Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/3137392e3138392e3230302e302f32312d3332203d3e203532363236.roa
File:                     3137392e3138392e3230302e302f32312d3332203d3e203532363236.roa (raw, json)
Hash identifier:          lRLhb+zCrjp4HZSscw284YGkC5QPrjORf9iKCn62QlM=
Subject key identifier:   4D:AA:4F:B6:B0:98:30:E6:EB:11:D1:B8:3C:39:7B:33:26:C4:76:2F
Certificate issuer:       /CN=815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8
Certificate serial:       026FAA9BFC2AC45E66B29DD71C82B3C845B146F7
Authority key identifier: 81:5B:70:04:0D:0F:11:D5:8D:6E:2E:BC:ED:F8:4C:35:D2:0A:E8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/3137392e3138392e3230302e302f32312d3332203d3e203532363236.roa
Signing time:             Tue 02 Jun 2026 11:43:53 +0000
ROA not before:           Tue 02 Jun 2026 11:38:53 +0000
ROA not after:            Tue 01 Jun 2027 11:43:53 +0000
asID:                     52626
IP address blocks:        179.189.200.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.crl
                          rsync://rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6f:aa:9b:fc:2a:c4:5e:66:b2:9d:d7:1c:82:b3:c8:45:b1:46:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8
        Validity
            Not Before: Jun  2 11:38:53 2026 GMT
            Not After : Jun  1 11:43:53 2027 GMT
        Subject: CN=4DAA4FB6B09830E6EB11D1B83C397B3326C4762F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:c2:71:3d:ed:00:a0:ba:d6:eb:16:52:c8:
                    cc:20:58:18:60:ab:1e:b7:2b:aa:b0:bb:ab:2a:6f:
                    84:c6:2b:c7:df:0d:39:0d:7f:34:d5:84:f1:40:89:
                    a5:44:5c:a4:e5:72:09:4a:57:7f:dc:4e:8c:00:66:
                    ca:1a:a7:6d:a9:32:43:96:2d:a2:09:f4:be:a5:48:
                    31:7f:96:18:08:d5:77:f3:08:af:ff:2b:f2:c8:12:
                    ae:53:e2:dd:4e:57:3e:cd:97:99:51:af:f4:9e:36:
                    7a:cf:6a:27:e6:48:25:b0:a4:9b:5c:a3:48:1f:dc:
                    fd:aa:a4:51:df:c1:03:69:c7:d3:4a:16:f3:38:58:
                    05:7b:c3:c9:2e:e9:3b:89:15:73:75:7c:cf:18:99:
                    b9:a4:62:2d:fe:7e:78:9d:58:66:ce:6a:d2:24:1c:
                    d1:da:f0:ac:ee:7c:90:dc:42:67:7b:a6:81:42:e9:
                    49:1d:88:ee:74:2b:95:41:f4:09:ca:7a:5c:a1:f3:
                    9f:b5:60:99:b8:3c:bf:bc:0e:3a:d6:66:38:d2:ba:
                    cb:da:7a:8f:d9:6e:ef:df:f5:07:8c:da:64:06:c8:
                    5c:7a:23:0f:31:89:d3:fb:08:22:f4:b2:6e:88:1b:
                    fa:69:dd:bc:3d:92:51:0c:5e:35:d3:ad:0d:62:54:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AA:4F:B6:B0:98:30:E6:EB:11:D1:B8:3C:39:7B:33:26:C4:76:2F
            X509v3 Authority Key Identifier:
                keyid:81:5B:70:04:0D:0F:11:D5:8D:6E:2E:BC:ED:F8:4C:35:D2:0A:E8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/815B70040D0F11D58D6E2EBCEDF84C35D20AE8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGP4Kqb5Pag6eaAfUbp74ZHqPSAjsnp3hAnayS9RxVHr/0/3137392e3138392e3230302e302f32312d3332203d3e203532363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:52:cf:c5:ce:f1:8c:6f:2a:2e:c1:8c:9a:ca:88:60:80:
         7c:94:ed:4b:6c:b3:cc:48:cc:64:cc:13:d5:ef:57:13:cb:54:
         a4:e4:02:a1:16:7a:23:82:0c:31:8a:39:b4:54:cd:a5:d2:39:
         0d:ff:2a:b8:88:1f:e9:46:87:34:29:f9:f6:49:a4:e0:d7:40:
         fb:33:2a:33:2d:ce:e2:f3:2d:97:cf:4a:6b:6a:d7:bb:f3:4b:
         4e:97:ac:76:7b:2b:b8:db:73:52:a5:83:73:9a:30:40:ed:ca:
         07:5b:bb:30:04:64:03:cd:3d:06:03:91:e8:1c:23:47:53:71:
         9a:17:61:ea:76:c3:ce:59:94:99:67:35:22:c5:cf:8a:ff:3c:
         c0:71:0f:90:89:2a:a8:1b:75:16:6f:09:a5:ff:81:62:fe:26:
         3b:84:c7:e0:c5:99:2f:48:fd:57:e1:1f:ca:98:19:71:2e:c8:
         55:6f:61:0f:d3:d1:9b:ad:c9:ac:08:cc:91:d7:71:c8:6a:d6:
         51:57:9e:c7:8b:c6:2e:88:f9:05:72:42:45:41:d2:25:c2:69:
         58:54:f2:20:af:45:6d:65:90:ea:00:df:ef:8a:64:ec:df:a5:
         7b:e1:d3:35:30:89:6a:2a:b5:13:03:83:96:25:b1:35:91:c2:
         3d:41:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:41:52 2026 by rpki-client