Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa
File:                     3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa (raw, json)
Hash identifier:          4RBR0JujH5GnhpDETijgIVHaln3toQwtpgfZ7Q0kc1Y=
Subject key identifier:   4C:36:AC:9A:9F:BC:1E:0A:22:73:71:0B:1B:48:56:DF:FC:05:F3:1A
Certificate issuer:       /CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
Certificate serial:       49FD31E99D61AE426FE695C999EBCBAF46354AAC
Authority key identifier: 6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa
Signing time:             Wed 27 May 2026 20:29:07 +0000
ROA not before:           Wed 27 May 2026 20:24:07 +0000
ROA not after:            Wed 26 May 2027 20:29:07 +0000
asID:                     266326
IP address blocks:        170.238.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl
                          rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fd:31:e9:9d:61:ae:42:6f:e6:95:c9:99:eb:cb:af:46:35:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79
        Validity
            Not Before: May 27 20:24:07 2026 GMT
            Not After : May 26 20:29:07 2027 GMT
        Subject: CN=4C36AC9A9FBC1E0A2273710B1B4856DFFC05F31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:97:a7:55:4c:29:ad:22:6c:d1:12:33:54:
                    5e:ba:a5:63:c8:fc:9c:1c:8d:e6:48:6a:fa:3a:56:
                    c6:76:ba:8f:47:30:b7:f1:23:b7:52:4e:54:8c:8e:
                    3e:a8:d2:d7:bf:06:94:bd:64:9e:13:45:91:28:b2:
                    11:a1:50:71:09:cc:9b:d8:85:d6:5f:96:15:4f:a6:
                    cf:69:7d:22:5f:a4:df:0a:7c:20:a0:77:c9:b9:6a:
                    a8:ea:e7:e8:8e:50:6c:bb:e7:10:56:f4:b9:d4:e7:
                    da:f6:8c:2b:f2:61:7b:fd:53:55:ef:37:85:31:28:
                    4a:2a:f9:6a:98:02:88:4e:67:d1:67:86:51:eb:1f:
                    47:5c:3a:9c:56:81:e8:6b:b6:28:c2:9f:33:f7:19:
                    dd:c0:e5:b2:0d:44:de:82:ec:a2:a5:83:f8:1a:85:
                    d2:df:dd:4c:ab:cb:3b:56:37:6f:17:1f:1c:bf:9c:
                    ff:57:64:72:1d:bf:70:4d:78:52:bb:20:4d:e4:93:
                    96:d9:1f:6c:54:e3:47:ab:01:e7:0b:d0:95:c9:46:
                    d1:fd:8f:5f:3e:e4:08:47:54:d0:ef:cc:29:13:0a:
                    22:85:d7:18:c2:47:a0:a7:44:b1:21:14:00:42:f3:
                    6c:89:0a:ee:ea:fd:fa:e5:d1:62:e4:98:8d:98:f2:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:36:AC:9A:9F:BC:1E:0A:22:73:71:0B:1B:48:56:DF:FC:05:F3:1A
            X509v3 Authority Key Identifier:
                keyid:6B:93:BE:1C:18:54:2A:48:D7:C4:E3:1D:2E:73:BE:21:64:AF:6C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B93BE1C18542A48D7C4E31D2E73BE2164AF6C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rW5aBWEKZxELFMengSYb97megU7YLpAkmCdp9rvCrnj/0/3137302e3233382e3135322e302f32322d3234203d3e20323636333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:0f:ec:3f:33:39:cd:5d:01:fd:ef:29:df:95:be:72:36:c1:
         a8:9e:6c:27:a0:39:ed:c9:33:4e:f7:04:43:7f:28:96:d7:15:
         f4:9c:9e:50:de:72:c1:13:4d:29:12:1d:87:f8:8f:ff:9a:d5:
         4f:9f:6b:3c:07:d5:4e:4a:af:85:eb:3b:45:7a:fd:8c:7d:d9:
         e8:1a:09:2a:6d:cc:c2:45:c9:4b:e3:37:8c:60:d2:4a:21:54:
         4f:42:07:83:ea:85:94:3a:bc:2f:c2:45:26:90:52:1b:fa:d9:
         f1:94:17:7e:f6:a8:c4:92:65:95:a2:75:9f:b4:e7:53:07:45:
         14:59:e3:3d:7b:11:24:16:b6:5a:75:a5:7f:bd:95:97:51:31:
         d3:de:f2:0e:6b:1d:b2:7e:b3:ae:fd:6e:44:57:54:c9:cf:e4:
         a3:b0:4a:cb:15:15:04:45:bd:45:26:c4:57:f3:cc:17:73:fb:
         66:7b:5a:c2:2f:8b:65:b4:fc:ce:a1:84:0b:64:f3:3c:bb:75:
         28:2f:51:e4:10:67:26:2e:86:f1:6f:38:a9:8c:a4:e1:ff:e9:
         81:b0:6e:bf:55:ec:59:49:37:b4:ad:ff:8b:c2:28:8d:6a:ce:
         5d:50:02:ba:27:33:1c:34:69:08:ae:99:2b:69:29:db:a7:f7:
         d9:a1:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:51:03 2026 by rpki-client