Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
File:                     3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa (raw, json)
Hash identifier:          q3KdRRjeuqxv109kv4ORZSRfe10jRDWCBlg2Fs7gRxY=
Subject key identifier:   81:45:B2:9A:76:17:D1:31:7F:55:7F:B8:41:B9:E5:09:21:66:D2:A9
Certificate issuer:       /CN=6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4
Certificate serial:       7BF88736413157F9F3A059372DF81A0E551165F0
Authority key identifier: 6B:6D:3E:4E:4E:D9:3E:B1:38:9B:93:69:7F:6A:39:CA:CE:5F:57:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa
Signing time:             Fri 27 Feb 2026 20:40:35 +0000
ROA not before:           Fri 27 Feb 2026 20:35:35 +0000
ROA not after:            Fri 26 Feb 2027 20:40:35 +0000
asID:                     270838
IP address blocks:        189.39.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.crl
                          rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 08:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f8:87:36:41:31:57:f9:f3:a0:59:37:2d:f8:1a:0e:55:11:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4
        Validity
            Not Before: Feb 27 20:35:35 2026 GMT
            Not After : Feb 26 20:40:35 2027 GMT
        Subject: CN=8145B29A7617D1317F557FB841B9E5092166D2A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:eb:e0:d1:96:cc:05:e5:3e:49:cc:c0:bf:
                    49:c5:57:36:72:ba:6c:3d:f1:8d:ef:dd:7b:49:b9:
                    3f:0d:0c:3e:76:b5:3e:a4:24:f8:36:d5:ea:d1:0b:
                    39:28:72:81:be:c5:1a:7d:50:43:95:21:1e:c5:c3:
                    79:9f:c7:03:b1:86:ff:9b:93:6b:f6:dc:e1:ff:58:
                    71:c8:51:b1:43:96:89:8b:96:9e:08:bb:7b:9c:04:
                    5e:9a:a4:8b:e5:c5:93:e6:e7:c6:39:d5:20:b2:24:
                    82:45:39:bd:b1:c8:62:b7:7e:0e:cc:37:d8:9c:55:
                    7e:63:43:a3:2f:e6:32:c3:d9:a2:fb:75:40:51:eb:
                    46:21:93:94:00:c7:57:3a:e6:b4:40:06:89:4a:24:
                    45:fd:8a:b7:18:a0:2e:a3:f0:32:f7:1c:83:b8:c8:
                    9a:6c:62:d9:c2:6d:5f:4e:94:49:01:63:81:71:9c:
                    b1:c4:81:85:6d:b0:b2:6e:20:0b:1c:ad:a6:2e:ed:
                    16:c6:65:bc:42:68:c6:59:7c:c9:55:14:16:2a:97:
                    2c:2b:f3:d7:cf:6d:1f:0f:c8:d8:f3:f5:d1:3b:71:
                    2f:3d:a2:7a:f8:3d:b3:6f:2b:31:67:31:8c:33:90:
                    b8:32:25:95:84:e8:c4:06:03:c0:af:0d:b7:27:10:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:B2:9A:76:17:D1:31:7F:55:7F:B8:41:B9:E5:09:21:66:D2:A9
            X509v3 Authority Key Identifier:
                keyid:6B:6D:3E:4E:4E:D9:3E:B1:38:9B:93:69:7F:6A:39:CA:CE:5F:57:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B6D3E4E4ED93EB1389B93697F6A39CACE5F57F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3138392e33392e3138302e302f32322d3234203d3e20323730383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ba:82:b8:7d:68:ca:28:09:15:1d:ce:db:69:a5:9f:44:b2:
         ad:f1:05:75:b2:16:82:0b:e1:96:42:f3:6a:63:6d:fd:da:94:
         cf:8c:5f:b9:bb:3a:f3:50:b9:4e:74:50:c3:3e:c6:98:6a:12:
         22:95:ba:b2:a7:40:00:d6:ba:1c:00:48:90:00:00:ee:0d:09:
         49:1a:f3:7f:46:09:de:bb:4a:ab:c6:ff:a7:f2:1e:99:1e:08:
         92:fa:09:b9:40:ed:7f:8f:24:6a:2e:a9:b7:20:97:28:1d:66:
         bf:0a:8f:6a:da:33:bd:3c:84:86:5b:ef:33:19:77:7b:29:39:
         32:6e:ad:14:85:20:ae:e1:5e:6e:c9:a9:de:50:53:d8:2c:ab:
         86:8b:94:87:94:db:58:79:48:a7:0b:d6:d1:8d:ad:66:e6:23:
         4d:02:c6:cd:6f:71:25:f9:db:3a:ad:bc:b9:2d:e2:c1:cf:84:
         03:8f:44:f2:d1:5a:73:70:47:42:a5:07:10:51:b3:82:5e:ce:
         e1:8d:4b:e9:ed:95:f9:3a:c2:36:ee:cc:71:9d:27:8b:af:b4:
         0d:61:84:86:4c:98:a7:2b:71:e3:6c:a6:0f:07:cd:4a:d2:c5:
         93:19:fd:ac:90:21:96:51:a7:48:4d:ad:1d:59:79:0c:1a:b6:
         ca:fa:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:52:31 2026 by rpki-client