Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32352e302f32342d3234203d3e20323633353436.roa
File:                     3139312e362e32352e302f32342d3234203d3e20323633353436.roa (raw, json)
Hash identifier:          Ebbt0MfPG47v9DDiur6U+p/wUPAcfQxiTzbfWisXprM=
Subject key identifier:   8C:CF:86:84:E2:02:FB:2C:05:E3:93:86:53:E4:C1:AE:73:E7:97:87
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       79E32562768A64CEE490D425BD3112E573A0FBD5
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32352e302f32342d3234203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:03 +0000
ROA not before:           Thu 11 Jun 2026 18:03:03 +0000
ROA not after:            Thu 10 Jun 2027 18:08:03 +0000
asID:                     263546
IP address blocks:        191.6.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e3:25:62:76:8a:64:ce:e4:90:d4:25:bd:31:12:e5:73:a0:fb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:03 2026 GMT
            Not After : Jun 10 18:08:03 2027 GMT
        Subject: CN=8CCF8684E202FB2C05E3938653E4C1AE73E79787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:8d:88:e9:f8:c4:00:9b:48:f5:f0:90:91:
                    90:f0:84:9d:bc:d9:63:41:fd:39:67:30:ae:34:41:
                    3d:46:c3:7f:21:f7:8f:4e:88:bd:be:46:7a:10:68:
                    46:b8:7e:07:ca:f3:5f:c3:47:3b:17:f3:9c:f5:69:
                    e4:ea:dd:de:69:eb:fa:a6:dc:e3:8f:87:cf:be:27:
                    6e:a1:68:c3:51:52:ac:f6:8b:70:67:d9:a4:3a:43:
                    2f:55:94:81:5b:e7:50:f4:8f:30:eb:df:df:91:b5:
                    1d:49:11:8f:67:3a:2a:1a:b0:90:76:39:1a:fe:ea:
                    70:c5:39:bd:b3:38:da:33:ba:98:1a:26:c2:6a:86:
                    40:b5:49:43:4d:94:c2:6b:51:7a:4b:b2:1d:ab:cf:
                    40:7a:3f:bd:16:53:c2:4d:5c:6e:d8:6b:3a:8e:21:
                    5d:66:6e:83:93:98:73:36:33:e5:19:1a:09:72:41:
                    3d:5a:d5:71:6d:5f:58:ee:7a:75:a5:ea:a2:32:02:
                    97:e1:0e:55:db:96:08:8b:88:f6:8a:f7:3d:e2:21:
                    b8:40:25:0d:76:5e:97:f9:e1:6f:e4:38:74:62:26:
                    50:63:c5:ec:80:1b:38:4a:de:33:5e:7d:48:a1:a4:
                    d7:e0:f5:65:c0:64:31:36:1d:05:ff:4e:e2:3c:72:
                    91:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:86:84:E2:02:FB:2C:05:E3:93:86:53:E4:C1:AE:73:E7:97:87
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32352e302f32342d3234203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:92:5f:e9:5c:c0:33:ac:9b:56:a2:50:27:0e:08:be:81:3d:
         76:34:d7:b3:41:d8:65:12:98:b9:e1:de:b4:e8:1e:52:64:09:
         13:fc:8d:49:ed:cc:77:2d:91:47:18:a8:02:1c:86:58:91:f5:
         c6:3c:e5:be:35:d8:7e:62:ac:81:a3:90:be:e3:ef:c6:82:43:
         38:2c:a6:d4:1b:2c:51:e4:1d:52:06:4b:6b:05:7e:4a:ad:ba:
         85:00:a8:f4:36:ab:7a:65:69:9d:6e:9c:de:32:cc:7d:48:46:
         35:bc:92:fe:86:7d:ad:c9:d6:4b:92:29:19:23:b9:67:ec:0b:
         6a:cf:dc:fe:9d:6f:55:7e:19:b3:4a:9f:78:d0:fb:55:65:de:
         3d:10:69:0a:b5:6e:17:3b:ef:c5:67:3c:c3:a7:6b:ce:08:ae:
         d4:04:3f:37:25:1b:db:b7:87:61:e0:46:71:a3:95:d4:bf:2c:
         80:76:cd:66:9c:bb:a2:ad:b8:22:20:1e:cc:18:c1:d4:1d:64:
         24:a1:60:ab:6c:7a:c4:9c:b6:45:e8:d8:00:5c:1c:88:00:c0:
         47:68:21:ac:3f:f8:65:6d:92:69:a7:50:76:fa:09:2c:9b:27:
         89:98:59:8b:31:95:1c:0e:68:6e:6a:cf:4e:7c:04:80:90:aa:
         05:50:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:54 2026 by rpki-client