Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32362e302f32342d3234203d3e20323633353436.roa
File:                     3139312e362e32362e302f32342d3234203d3e20323633353436.roa (raw, json)
Hash identifier:          WpavfaVHVW3jtpO5lyKokqUXvtYmXBalcnAZisrghf4=
Subject key identifier:   62:A9:91:9F:C6:07:CB:AF:D8:4A:31:27:A9:48:6F:80:76:A6:5D:E4
Certificate issuer:       /CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
Certificate serial:       40C8DF77486E95E6918BE019E352E18E8A021D23
Authority key identifier: FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32362e302f32342d3234203d3e20323633353436.roa
Signing time:             Thu 11 Jun 2026 18:08:03 +0000
ROA not before:           Thu 11 Jun 2026 18:03:03 +0000
ROA not after:            Thu 10 Jun 2027 18:08:03 +0000
asID:                     263546
IP address blocks:        191.6.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl
                          rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c8:df:77:48:6e:95:e6:91:8b:e0:19:e3:52:e1:8e:8a:02:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC
        Validity
            Not Before: Jun 11 18:03:03 2026 GMT
            Not After : Jun 10 18:08:03 2027 GMT
        Subject: CN=62A9919FC607CBAFD84A3127A9486F8076A65DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:43:2d:9b:0e:8c:4d:77:2f:4d:ee:4c:30:
                    09:ac:25:e0:df:36:f2:47:56:0e:52:32:f0:4f:f7:
                    ab:3b:8d:cf:85:ae:23:71:12:48:4f:a6:db:a8:86:
                    e6:d3:51:4b:84:30:fa:ab:d3:79:6a:ed:e5:6a:ef:
                    aa:c2:38:16:28:2e:9a:90:ac:4a:f9:cc:c1:fe:9a:
                    9f:a5:b8:18:cf:a3:ed:b9:d8:ee:27:f8:ab:d8:9a:
                    7f:10:a0:c1:16:53:7a:6a:6f:a1:04:74:b5:38:71:
                    93:a4:53:2b:b9:5a:0f:9a:4b:6b:93:96:b7:0e:69:
                    24:59:8e:c8:20:f1:18:7b:ac:bd:82:7f:8f:f1:89:
                    dc:2d:db:12:c1:da:46:3f:9c:0e:70:46:20:fd:35:
                    cf:d4:a6:76:4d:7c:d1:c6:aa:ed:c6:bd:22:88:cd:
                    7b:f0:bb:d8:a6:94:4e:56:14:fa:52:1a:06:cd:c0:
                    07:cd:b9:b4:ac:88:b1:96:ff:2c:13:e9:cc:ee:68:
                    f6:e4:e0:ca:56:95:3f:f0:b5:47:7e:ce:fa:20:ce:
                    9d:9a:de:14:49:60:ab:73:37:cd:d1:3a:2f:09:bc:
                    86:52:3f:a5:c1:30:f1:fd:1a:c4:94:24:a4:b1:f6:
                    44:2c:93:bb:47:6b:a9:28:3e:65:ee:39:0f:67:d5:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A9:91:9F:C6:07:CB:AF:D8:4A:31:27:A9:48:6F:80:76:A6:5D:E4
            X509v3 Authority Key Identifier:
                keyid:FF:4F:CD:2B:37:C1:47:86:21:14:DB:AB:CC:A0:0F:95:D6:BC:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4FCD2B37C147862114DBABCCA00F95D6BCCDFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7gSyaDJnPxXSJ3fPAZ96uYHcFtaKAHmSYzNTtSWCi1NS/0/3139312e362e32362e302f32342d3234203d3e20323633353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:96:30:e2:4c:0e:49:da:1c:92:80:34:00:01:00:2e:0f:
         30:8d:11:36:38:42:9a:f8:20:7f:61:f1:08:1f:1f:c9:5c:27:
         e6:24:2c:63:13:5e:fe:51:dd:4e:cb:90:8a:67:3c:80:e2:15:
         cf:04:a2:c8:96:a2:6f:55:c7:ff:ca:5b:06:a0:7a:dc:69:d1:
         ff:ab:68:9e:79:3b:b1:38:c7:a0:54:9a:af:1e:cf:1f:ae:81:
         77:18:38:d1:0a:1d:50:51:e9:00:59:8c:5d:7f:9f:97:5f:0f:
         b6:59:d6:ea:3f:d4:23:38:b3:b8:a1:10:31:00:bb:34:7f:b0:
         30:de:53:bd:38:44:52:74:e4:75:48:99:26:c8:6a:e4:64:af:
         eb:06:e9:af:03:3c:94:a3:68:40:48:cb:b3:0a:0d:99:e5:d1:
         ca:79:f9:9a:7e:47:a6:02:01:1f:f5:57:3a:d6:67:a4:b9:96:
         69:62:fb:aa:6c:ff:c4:34:0d:0d:3c:e0:c7:53:02:62:ac:91:
         43:ff:42:24:9c:d5:24:98:fd:a2:f9:6b:b4:8c:23:38:d5:e3:
         c9:0f:5a:ef:4f:02:87:ec:0e:c1:87:49:e8:16:5c:8f:44:c2:
         91:39:13:e2:1f:40:0f:42:fe:40:b3:3a:4b:ba:21:75:08:e5:
         1f:21:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:48:56 2026 by rpki-client