Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3232203d3e20323633363134.roa
File:                     3136382e3233322e3232302e302f32322d3232203d3e20323633363134.roa (raw, json)
Hash identifier:          3JVra2S45mnNpZvliq+Hr/ue58neF+x9ePbfBTS28nY=
Subject key identifier:   41:89:CD:4E:D5:7B:65:7E:79:48:91:56:F1:E8:C1:3A:46:07:40:1A
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       175CA17E52AF56104DD284F36F245116514E7F30
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3232203d3e20323633363134.roa
Signing time:             Wed 20 May 2026 13:25:29 +0000
ROA not before:           Wed 20 May 2026 13:20:29 +0000
ROA not after:            Wed 19 May 2027 13:25:29 +0000
asID:                     263614
IP address blocks:        168.232.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5c:a1:7e:52:af:56:10:4d:d2:84:f3:6f:24:51:16:51:4e:7f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: May 20 13:20:29 2026 GMT
            Not After : May 19 13:25:29 2027 GMT
        Subject: CN=4189CD4ED57B657E79489156F1E8C13A4607401A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:91:9a:e8:d4:76:0f:88:aa:25:b3:de:64:
                    be:1d:a6:95:18:bd:ec:e2:5e:03:37:c2:71:a2:99:
                    ce:4a:db:f6:41:ae:4a:e5:5c:9d:f7:90:05:8a:f3:
                    2d:47:d2:c5:5d:e1:2b:da:7d:77:e5:3a:ed:81:e6:
                    34:87:80:e3:d4:56:70:9b:5d:93:f1:11:de:cf:39:
                    50:5d:37:77:e2:dc:ac:db:33:f9:dc:23:3e:85:cb:
                    32:11:76:3e:a4:94:02:37:2e:f6:78:91:4a:2b:01:
                    70:e4:1a:64:63:c4:6b:58:b0:45:8d:b9:fb:d1:a3:
                    a8:95:04:0f:a8:4f:0c:23:f9:c3:f7:6d:a7:4f:c0:
                    9c:69:ae:35:c4:f9:0e:a7:ef:87:7f:46:df:b5:7f:
                    4d:de:47:ec:7e:fa:df:77:9a:2c:d4:82:ab:b5:3d:
                    2b:fb:04:3f:44:f4:14:b1:ec:d9:16:24:b5:6b:e3:
                    50:f9:d7:78:61:58:11:48:c6:03:f8:1f:18:04:8d:
                    71:34:a9:9e:78:eb:89:f8:31:62:ad:62:89:71:db:
                    4f:b0:e6:f0:df:97:87:a4:d7:cc:55:73:59:e0:04:
                    ca:01:17:25:8b:2a:b2:96:32:15:aa:82:6a:1a:f1:
                    89:bc:05:83:2b:ea:8c:9b:b4:15:02:bb:e1:ad:17:
                    1f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:CD:4E:D5:7B:65:7E:79:48:91:56:F1:E8:C1:3A:46:07:40:1A
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232302e302f32322d3232203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:07:cc:a9:f6:64:bb:4d:69:da:8b:99:62:bd:f7:28:23:68:
         af:c9:b0:cb:5c:1e:9a:ba:27:fa:c1:72:5e:c4:44:a5:e4:ac:
         3f:b8:05:ca:77:2d:a3:48:53:0a:15:a4:2e:ce:42:a9:58:9c:
         6d:a9:2e:ec:c1:22:67:cc:3a:c2:1d:df:db:e4:02:d4:a1:0d:
         3a:20:86:4f:c3:ff:25:0c:c6:42:c4:dc:18:ab:e1:37:25:bd:
         6a:a1:78:e7:d9:0f:80:dc:27:00:5a:7f:b5:db:e1:7d:15:a1:
         d7:36:53:c8:9b:1c:1c:67:c7:2f:c5:af:e6:98:36:81:4c:b7:
         40:24:26:7f:c4:28:69:7a:e6:57:b1:27:9f:8c:00:0f:f8:4c:
         3f:28:50:21:af:5f:8d:f5:d3:a8:de:cb:63:4f:bf:ea:50:0a:
         98:13:22:ca:8c:e5:7d:25:a9:8e:b7:0f:90:e3:af:68:81:db:
         24:d7:63:65:1f:af:1b:f6:3c:e6:ed:7f:9f:a4:cb:1e:1a:33:
         58:fb:8b:c6:5c:0c:85:97:f0:c2:16:c1:6d:dc:12:f7:7e:6f:
         46:b9:4d:83:2c:9a:29:2e:bc:bb:99:3e:cc:e2:11:ab:d2:22:
         95:9c:cf:23:c7:51:95:a7:b5:39:80:c5:0e:39:91:40:e4:07:
         e1:bd:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:55:53 2026 by rpki-client