Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/3136372e3235302e3234362e302f32342d3234203d3e20323635323338.roa
File:                     3136372e3235302e3234362e302f32342d3234203d3e20323635323338.roa (raw, json)
Hash identifier:          3aj36mKam+9Kue5b7ppsDBJYKVSqhKdP2BXmny2mNjY=
Subject key identifier:   69:02:22:91:F1:2F:D2:79:B1:E0:3E:2F:D7:8E:A8:90:F5:00:BF:F4
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       4FE9BB79FD553BAC6A394A4472986DCC81ED89A3
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/3136372e3235302e3234362e302f32342d3234203d3e20323635323338.roa
Signing time:             Tue 26 May 2026 12:26:20 +0000
ROA not before:           Tue 26 May 2026 12:21:20 +0000
ROA not after:            Tue 25 May 2027 12:26:20 +0000
asID:                     265238
IP address blocks:        167.250.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl
                          rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e9:bb:79:fd:55:3b:ac:6a:39:4a:44:72:98:6d:cc:81:ed:89:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: May 26 12:21:20 2026 GMT
            Not After : May 25 12:26:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:65:15:57:80:9e:cd:7f:ad:d1:62:66:4d:
                    62:e2:18:bf:95:54:3d:1e:59:c6:66:04:59:e7:c8:
                    41:fe:26:2a:d5:ab:a9:91:86:bd:ca:6c:10:f4:2e:
                    23:d9:6e:4b:ce:7c:95:a4:56:4d:52:48:c8:3c:1a:
                    33:8a:f2:1e:44:4b:31:c8:cb:c7:fd:c7:26:a6:e0:
                    c8:67:b7:9b:f5:1a:1f:ff:b8:30:aa:4f:68:f4:fe:
                    22:d5:e6:8a:94:80:c5:9e:ba:4d:9e:ca:70:59:b3:
                    c9:2b:b2:ef:9b:65:96:c1:26:9d:2c:96:57:11:24:
                    2f:28:e1:2b:d9:71:94:74:df:ba:2e:6b:25:01:12:
                    88:11:1f:c8:51:65:00:ea:93:f4:ed:5f:5f:dc:e3:
                    9c:c8:20:57:0f:9e:61:8e:4c:54:e5:29:a5:ff:d7:
                    4e:29:dd:da:45:66:8d:8b:fb:6b:b5:9a:3c:aa:44:
                    fa:18:00:e6:94:19:a2:c0:08:14:d0:79:04:46:0f:
                    15:d0:8e:9e:7b:f8:b1:5b:d3:f0:1f:46:60:3c:00:
                    6e:e2:c6:7b:da:fc:fb:3a:e5:fa:06:f2:b9:a1:f5:
                    bf:ef:2a:8b:2c:63:93:d0:92:f7:45:26:8c:58:52:
                    d9:35:70:36:b6:30:e6:f2:f0:96:91:44:be:d0:9f:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:02:22:91:F1:2F:D2:79:B1:E0:3E:2F:D7:8E:A8:90:F5:00:BF:F4
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/3136372e3235302e3234362e302f32342d3234203d3e20323635323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:5b:c3:60:c9:30:27:bd:3d:59:b0:33:c4:58:37:15:20:
         4a:f5:8b:d0:86:ec:06:97:e6:f9:31:01:88:68:76:90:0f:7b:
         04:fb:4b:8d:13:1c:e5:ea:28:d8:91:6c:16:49:e5:1f:49:fd:
         5a:6e:d3:7c:96:6e:e4:e3:48:e7:db:00:78:43:76:b8:fd:37:
         50:d9:cf:ee:6f:0f:8c:27:a2:79:e5:a1:17:71:c0:17:8b:07:
         07:7f:77:31:a6:b5:93:d0:f5:1c:2a:18:b8:bd:3f:8a:11:62:
         d7:e1:20:3b:79:e7:74:dd:37:1b:02:14:aa:61:ab:a3:36:8a:
         93:9f:d6:66:31:bd:93:1b:a8:2a:51:00:55:a2:82:3e:f5:14:
         34:62:75:f4:2f:ad:89:fe:8f:23:b4:c3:14:f7:e5:2e:ae:de:
         a4:5a:41:0e:9b:fc:0d:3f:df:e0:48:59:b2:2a:a0:fb:bb:37:
         0f:e1:d2:74:06:47:29:96:6c:04:cb:7c:54:85:1f:25:d5:d3:
         fa:4a:30:1b:a6:2d:4a:95:39:f6:d5:96:f6:a5:36:27:6b:e2:
         32:7a:e4:7c:fc:56:8b:25:86:60:f2:e3:b0:9d:e6:42:12:fd:
         3e:8b:87:f3:6f:96:26:9b:91:7d:aa:d8:9d:93:33:08:06:81:
         84:21:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:06:06 2026 by rpki-client