Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32302d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          CcDf4Lw3rUE7tYZOKusQuZOmJMU+kcGSjZaf+mNMVcY=
Subject key identifier:   20:5A:60:06:C4:9A:9A:88:21:41:BE:28:04:35:FC:A7:91:6D:8F:83
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       6A6030DF778D50767CD689BF50E5D257AB5CBFE0
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa
Signing time:             Mon 08 Jun 2026 12:46:42 +0000
ROA not before:           Mon 08 Jun 2026 12:41:42 +0000
ROA not after:            Mon 07 Jun 2027 12:46:42 +0000
asID:                     269073
IP address blocks:        187.17.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:60:30:df:77:8d:50:76:7c:d6:89:bf:50:e5:d2:57:ab:5c:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Jun  8 12:41:42 2026 GMT
            Not After : Jun  7 12:46:42 2027 GMT
        Subject: CN=205A6006C49A9A882141BE280435FCA7916D8F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:03:26:d0:eb:4f:95:b6:f4:16:b0:49:5f:
                    a8:56:39:33:2a:bd:14:34:a0:b8:8e:e2:8c:28:66:
                    0a:b6:6d:1b:4b:6a:d4:61:2f:d1:e7:95:c6:00:32:
                    67:bd:e3:28:45:56:cd:49:27:4b:60:07:2d:4d:00:
                    15:09:13:5a:93:63:b6:69:77:7b:ad:a6:3d:e4:6a:
                    7f:e0:74:17:e5:e3:07:21:db:3b:13:15:e1:15:73:
                    3d:12:e2:b8:01:7d:86:6c:87:ca:f7:f0:87:9c:22:
                    b4:3e:02:75:60:ab:58:5e:d1:c5:f1:db:92:66:ad:
                    ce:a2:c5:9c:c8:20:85:51:f4:c0:25:fc:b8:b1:8a:
                    6a:f0:6d:f3:37:d7:9b:c3:f4:78:13:23:ec:a2:7a:
                    22:10:50:a9:51:37:d3:ee:bf:2f:4f:8e:c0:fa:f9:
                    a0:12:a2:69:b4:2e:be:eb:0f:08:74:f4:57:b1:49:
                    fd:48:33:22:60:8c:50:85:07:9a:d7:e3:a1:73:20:
                    4a:46:d1:5f:21:49:38:7c:f8:70:2a:bc:c6:b5:27:
                    9f:c0:44:e6:e5:bb:2c:05:df:19:d4:2b:9e:1c:8e:
                    eb:cc:45:c3:f6:fb:1a:9d:b1:45:ff:7e:ca:f0:ec:
                    9a:92:1d:b7:b8:63:25:b4:83:06:6f:78:7a:af:53:
                    45:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:60:06:C4:9A:9A:88:21:41:BE:28:04:35:FC:A7:91:6D:8F:83
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:02:fd:c5:ab:62:69:be:0c:57:86:11:e6:f8:3e:7e:bf:c7:
         4f:30:2a:f8:0d:0c:39:48:a8:92:54:5d:f4:df:ad:ba:b7:54:
         21:65:e0:ec:a6:f8:72:1a:5e:de:62:70:f3:11:75:50:42:bc:
         78:d9:02:dc:22:02:30:52:8f:34:b3:cf:28:ee:63:0b:4a:13:
         cf:43:84:34:f7:df:67:f2:e1:22:9b:0b:4b:7e:93:11:22:1c:
         5b:86:da:94:18:14:a4:65:e4:23:6a:9c:cd:07:31:e3:53:c4:
         24:33:41:69:63:37:f4:5b:e4:cb:25:58:11:67:64:8a:ec:9d:
         a1:cf:5e:aa:40:fd:63:7a:c3:29:84:c0:82:e3:72:15:74:bd:
         93:b5:e1:09:e5:58:db:f7:59:d7:4f:59:8a:aa:a5:e3:06:f7:
         4c:59:7c:36:57:d6:bb:69:7c:79:93:f1:1f:92:da:a3:22:c5:
         15:bb:56:1d:7c:d6:a1:c1:bb:88:52:02:8d:61:17:50:0b:de:
         ee:f9:a5:c7:55:3d:76:1f:31:cc:08:a9:bf:2c:36:b2:cb:95:
         70:84:10:3f:d8:22:cd:14:ee:29:fd:5c:75:87:80:2a:2f:0b:
         2e:35:f9:04:6a:bb:62:8f:31:99:16:7b:46:cf:36:27:b5:6d:
         02:8a:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:49 2026 by rpki-client