Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          Xjad3up7QMRPD6E736SEd5OYLz7lN25uOrg5yTY3kvY=
Subject key identifier:   4B:C6:95:E8:68:C4:31:F8:F4:74:5B:5A:09:5F:3A:FD:95:E3:AD:A8
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       217BE0E2424CCD6BADBA23079BEAF877E17B01D7
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Sat 13 Jun 2026 02:28:10 +0000
ROA not before:           Sat 13 Jun 2026 02:23:10 +0000
ROA not after:            Sat 12 Jun 2027 02:28:10 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7b:e0:e2:42:4c:cd:6b:ad:ba:23:07:9b:ea:f8:77:e1:7b:01:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Jun 13 02:23:10 2026 GMT
            Not After : Jun 12 02:28:10 2027 GMT
        Subject: CN=4BC695E868C431F8F4745B5A095F3AFD95E3ADA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:5c:b1:a3:40:28:e3:29:ed:15:e1:b7:bf:
                    91:32:6a:87:1c:52:84:5c:8e:be:88:fa:7c:b4:ed:
                    a2:7e:f8:ed:b3:63:31:32:2e:87:c5:1f:70:23:24:
                    c3:14:81:73:39:84:2d:f0:91:36:1c:01:10:7e:38:
                    b4:23:7c:87:26:8f:f0:1c:c5:17:73:a2:b5:19:c3:
                    33:b4:25:f7:43:4c:99:c3:b5:da:a8:6d:54:9f:04:
                    78:0a:29:be:73:74:d9:78:a8:d9:fa:3e:7d:f8:ee:
                    b7:88:32:02:0b:aa:f6:88:d0:7e:38:16:69:80:06:
                    22:94:93:a9:02:9d:a2:1e:a7:40:bd:c3:f8:49:3e:
                    61:60:28:8d:9c:60:68:6d:b4:5a:eb:c0:8c:d8:f8:
                    95:81:e2:e0:86:e3:9d:84:9a:a4:a0:06:95:3a:f0:
                    0b:6a:11:6b:99:52:3f:1f:2e:b4:b0:cd:e2:85:20:
                    bf:78:3a:76:9b:fb:26:fd:9d:07:37:df:a1:8e:02:
                    e7:2c:02:8f:c5:63:39:5c:cf:37:e3:27:b2:75:cd:
                    e5:55:b3:c4:d3:3a:6c:db:66:21:b8:46:00:e0:a9:
                    2f:8b:ea:1c:13:38:dc:27:87:8b:dc:5f:1e:9c:49:
                    ef:a8:20:a4:3c:3a:a1:0d:2b:fe:51:ef:19:5f:ea:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C6:95:E8:68:C4:31:F8:F4:74:5B:5A:09:5F:3A:FD:95:E3:AD:A8
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:1f:8f:dc:ae:7d:ae:2d:11:37:d9:30:ba:62:e2:f6:75:
         2a:e4:03:50:dd:da:eb:38:d0:4c:92:6a:ab:73:e5:f6:2d:82:
         33:44:4f:1e:59:97:86:15:18:50:c4:4c:16:ee:c2:f4:a8:e6:
         47:71:21:3b:4a:e9:29:66:66:6c:28:54:4a:4c:ec:e0:af:53:
         09:68:6f:eb:ff:fd:82:f6:76:c9:d1:8b:ad:e9:84:1b:61:39:
         72:ce:0e:52:86:e3:52:c6:52:ac:a6:17:21:39:cd:11:ba:a9:
         c4:72:c0:c7:dd:b3:57:d6:55:87:41:b2:c6:16:10:83:d8:ef:
         a8:f6:af:75:8f:ec:b6:e8:5e:30:25:9f:16:8d:f6:95:59:ee:
         b6:64:fe:96:44:b6:fd:fb:b7:70:bc:57:28:5b:00:54:f8:71:
         3c:8e:ab:9d:b0:66:11:9e:cc:b2:fb:f4:c7:1f:f4:5a:73:25:
         a8:4a:5b:ed:09:4d:d9:67:42:9d:9c:ed:94:79:77:9a:b4:ad:
         90:a7:dc:2e:a4:b2:6c:90:39:46:5e:ab:68:c4:34:05:2b:c7:
         1e:cf:b4:cf:47:9a:25:85:6c:fc:ab:25:f8:b2:a2:73:74:8e:
         e9:8a:0e:16:20:a3:6d:48:c3:02:b2:1b:4b:35:bd:c6:df:39:
         31:43:fd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:58 2026 by rpki-client