Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
File:                     3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          0f2EmVhsXbvITIInlr9nid94Jwt6IZGvlJnqDV1MSfo=
Subject key identifier:   6F:0B:79:81:E0:7F:40:E3:A7:F5:BD:6A:0E:19:34:1F:47:96:6B:AF
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       1698F6666805284F02B152E9888C8B88C68253B0
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa
Signing time:             Wed 20 May 2026 13:26:55 +0000
ROA not before:           Wed 20 May 2026 13:21:55 +0000
ROA not after:            Wed 19 May 2027 13:26:55 +0000
asID:                     263614
IP address blocks:        168.232.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:98:f6:66:68:05:28:4f:02:b1:52:e9:88:8c:8b:88:c6:82:53:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: May 20 13:21:55 2026 GMT
            Not After : May 19 13:26:55 2027 GMT
        Subject: CN=6F0B7981E07F40E3A7F5BD6A0E19341F47966BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9d:98:3a:57:d0:64:de:7b:bf:66:91:ab:1e:
                    d5:1d:ec:b5:4a:ce:2b:4d:87:6c:9e:15:49:17:03:
                    db:a6:8a:d4:27:49:71:63:97:f9:1f:d9:f3:be:66:
                    82:0f:06:d7:c4:72:8b:73:6e:03:3f:58:41:e2:28:
                    cf:e8:07:e2:97:5a:eb:28:e4:4c:bb:6f:b7:3c:42:
                    85:a1:75:5f:a1:b8:99:7c:c7:04:17:1e:5e:c4:a5:
                    e8:dd:36:23:be:28:94:ba:9b:3d:cc:44:47:3a:43:
                    6e:39:a3:e8:a1:ce:13:a0:8a:13:28:82:0d:fc:c4:
                    0d:db:64:ef:cb:ac:cd:34:7c:a4:b4:95:a3:a8:9c:
                    61:e0:4c:8f:11:fb:a0:da:98:67:4d:d3:a0:55:90:
                    96:35:38:9d:9a:e1:40:1c:5c:34:97:70:39:68:f2:
                    73:1e:58:ce:bf:5b:06:e1:98:15:a3:9e:6d:03:b4:
                    0e:91:cb:7b:7c:6d:42:cf:b3:fd:cd:b5:6d:73:a5:
                    ff:77:f0:56:08:f5:f2:2e:86:a4:64:54:60:2d:bc:
                    75:ff:0e:99:8e:1f:ed:d4:ba:da:a0:02:9c:c5:5d:
                    56:29:c4:68:84:d9:9f:ab:11:ac:be:f6:96:82:98:
                    34:58:bc:01:a1:ca:dc:e0:d6:36:c3:3b:14:dd:9c:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0B:79:81:E0:7F:40:E3:A7:F5:BD:6A:0E:19:34:1F:47:96:6B:AF
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3136382e3233322e3232312e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:57:42:a1:d8:f1:57:c4:24:38:6e:6d:83:e2:70:df:5e:a8:
         f0:7e:2b:6a:78:f7:ad:93:ac:cf:28:90:10:13:fc:75:25:08:
         f0:ed:bd:49:98:73:a7:86:cb:6e:8a:73:d8:e5:55:b8:5d:8a:
         89:63:fe:ab:34:41:ac:30:38:c1:49:18:d5:5c:f4:44:50:a1:
         a3:e6:1e:f8:a4:30:8b:d6:c7:aa:02:4b:59:61:67:ec:19:45:
         99:f9:79:c8:76:10:8a:e0:5a:92:5f:7e:6b:b9:87:74:f0:e6:
         bd:29:a8:a3:5d:33:8e:41:6b:83:ef:4b:c1:da:2d:96:b1:c5:
         f1:87:15:c5:68:ec:ed:b6:19:52:8b:9b:89:8a:14:4c:cc:d2:
         35:a7:8f:7b:05:b6:eb:4e:cc:2e:49:80:17:7a:06:46:7e:5f:
         25:c4:a2:4b:50:40:ea:9d:a5:2f:22:21:4e:6b:6a:38:bf:82:
         20:27:f3:09:a3:1a:3f:96:5c:79:4c:74:fd:45:72:d9:c4:3d:
         0b:98:43:f3:97:23:94:da:06:0a:b9:71:1d:70:12:69:26:8e:
         12:26:75:2a:dd:aa:33:27:66:ee:f9:6c:bb:c6:38:ee:ce:eb:
         5d:e6:00:75:75:c7:2c:2b:82:7d:27:2f:ec:54:6e:14:23:12:
         30:d6:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:39:22 2026 by rpki-client