Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38382e302f32332d3233203d3e20323635333038.roa
File:                     3136382e3132312e38382e302f32332d3233203d3e20323635333038.roa (raw, json)
Hash identifier:          ZZNlG0iz0lrcOvlwko4OnIT5eJphJ7QE1R6E6XVc4a8=
Subject key identifier:   26:13:93:59:CA:33:76:5B:62:89:F6:F3:F9:F8:32:6D:94:B4:C1:34
Certificate issuer:       /CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
Certificate serial:       7BF39E337BB58F306BEBCBA72A7C890D8F549457
Authority key identifier: 85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38382e302f32332d3233203d3e20323635333038.roa
Signing time:             Thu 04 Jun 2026 18:22:10 +0000
ROA not before:           Thu 04 Jun 2026 18:17:10 +0000
ROA not after:            Thu 03 Jun 2027 18:22:10 +0000
asID:                     265308
IP address blocks:        168.121.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl
                          rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f3:9e:33:7b:b5:8f:30:6b:eb:cb:a7:2a:7c:89:0d:8f:54:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
        Validity
            Not Before: Jun  4 18:17:10 2026 GMT
            Not After : Jun  3 18:22:10 2027 GMT
        Subject: CN=26139359CA33765B6289F6F3F9F8326D94B4C134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:6b:c5:e3:3a:5e:db:19:c2:8f:e4:13:c6:
                    66:f5:41:0e:30:50:ec:a0:ad:f8:a8:ba:f7:a4:05:
                    a7:f8:ed:90:00:cb:bb:94:bd:79:4d:c4:aa:f4:76:
                    9d:bd:85:c5:ea:5e:bd:a3:b7:ca:08:ae:36:78:db:
                    2a:a3:76:93:36:b4:8b:ff:93:a5:f7:60:53:1a:50:
                    00:c1:9c:96:ce:ce:d1:7b:d0:69:16:df:81:63:a4:
                    d7:4c:e5:74:db:e0:72:de:76:56:7b:b6:b6:8a:32:
                    73:a7:72:ab:d9:18:63:b6:c0:36:d0:ad:88:c0:36:
                    d0:8d:ca:29:b3:54:4c:04:e8:2e:b8:58:39:d1:4f:
                    16:b2:e2:64:8c:d7:9b:84:c4:39:84:b4:15:13:5a:
                    1d:e9:0a:f5:cb:3d:60:f0:13:ea:b5:0e:64:0f:94:
                    ca:bd:07:6a:1d:37:3d:6b:91:25:62:f1:70:ca:68:
                    c1:fe:85:53:5d:c6:04:d6:c0:6f:41:00:60:83:04:
                    69:a1:b0:f8:de:6b:79:7c:98:3b:26:53:8a:50:b6:
                    a4:6d:6b:e7:6e:7f:78:f2:75:f3:1b:96:92:bd:55:
                    8f:6b:c6:7e:08:6d:f6:8d:9a:fd:d5:bf:03:08:42:
                    d7:46:f2:a3:25:b7:50:a3:ea:8b:d5:60:1c:db:35:
                    ee:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:93:59:CA:33:76:5B:62:89:F6:F3:F9:F8:32:6D:94:B4:C1:34
            X509v3 Authority Key Identifier:
                keyid:85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38382e302f32332d3233203d3e20323635333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:71:fc:a8:0f:b6:c4:e5:58:8c:98:27:c0:ca:76:89:9a:
         fa:d1:f5:d1:0f:b1:e1:63:d7:1d:8f:e0:d8:25:37:43:92:5e:
         a9:e3:93:d9:79:c1:a0:f3:84:47:d1:ed:86:36:01:e2:25:8e:
         c0:2a:34:08:23:e4:1a:49:8d:8f:12:2d:ab:54:f7:1d:f9:b6:
         76:14:bc:a6:65:15:7a:0b:e9:b1:61:c9:26:51:47:cb:ae:91:
         d2:c1:00:5b:43:9a:f9:f2:f1:dc:42:87:30:77:91:9e:bb:74:
         c2:f9:c0:79:68:67:8a:86:cb:df:7e:23:b4:35:3f:e5:56:e3:
         84:09:ba:4d:e5:56:c3:71:d3:dc:45:4c:22:a6:42:61:33:40:
         07:6d:02:7c:ab:30:e7:e8:ea:db:fa:fb:5d:a6:72:3f:a0:23:
         45:4f:d4:d5:85:0f:22:ef:30:da:98:0a:45:75:7c:e3:7e:de:
         b4:ff:ea:fd:50:f1:4e:e2:9a:51:fc:22:70:26:b1:4e:48:12:
         f2:d3:91:a9:bd:56:2e:cf:ea:6b:e6:b2:d0:21:7c:b0:10:45:
         f6:1f:88:b2:8b:1e:62:d2:6d:88:55:9c:4c:e5:b1:31:3e:61:
         06:f1:c6:4d:da:8a:15:5f:d7:73:1d:42:35:dc:df:c4:71:9a:
         88:59:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:46:35 2026 by rpki-client