Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32322d3232203d3e20323634343936.roa
File:                     3134332e3235352e3230342e302f32322d3232203d3e20323634343936.roa (raw, json)
Hash identifier:          8b8IhqhrnXo/KPbWjTpqks9Mp1mz+hhhgXvDhoUkL8g=
Subject key identifier:   7C:F3:0C:52:B8:85:E2:3A:4A:AC:8D:4C:D6:76:10:93:25:8A:F2:47
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       764895E95F15E3B29C63990F7FCAD0F8D81893DA
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32322d3232203d3e20323634343936.roa
Signing time:             Mon 25 May 2026 20:17:11 +0000
ROA not before:           Mon 25 May 2026 20:12:11 +0000
ROA not after:            Mon 24 May 2027 20:17:11 +0000
asID:                     264496
IP address blocks:        143.255.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:95:e9:5f:15:e3:b2:9c:63:99:0f:7f:ca:d0:f8:d8:18:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: May 25 20:12:11 2026 GMT
            Not After : May 24 20:17:11 2027 GMT
        Subject: CN=7CF30C52B885E23A4AAC8D4CD6761093258AF247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:ea:9b:79:1d:59:98:96:11:d0:53:8c:93:
                    6c:76:3c:3f:09:69:9c:27:31:e0:95:72:9f:f7:34:
                    52:37:6f:54:23:cc:84:a9:1d:a9:a4:8d:13:aa:37:
                    70:e0:e6:d4:19:23:21:0c:ae:50:f8:42:7f:ea:43:
                    cf:a1:fa:ad:e8:36:ad:02:4d:8c:35:ab:ec:a8:67:
                    58:ce:50:84:7e:c4:fa:49:76:cb:f8:94:c6:47:02:
                    16:7f:7d:54:c8:02:26:4d:84:92:66:3a:31:87:22:
                    7b:00:4f:33:1e:5c:ea:15:19:e5:dd:97:d5:a1:3e:
                    4e:71:09:62:ad:36:82:ae:8f:29:c3:10:c6:fa:23:
                    07:75:ba:e2:ed:a7:11:51:b7:02:40:8e:f1:76:fc:
                    f3:7b:11:8f:44:06:0e:11:c3:19:27:92:f6:1b:87:
                    1f:0c:64:09:31:04:49:ce:7c:15:16:c0:73:24:7b:
                    5f:28:5b:fc:00:ab:52:f5:4b:ba:93:e2:3a:da:49:
                    9f:56:b2:7e:f6:0d:e5:7a:80:f6:12:6d:13:dc:f0:
                    93:57:8f:85:e5:52:ab:72:52:93:16:51:6b:33:89:
                    9d:11:46:d5:7e:fd:3f:96:1c:cd:3d:a2:67:81:83:
                    83:4c:60:ca:6f:15:9b:18:ee:23:61:ec:25:47:61:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F3:0C:52:B8:85:E2:3A:4A:AC:8D:4C:D6:76:10:93:25:8A:F2:47
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3134332e3235352e3230342e302f32322d3232203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:a4:33:05:64:be:52:5e:ae:ac:32:ea:bb:66:4b:f5:21:7c:
         b3:86:05:ed:a3:8a:2e:9e:aa:94:05:02:2a:fc:1d:1b:54:ac:
         66:35:4c:81:1f:fb:bf:6a:48:45:22:9f:c2:cf:e6:9b:a7:a0:
         2a:b7:8a:bb:45:dc:6f:d9:01:7a:c4:23:e6:3d:ba:0f:25:37:
         98:f2:4c:72:57:a0:32:2c:88:72:55:3c:9c:23:42:80:bf:7b:
         43:9a:e5:d1:88:bb:45:9b:aa:32:92:84:1b:a1:d6:d0:36:e4:
         7f:f9:65:41:13:8f:1f:f5:c0:4b:6a:3f:ff:65:75:6b:85:85:
         ee:2d:3b:b8:e0:ac:14:f6:48:f3:53:a8:a6:8e:0c:8b:70:73:
         fb:41:35:8e:db:d8:d3:bf:4e:72:6b:85:b3:ea:2f:e3:a8:54:
         8c:3b:17:85:a1:71:3a:2f:59:e2:49:69:92:9c:fe:8c:ff:54:
         e7:99:38:5f:78:3b:96:cb:e5:4f:9d:1d:51:67:17:c0:f0:dd:
         2c:31:bc:b9:37:61:84:2c:86:d0:d8:54:1a:78:b7:a8:b6:85:
         43:f4:6e:1a:3d:09:b7:06:9f:50:78:4e:aa:58:ec:87:20:6d:
         7c:6e:21:75:89:6a:61:45:16:88:4e:da:ba:9f:d4:f6:31:5d:
         23:bb:db:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:11 2026 by rpki-client