Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/3138312e3139312e3132382e302f32322d3332203d3e20323636303131.roa
File:                     3138312e3139312e3132382e302f32322d3332203d3e20323636303131.roa (raw, json)
Hash identifier:          fwYFU+yeDnF3CZlXhhZvS39mo80Jep7PP45P40J6uAE=
Subject key identifier:   0B:67:5D:44:6A:83:7E:25:BA:0F:10:31:D3:1E:90:85:9C:70:25:6F
Certificate issuer:       /CN=1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B
Certificate serial:       4E524E77DB6287587A1EFE38CE267B5DFBD62FA4
Authority key identifier: 1D:08:CC:0C:CB:A9:98:F4:69:EB:8A:5D:5E:6F:01:AC:DF:BB:5A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/3138312e3139312e3132382e302f32322d3332203d3e20323636303131.roa
Signing time:             Tue 02 Jun 2026 12:05:26 +0000
ROA not before:           Tue 02 Jun 2026 12:00:26 +0000
ROA not after:            Tue 01 Jun 2027 12:05:26 +0000
asID:                     266011
IP address blocks:        181.191.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.crl
                          rsync://rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:52:4e:77:db:62:87:58:7a:1e:fe:38:ce:26:7b:5d:fb:d6:2f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B
        Validity
            Not Before: Jun  2 12:00:26 2026 GMT
            Not After : Jun  1 12:05:26 2027 GMT
        Subject: CN=0B675D446A837E25BA0F1031D31E90859C70256F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:57:ea:a9:17:8c:58:5a:5e:17:6f:a4:d9:
                    70:29:f5:07:a6:32:36:46:39:74:67:ce:e6:5c:fe:
                    75:66:78:3a:48:05:f5:6b:a1:f9:c1:ca:44:df:ab:
                    7f:7b:bd:83:70:b3:d7:90:c4:f1:34:e1:f5:e2:f5:
                    47:d5:ca:f4:13:c8:07:00:08:73:88:75:ea:d4:ef:
                    ac:db:28:88:0f:34:b3:b6:85:4f:ba:40:7e:ee:4e:
                    2d:c2:14:13:d2:7c:4b:54:36:c6:42:a5:a8:ef:84:
                    f5:e5:c0:c4:a5:f9:37:a2:c6:41:c9:d1:d3:9a:ab:
                    e7:3d:8d:d1:fb:b0:96:f7:eb:e1:f0:f2:2f:cd:dd:
                    48:5f:34:83:9b:c5:1d:a4:d5:c5:a4:a7:89:02:6d:
                    5d:ff:a5:11:4c:51:e4:54:de:d6:05:3b:20:1a:ff:
                    2d:b4:b5:5a:ce:2c:3c:0b:12:24:09:50:da:97:3c:
                    58:b2:42:b4:c8:fc:9d:fa:71:49:2f:e4:d5:f5:ba:
                    d3:1d:ab:15:8d:1d:59:2f:a2:bb:73:8a:cf:02:30:
                    e2:b1:86:0e:79:af:f0:25:30:d8:45:d3:f4:25:2c:
                    63:cf:51:5b:e2:11:71:dd:36:92:1d:9f:59:d6:54:
                    54:a9:b3:1e:5f:38:3f:04:73:d3:d5:cf:3e:89:14:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:5D:44:6A:83:7E:25:BA:0F:10:31:D3:1E:90:85:9C:70:25:6F
            X509v3 Authority Key Identifier:
                keyid:1D:08:CC:0C:CB:A9:98:F4:69:EB:8A:5D:5E:6F:01:AC:DF:BB:5A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D08CC0CCBA998F469EB8A5D5E6F01ACDFBB5A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6oxVNoxVL3TfxBANixrLq2wfcEHzRhd4EVNq1EM45osy/0/3138312e3139312e3132382e302f32322d3332203d3e20323636303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:32:c2:e5:36:f7:ea:03:49:22:9e:2d:ae:2d:ef:fb:ef:
         ba:8b:86:93:93:af:68:ea:fd:ee:a2:89:39:53:31:d6:c9:14:
         28:3d:c4:87:03:c5:83:aa:61:b2:4c:e4:31:06:60:8b:58:11:
         18:48:e7:d5:e2:4d:e0:f8:81:84:ef:43:c6:1e:18:46:5b:e8:
         46:ab:29:0a:2a:de:85:d8:08:37:96:c1:fa:64:93:94:93:ca:
         69:66:80:bd:c9:c4:18:6a:c4:49:31:9e:38:d2:97:bc:85:ba:
         7f:06:54:d1:aa:c2:33:85:23:f6:93:0f:1a:3c:a8:90:8a:99:
         73:37:5d:6a:e3:9d:b9:4b:4a:39:0b:b7:cb:d5:b0:2d:e8:dc:
         c3:b2:73:ea:2f:4c:20:de:11:dc:83:12:80:a1:ed:19:6b:aa:
         d9:cb:ea:34:d3:6a:89:03:20:42:ea:e8:3c:d8:51:b2:c4:85:
         9e:28:98:66:a0:e1:39:91:6c:12:57:fa:e1:6f:f0:f7:08:93:
         3e:e7:a8:e0:6b:e7:00:d1:18:a0:51:55:24:17:be:a2:0b:55:
         74:42:dd:90:11:69:c2:19:c0:82:79:47:3a:7f:7d:8b:6c:61:
         e4:25:c7:d5:34:9d:66:7c:ee:03:30:45:8c:70:a7:0d:f9:99:
         68:37:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:49 2026 by rpki-client