Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa
File:                     3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa (raw, json)
Hash identifier:          tcmhYzOAg/xYvKxFE5iGBc1Boa0S/mW10MXld65xNvw=
Subject key identifier:   76:25:6A:2A:99:CF:8A:59:07:A4:20:64:E9:3E:56:00:57:F1:80:77
Certificate issuer:       /CN=33E54093EA95B8CA5B8492157E6A7A62F1D844C1
Certificate serial:       6894D8B8778B3016C9E80B9466E194E7EB49A6D3
Authority key identifier: 33:E5:40:93:EA:95:B8:CA:5B:84:92:15:7E:6A:7A:62:F1:D8:44:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa
Signing time:             Mon 01 Jun 2026 18:51:55 +0000
ROA not before:           Mon 01 Jun 2026 18:46:55 +0000
ROA not after:            Mon 31 May 2027 18:51:55 +0000
asID:                     265106
IP address blocks:        170.254.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:d8:b8:77:8b:30:16:c9:e8:0b:94:66:e1:94:e7:eb:49:a6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E54093EA95B8CA5B8492157E6A7A62F1D844C1
        Validity
            Not Before: Jun  1 18:46:55 2026 GMT
            Not After : May 31 18:51:55 2027 GMT
        Subject: CN=76256A2A99CF8A5907A42064E93E560057F18077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:b0:09:d2:74:02:5d:b0:97:58:0e:0e:54:
                    a5:ab:1d:2e:74:0c:00:0c:42:c9:cc:86:82:58:0f:
                    f8:f1:99:3e:36:37:f8:ed:5a:b0:b5:65:1f:e1:d4:
                    45:46:04:f1:c5:c0:d9:20:dd:87:4b:77:af:d7:6d:
                    a0:3a:5e:24:ab:62:55:07:89:50:f3:dc:61:cb:7e:
                    f0:10:dc:fd:64:e1:a8:bd:c5:a2:a7:df:3e:d0:f7:
                    8f:82:1c:5b:f1:51:65:23:08:6d:38:3a:fe:43:2f:
                    46:90:4d:84:9b:a5:cf:63:0d:af:4a:ce:1f:ad:ad:
                    f2:d6:b8:33:db:1b:35:5c:d4:98:c0:87:9e:2d:40:
                    34:47:1b:d8:71:37:1f:d1:ed:7f:07:31:ec:ac:80:
                    f5:e8:98:b9:bb:90:fb:e0:f5:3f:9d:f7:23:1d:e8:
                    9c:b2:4a:d2:fa:22:b2:e3:f5:7e:72:cc:17:d6:2d:
                    b6:87:bf:0e:9d:38:76:25:5b:bb:a4:6b:87:20:6f:
                    2f:e8:67:a1:eb:e2:82:66:f9:34:57:82:67:78:52:
                    26:10:45:46:47:79:ef:70:7f:ee:de:fb:65:e1:0f:
                    ee:0c:e4:c3:bf:87:29:8d:06:92:f7:4d:24:58:78:
                    e9:13:f4:3e:00:fc:28:0b:46:0b:71:d9:a0:d2:53:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:25:6A:2A:99:CF:8A:59:07:A4:20:64:E9:3E:56:00:57:F1:80:77
            X509v3 Authority Key Identifier:
                keyid:33:E5:40:93:EA:95:B8:CA:5B:84:92:15:7E:6A:7A:62:F1:D8:44:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E54093EA95B8CA5B8492157E6A7A62F1D844C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/3137302e3235342e3133322e302f32322d3232203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:90:09:1a:ef:38:4f:f6:69:f1:c0:09:2f:01:fa:65:38:93:
         35:66:88:bb:3e:90:5b:dd:fc:b4:0d:f5:d9:80:0f:48:e3:58:
         2e:81:bd:91:ea:dd:3a:66:dc:e6:2c:e9:54:97:f9:2e:79:b8:
         81:aa:16:34:75:9a:b7:18:c0:78:de:6f:b7:91:5e:68:29:fc:
         fd:f4:4b:72:72:53:15:ae:59:21:e9:7e:7d:dd:f0:ea:ea:6a:
         29:aa:a8:75:6d:ed:e1:ee:d6:be:b3:39:84:f5:43:de:52:d6:
         bf:82:5a:b3:a3:d8:7b:cf:e3:14:14:bd:35:f0:50:ef:03:f0:
         3c:68:c3:d9:f4:35:5d:bb:d8:f3:82:29:eb:fb:cf:ec:5d:32:
         a4:6a:d8:05:df:d6:4d:6b:c2:56:1f:01:4a:dd:a3:ac:c8:59:
         61:70:ce:14:f1:0d:d3:8a:83:ab:1f:cb:57:ae:66:ed:f1:36:
         dc:2e:66:6a:d7:db:84:20:9e:a8:82:86:ca:bd:68:f4:00:e7:
         f3:60:41:f2:cf:bf:d2:e8:f7:bf:2b:2a:dc:89:eb:be:23:44:
         45:1c:0b:f6:d1:54:df:c4:5e:d6:bc:80:10:b0:c3:82:74:22:
         c6:32:e4:e3:73:2e:6a:d6:3f:d0:d2:d6:fb:b0:66:c2:1c:03:
         80:92:b7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:15:50 2026 by rpki-client