Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/3137302e302e35302e302f32332d3332203d3e20323634393631.roa
File:                     3137302e302e35302e302f32332d3332203d3e20323634393631.roa (raw, json)
Hash identifier:          sDTcYpAnQUfnCOPPr3qwHpbFTVNpuD5eRwkAKqB5jOg=
Subject key identifier:   BE:B8:60:18:0A:57:B2:54:4F:29:B4:66:A8:2F:2F:6F:E0:CD:0D:52
Certificate issuer:       /CN=8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894
Certificate serial:       7F0AFC8F914B2666AC001922AFAB7F03F2346CDC
Authority key identifier: 8F:A9:5B:0C:04:FD:FD:78:CF:95:BB:E7:EE:78:6C:2D:3F:76:28:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/3137302e302e35302e302f32332d3332203d3e20323634393631.roa
Signing time:             Thu 11 Jun 2026 17:01:27 +0000
ROA not before:           Thu 11 Jun 2026 16:56:27 +0000
ROA not after:            Thu 10 Jun 2027 17:01:27 +0000
asID:                     264961
IP address blocks:        170.0.50.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.crl
                          rsync://rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0a:fc:8f:91:4b:26:66:ac:00:19:22:af:ab:7f:03:f2:34:6c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894
        Validity
            Not Before: Jun 11 16:56:27 2026 GMT
            Not After : Jun 10 17:01:27 2027 GMT
        Subject: CN=BEB860180A57B2544F29B466A82F2F6FE0CD0D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:24:6f:cf:8c:e3:b8:76:b1:f6:b4:cd:68:
                    b3:af:43:e9:36:1f:2e:b5:7c:e0:57:c6:fd:03:f0:
                    fc:49:89:94:65:be:26:2b:d6:a3:8f:92:00:27:59:
                    81:e4:a6:3b:69:27:aa:87:3d:4a:d4:82:30:f7:12:
                    d6:0f:70:99:91:35:3c:22:7b:44:cf:8c:0d:f5:2a:
                    8f:34:12:e3:fc:e9:fc:1d:51:77:ad:66:f1:c3:c6:
                    d5:cf:92:3a:b4:9c:a4:21:66:27:33:60:2f:d5:fa:
                    40:d6:63:f1:46:42:82:0e:9d:12:68:16:16:91:56:
                    15:c4:2e:35:1e:de:aa:de:6e:0c:0b:84:9b:9c:04:
                    35:02:5e:c8:9e:6b:29:fc:7c:81:89:ef:c2:2a:63:
                    6e:78:5b:4f:07:19:b2:96:de:9a:60:7d:5b:f1:5e:
                    3e:07:70:d9:aa:cb:e5:88:40:93:b3:b8:8e:16:1a:
                    f5:a5:4c:cc:6b:52:cd:0d:21:aa:c8:9f:a2:49:1b:
                    68:79:51:9d:1b:96:cb:a9:6d:96:69:27:ec:3f:d6:
                    a2:96:82:86:91:e8:eb:b6:19:db:5c:d3:a3:9c:ae:
                    cf:9d:cc:10:b9:07:b7:8a:7c:ff:5d:8e:3f:b3:ad:
                    77:13:e6:6e:ef:18:49:84:66:66:37:6d:d6:c1:70:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:60:18:0A:57:B2:54:4F:29:B4:66:A8:2F:2F:6F:E0:CD:0D:52
            X509v3 Authority Key Identifier:
                keyid:8F:A9:5B:0C:04:FD:FD:78:CF:95:BB:E7:EE:78:6C:2D:3F:76:28:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FA95B0C04FDFD78CF95BBE7EE786C2D3F762894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnenGaJ489d8CyrLkAX88eDfU1MamJW7kxvsKYuEX7qf/0/3137302e302e35302e302f32332d3332203d3e20323634393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:67:5d:17:a4:ff:4a:f1:e3:76:e0:e0:57:75:b1:8d:32:50:
         7f:37:04:19:b3:6a:9f:95:c1:b9:9d:75:bb:85:12:b4:a1:cd:
         e2:6e:09:2c:d4:a6:8e:0f:71:b2:dd:cd:cd:67:bb:4b:4b:22:
         9b:6e:cd:79:fc:3e:a8:98:b1:9a:c4:9a:db:1a:79:5d:18:a7:
         57:d1:65:f1:a3:c7:e4:8e:1b:d6:d4:5f:c4:4a:91:9d:4e:f9:
         f3:6b:5f:59:20:c6:e4:4d:35:27:23:17:99:f7:79:4c:83:a0:
         aa:e4:ff:86:7f:e0:41:91:58:28:df:a7:1f:af:ce:80:51:4a:
         50:37:59:5e:41:d8:74:ca:8a:6d:90:35:e7:ef:cf:2b:22:f2:
         ef:fa:bf:8e:e4:7e:a0:5b:19:61:3a:5a:aa:c0:a4:f7:63:db:
         87:cc:46:24:1b:2d:a3:7a:7b:20:fd:e2:e8:c2:97:51:01:e8:
         0d:b5:15:ad:e2:22:64:48:8a:5b:35:f5:1d:1d:a0:ae:a0:15:
         57:d8:aa:95:43:0b:18:2b:ab:6a:03:81:8a:74:cb:e7:b4:54:
         74:90:a2:f1:a5:e7:73:eb:f4:56:f9:1e:2c:cf:22:81:b7:05:
         51:39:2a:44:e9:df:4b:fd:b5:ef:48:78:20:f1:8e:8c:c6:3c:
         03:a9:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:25:17 2026 by rpki-client