Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32342d3234203d3e20323634343131.roa
File:                     3133382e3230342e3132342e302f32342d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          +L7DBZDGWvlUSC3jxi/bceHUOaBX0D7d+gzH1KSM1Ow=
Subject key identifier:   7B:5D:6E:0E:70:3E:C2:1D:5C:27:CA:CC:0A:88:F0:E3:E1:0B:EB:78
Certificate issuer:       /CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Certificate serial:       68352B116E21382F3FD03B9B8AF4E54506DD5EAE
Authority key identifier: 0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32342d3234203d3e20323634343131.roa
Signing time:             Tue 09 Jun 2026 11:48:43 +0000
ROA not before:           Tue 09 Jun 2026 11:43:43 +0000
ROA not after:            Tue 08 Jun 2027 11:48:43 +0000
asID:                     264411
IP address blocks:        138.204.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:35:2b:11:6e:21:38:2f:3f:d0:3b:9b:8a:f4:e5:45:06:dd:5e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
        Validity
            Not Before: Jun  9 11:43:43 2026 GMT
            Not After : Jun  8 11:48:43 2027 GMT
        Subject: CN=7B5D6E0E703EC21D5C27CACC0A88F0E3E10BEB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:80:74:39:3e:4d:1c:a7:c4:aa:63:aa:e0:
                    09:68:2f:96:35:26:df:65:7d:4f:6a:85:09:dc:84:
                    1e:a8:a9:f8:34:da:b5:f7:2b:d5:36:db:09:86:a5:
                    ff:fa:1d:b1:51:95:f0:ec:d9:04:3b:55:12:6c:cc:
                    1a:04:f6:63:17:77:01:83:92:88:40:99:9a:76:25:
                    24:31:55:98:d4:99:8b:34:b3:5a:07:b7:95:57:03:
                    15:fd:c8:25:83:7a:16:2d:29:39:22:3c:27:99:df:
                    02:70:9a:39:c8:e2:8e:40:d7:21:ac:97:d1:8a:01:
                    42:8d:55:0f:c7:01:9d:5d:c5:f4:c7:9b:fb:1a:03:
                    87:4c:77:19:8f:d1:bc:22:5c:24:ae:6d:a9:b3:2a:
                    70:b5:a1:17:66:8b:12:79:f8:e3:01:eb:45:54:6d:
                    1d:6a:91:2e:61:db:91:73:d5:f4:bf:08:4a:e9:93:
                    a2:3e:7b:5c:8e:f8:7a:4d:3a:39:a6:9e:b1:f4:01:
                    50:46:cf:2f:50:f1:f4:68:3f:88:bc:94:cd:ae:ce:
                    d8:9d:39:69:9b:67:8f:08:f3:b6:ec:69:89:68:ae:
                    48:8f:af:e2:d7:49:48:17:45:df:06:6a:66:eb:5e:
                    44:b8:d0:76:c0:b0:64:fd:9b:14:78:b2:d8:dc:e2:
                    53:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:6E:0E:70:3E:C2:1D:5C:27:CA:CC:0A:88:F0:E3:E1:0B:EB:78
            X509v3 Authority Key Identifier:
                keyid:0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132342e302f32342d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:77:6c:62:e7:87:0f:21:30:4f:42:d6:c5:99:de:17:b0:6e:
         92:35:b6:95:92:cd:c3:95:8d:ff:f0:25:0c:51:09:8f:fc:9d:
         30:3c:4a:ea:52:7f:ba:15:16:c2:52:5a:01:4c:15:a1:5d:0b:
         4d:c4:c4:8c:f9:f3:21:ef:7e:e4:d5:11:83:df:1d:4b:ed:87:
         7a:35:35:f6:77:d2:b7:00:35:84:39:fa:b4:99:a3:71:ef:af:
         53:51:7c:85:77:c0:6e:d4:1a:68:94:6c:9a:76:be:58:0d:3c:
         1e:a4:f8:ce:6a:0e:bf:00:e0:ed:b0:d7:64:73:48:b1:62:79:
         c1:f0:e6:d5:21:6c:0e:41:50:12:f6:83:44:b4:37:61:4d:79:
         e7:46:92:0a:a1:f1:ad:e3:d9:1b:2d:de:3f:f4:0c:f9:99:f1:
         6c:43:98:80:6e:cc:2f:b9:3c:a9:0d:f2:81:71:b8:30:be:cd:
         e5:74:4f:f9:52:cf:d8:a3:43:02:6d:60:25:5c:5f:26:a9:3e:
         e1:70:c0:6c:bd:e3:55:01:bb:e0:94:67:3d:9f:ea:48:ba:95:
         57:aa:7b:3e:dd:a9:f9:af:c3:72:ef:05:2f:c3:a2:90:df:e8:
         29:2d:e3:70:b6:88:e3:e1:d9:4e:1d:8c:b9:c4:e8:7a:87:37:
         0a:84:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:27:55 2026 by rpki-client