Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          kUlPxi5IlJeibGCcIkEJwG19d9LE87DgGD3lLaOgvD8=
Subject key identifier:   2F:8F:77:D7:E6:94:D1:52:ED:E8:C3:57:69:60:26:4C:48:EF:BC:B3
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       555CE37060188648519C3D12264C16B1B9E354C7
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Sat 13 Jun 2026 02:28:06 +0000
ROA not before:           Sat 13 Jun 2026 02:23:06 +0000
ROA not after:            Sat 12 Jun 2027 02:28:06 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5c:e3:70:60:18:86:48:51:9c:3d:12:26:4c:16:b1:b9:e3:54:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Jun 13 02:23:06 2026 GMT
            Not After : Jun 12 02:28:06 2027 GMT
        Subject: CN=2F8F77D7E694D152EDE8C3576960264C48EFBCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:74:ff:b3:14:f5:ff:dc:38:a0:56:46:2a:
                    c2:37:b8:89:28:f4:28:f9:f3:65:b3:2b:ac:78:3a:
                    ab:31:8c:d3:8d:cc:bc:6c:2a:a0:8b:c0:1d:1c:58:
                    8e:7f:3c:17:b0:e9:f6:e6:03:f7:48:3b:99:1a:be:
                    8c:da:26:9e:fb:56:b6:eb:b5:32:a3:05:14:4e:67:
                    11:67:19:5d:26:28:64:26:7d:95:0f:5d:10:9b:df:
                    26:63:25:e9:e3:d3:55:f7:f7:59:45:6f:a0:f1:52:
                    02:72:0a:90:4d:15:9b:1d:e9:ac:5c:f5:b6:67:31:
                    09:ca:d0:9d:1a:ee:0f:d9:66:a0:5c:4f:d5:97:c1:
                    62:cd:81:f6:9b:a8:4f:24:44:ed:11:d8:77:d6:7f:
                    c1:4a:c5:24:eb:da:6c:92:34:ec:54:d1:fa:1f:46:
                    06:b8:94:a1:b9:b0:10:41:d3:3d:55:d0:49:ee:91:
                    23:3a:a3:dc:6f:37:cc:7c:0f:44:83:2b:ff:fe:0f:
                    40:7c:b2:a3:97:ad:47:14:0a:7d:86:07:23:0a:aa:
                    32:1a:4d:a1:ca:e4:69:6d:b7:14:ec:bd:1f:6f:cc:
                    6d:29:c8:1f:4a:7b:f3:7c:54:7c:20:13:9b:20:12:
                    0a:28:53:2e:7f:c5:c8:f5:e1:b0:04:cc:69:d4:e9:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:77:D7:E6:94:D1:52:ED:E8:C3:57:69:60:26:4C:48:EF:BC:B3
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:98:3f:4a:e2:7b:80:88:d0:1e:81:41:b5:b7:d3:1d:c0:b4:
         8c:4e:b3:4f:18:f5:25:c9:52:27:b7:88:24:be:5f:2c:2f:27:
         01:f8:3f:4f:56:0d:f8:8b:cc:02:00:ca:1f:91:be:a2:4c:a3:
         c9:21:fd:7b:8f:76:49:01:33:4b:4a:41:37:a2:6a:72:67:22:
         66:aa:92:e3:db:48:db:64:ed:a8:0e:04:bc:07:f6:d6:af:07:
         34:dd:19:d9:9a:8c:8a:b9:fb:86:ec:34:e3:de:62:76:79:12:
         42:0e:98:b0:6f:b3:95:0c:9f:1c:f7:28:6f:a0:50:89:eb:3a:
         45:ea:60:58:40:ce:35:72:b2:47:c8:f8:0c:79:68:ee:d6:8d:
         f0:45:bf:e0:8e:d9:ce:35:8e:a3:b5:8c:70:41:18:27:b2:1f:
         d6:b5:65:d9:5f:e1:2f:b6:30:ac:ae:fa:f9:30:d3:9f:a3:95:
         4e:f9:75:4b:63:24:4c:2a:51:3b:59:b5:2c:f2:7f:74:a8:a9:
         dc:3b:87:e7:33:b3:ed:ba:18:da:60:f4:43:68:36:d7:83:0a:
         51:24:7e:c5:f7:1d:ec:7f:1c:b3:72:cd:a8:04:8d:a8:5c:49:
         1e:77:d1:39:63:9a:fe:9f:1d:be:1f:cd:25:fa:e3:b3:d7:69:
         df:84:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:56 2026 by rpki-client