Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38392e302f32342d3234203d3e20323635333038.roa
File:                     3136382e3132312e38392e302f32342d3234203d3e20323635333038.roa (raw, json)
Hash identifier:          sosx+G5oBgYPz+SmisDQGG491Bm3ryvmbpK3Nf0WoO8=
Subject key identifier:   03:44:74:46:C3:A4:D8:F9:59:57:90:4A:79:54:70:7E:28:17:4F:3F
Certificate issuer:       /CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
Certificate serial:       401A8E192F48847A1F362C08DF60F684B8A7842C
Authority key identifier: 85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38392e302f32342d3234203d3e20323635333038.roa
Signing time:             Wed 03 Jun 2026 20:48:14 +0000
ROA not before:           Wed 03 Jun 2026 20:43:14 +0000
ROA not after:            Wed 02 Jun 2027 20:48:14 +0000
asID:                     265308
IP address blocks:        168.121.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl
                          rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1a:8e:19:2f:48:84:7a:1f:36:2c:08:df:60:f6:84:b8:a7:84:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85F1117C022A5C985E57C0FBF010D5164B1F32C4
        Validity
            Not Before: Jun  3 20:43:14 2026 GMT
            Not After : Jun  2 20:48:14 2027 GMT
        Subject: CN=03447446C3A4D8F95957904A7954707E28174F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:cf:2d:28:a3:02:f0:3e:9b:94:7d:c9:a6:
                    b2:0f:d8:7f:83:28:d1:87:34:f2:bd:b5:b6:64:80:
                    4f:25:43:8e:ab:fe:9c:27:a5:f8:cf:89:62:94:60:
                    fc:54:07:6a:37:d8:1d:0d:9d:3c:97:19:b9:b0:72:
                    01:e2:23:cc:03:98:0b:42:a8:42:e3:41:91:ae:9d:
                    9c:f3:5f:5c:61:f1:c6:ed:80:fd:8f:a6:e8:f8:c9:
                    2d:be:4c:73:7f:e6:15:7d:c2:e0:bb:b2:91:f6:01:
                    eb:88:f1:82:b8:f2:59:23:e5:e1:b6:dc:0e:25:d9:
                    6b:05:cb:1c:75:e1:af:d5:ff:88:9c:93:a1:e4:77:
                    58:0a:83:84:aa:5e:35:24:9f:12:20:0c:41:46:9c:
                    fd:41:0a:57:40:2b:bb:2b:c6:cb:17:aa:fd:a2:08:
                    33:5d:84:4e:9c:5b:4a:61:95:e7:fd:2e:73:5b:f1:
                    3a:29:c4:9e:0f:89:87:c2:0f:30:57:eb:d1:55:08:
                    64:71:0e:19:c6:71:8a:50:1d:b4:5a:55:aa:8f:64:
                    4a:bd:56:21:13:5f:16:24:e6:5b:3f:d4:e3:74:19:
                    f9:b6:a4:5f:43:c5:cd:1e:01:83:80:49:9a:9b:cc:
                    5d:3a:8d:27:73:d9:64:50:84:f4:13:58:8c:f8:9a:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:44:74:46:C3:A4:D8:F9:59:57:90:4A:79:54:70:7E:28:17:4F:3F
            X509v3 Authority Key Identifier:
                keyid:85:F1:11:7C:02:2A:5C:98:5E:57:C0:FB:F0:10:D5:16:4B:1F:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/85F1117C022A5C985E57C0FBF010D5164B1F32C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85F1117C022A5C985E57C0FBF010D5164B1F32C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNhSkuynVJSYLG3qnzSDSeFcDM6dn8S4RrmPvwhyZzcx/0/3136382e3132312e38392e302f32342d3234203d3e20323635333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:27:fc:a5:92:83:c0:a3:f4:ea:61:d8:bb:40:4d:7a:45:46:
         b3:43:59:15:6c:77:dc:df:16:b4:52:8a:48:77:61:e7:4a:e5:
         6a:28:5e:d7:e5:c5:bf:43:20:5b:d6:ed:77:dd:13:8c:41:c7:
         2c:32:c4:9d:0e:9b:58:99:9f:bf:f9:88:a8:8b:88:c1:33:4b:
         85:b5:bc:59:a1:fb:66:f4:9e:71:1f:60:c6:d0:16:c9:92:4c:
         47:26:53:10:ab:99:90:45:bc:4b:8f:16:d9:e6:4e:5d:4c:30:
         45:e5:a1:c2:de:0d:d0:8b:85:8d:10:17:b2:bd:37:33:da:6e:
         49:d3:70:fc:e9:1d:c9:91:c1:f3:8e:7d:d8:95:9f:73:d8:ec:
         07:d4:94:30:44:1c:a9:6d:54:fa:69:49:5b:ff:f2:99:82:6a:
         c5:58:d2:8b:ab:58:57:28:1e:b5:1b:ac:c9:c2:5a:62:36:33:
         27:36:8c:43:56:55:40:7b:f5:de:ef:94:c5:3f:00:20:4a:60:
         2f:0c:d0:d4:71:52:87:0d:c3:89:82:96:32:d9:21:84:44:7f:
         90:c6:64:4a:43:25:52:1b:bd:ea:6e:e0:29:97:90:59:92:c8:
         3d:06:99:6f:57:26:4e:a7:34:95:90:cc:69:cc:d0:f3:b2:49:
         f4:95:61:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:02 2026 by rpki-client