Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa
File:                     3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa (raw, json)
Hash identifier:          8t2XD/nFekqT4aOhcnE4h6m6dj7Poubbs+KQ8TCFMQU=
Subject key identifier:   3F:7C:28:01:D4:79:77:52:A0:F0:5C:F6:D7:D7:C9:6B:B9:2F:31:B0
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       2B8A6116F2AA59D75C64D5A7A596F44C88DC4CDB
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa
Signing time:             Thu 04 Jun 2026 20:13:36 +0000
ROA not before:           Thu 04 Jun 2026 20:08:36 +0000
ROA not after:            Thu 03 Jun 2027 20:13:36 +0000
asID:                     265377
IP address blocks:        168.194.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8a:61:16:f2:aa:59:d7:5c:64:d5:a7:a5:96:f4:4c:88:dc:4c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Jun  4 20:08:36 2026 GMT
            Not After : Jun  3 20:13:36 2027 GMT
        Subject: CN=3F7C2801D4797752A0F05CF6D7D7C96BB92F31B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:0d:14:b9:90:50:32:b7:fc:61:75:6a:ef:
                    68:34:6a:7c:55:6f:a0:37:40:34:e4:67:a6:bc:64:
                    ab:83:75:d6:6b:71:31:70:c6:8c:33:5c:b1:4a:13:
                    cc:e1:75:f9:1a:1c:2e:76:3c:89:29:f6:56:a9:c6:
                    9d:aa:34:3e:bf:5f:d1:2d:52:a5:59:4a:b2:4e:66:
                    10:c1:3d:10:57:4e:7e:be:85:46:d6:db:ab:89:3e:
                    85:ec:a8:cc:a9:71:5a:31:1f:9d:d0:04:9b:f2:67:
                    8f:28:83:07:a2:b6:68:00:f6:2f:ed:ae:fd:da:03:
                    55:cc:a6:ab:bd:af:a1:9f:a3:c3:aa:f5:7d:c3:a5:
                    ae:8f:63:15:3a:58:5d:90:27:93:59:c5:e2:cc:88:
                    51:de:18:fd:e4:aa:20:ee:99:b3:48:89:36:61:e0:
                    ab:2d:f8:63:6a:7c:a7:2a:39:8a:e9:df:90:f4:47:
                    14:38:1b:54:92:69:f7:13:36:72:1a:95:b6:76:24:
                    20:be:18:f0:bb:1e:c6:dd:89:c4:92:a2:5d:90:53:
                    87:4e:08:18:d4:77:0d:80:49:c1:bf:39:2d:95:6f:
                    c5:25:48:84:75:1d:e6:9d:94:2e:18:74:c5:5a:5a:
                    6c:b5:09:d0:16:9d:9c:c7:e3:bd:ab:01:37:e2:d6:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7C:28:01:D4:79:77:52:A0:F0:5C:F6:D7:D7:C9:6B:B9:2F:31:B0
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/3136382e3139342e31342e302f32332d3234203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:31:76:d4:e5:dc:08:38:30:a2:9b:df:a2:a3:41:9b:7f:
         15:ee:95:bc:ca:17:50:db:7f:1b:0e:6b:29:0d:20:d2:8f:ca:
         9a:69:53:1b:ff:de:a8:15:e4:a8:5b:ea:c2:a0:a6:28:3c:1a:
         43:f3:8a:c5:56:5f:87:17:4d:9d:3a:8a:18:09:67:49:15:04:
         0a:87:2b:bc:28:85:50:5e:ee:c2:aa:eb:82:5a:b9:65:6a:6a:
         ce:fa:a1:7c:55:48:ae:77:6c:43:fa:0e:c0:b4:3b:16:6f:a4:
         25:8f:9e:0c:c4:5d:f0:75:b2:bb:95:5b:8c:59:9a:53:f4:c9:
         3e:43:53:f6:b5:fe:30:95:3e:f7:c6:16:34:54:4c:8c:28:17:
         4c:51:2f:28:c9:fc:dc:af:a2:c1:50:52:bb:27:72:39:3d:85:
         ab:a4:87:76:70:8c:c4:24:32:1b:6f:b2:32:a0:60:ca:2d:18:
         28:c4:f0:df:41:bf:b8:28:49:8d:ce:19:db:03:a5:7e:53:ea:
         e6:63:49:c7:f1:de:ce:86:45:6f:13:e0:6e:4b:fe:75:25:b2:
         28:18:5c:f0:3a:ff:18:72:a3:c3:a6:58:85:0c:b1:7a:8e:08:
         ac:81:26:4c:7f:32:37:39:5c:19:ab:d6:6f:5a:94:0a:da:f8:
         1d:f5:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:39:49 2026 by rpki-client