         71:b8:30:d1:a2:4d:5d:6e:7a:13:cb:b5:25:86:5b:57:5f:03:
         76:b8:df:be:c7:29:df:fa:2f:b5:ec:3e:0e:28:eb:9e:f9:f1:
         77:06:25:90:3c:56:7a:6e:47:52:5e:d4:91:10:95:5d:8c:bb:
         ac:7d:bc:64:d2:37:06:2c:d5:db:9d:80:06:36:86:5d:89:f0:
         cd:9b:aa:5f:75:0c:87:68:75:8d:75:4a:ba:14:b2:80:c2:8c:
         6e:81:84:b0:3d:c4:8b:9f:9b:43:6e:81:4b:41:df:f1:8f:98:
         9d:b2:88:93:14:1a:6f:76:4d:04:11:3e:2f:73:85:8b:7c:ee:
         cf:82:63:76:39:34:24:88:3c:df:69:0c:c9:dc:62:94:97:71:
         f3:14:f1:ea:b6:3b:a9:6f:f1:40:3b:25:f5:65:aa:1b:02:3d:
         91:fe:e3:82:25:39:d0:7b:3a:b2:72:7e:84:6c:c7:b6:6c:4e:
         1b:bb:77:f4:89:ed:75:51:da:48:a0:e4:d6:b5:5d:e7:49:e8:
         18:fb:27:5d:a5:af:33:95:01:11:d7:40:20:62:1d:28:5f:b7:
         2d:27:07:08:f0:50:f1:09:1b:f9:3d:1a:88:a5:7c:f7:29:cf:
         b7:b1:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:08:50 2026 by rpki-client