Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa
File:                     3137302e38332e38302e302f32322d3234203d3e20323633303236.roa (raw, json)
Hash identifier:          uPmJoJhddiCr/VFNpF2WsUi0aXyipNeh7XcCRw7zvfQ=
Subject key identifier:   CB:6C:1F:0B:54:B4:CC:FE:0F:01:33:FD:C6:A3:FA:E9:C2:F9:EA:4E
Certificate issuer:       /CN=0F05ADB3720F468A08C61628810EA25E93919EEA
Certificate serial:       101E69A598243AF7FB2F35DEF28CBE19E27BCD56
Authority key identifier: 0F:05:AD:B3:72:0F:46:8A:08:C6:16:28:81:0E:A2:5E:93:91:9E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F05ADB3720F468A08C61628810EA25E93919EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa
Signing time:             Sat 06 Jun 2026 12:42:35 +0000
ROA not before:           Sat 06 Jun 2026 12:37:35 +0000
ROA not after:            Sat 05 Jun 2027 12:42:35 +0000
asID:                     263026
IP address blocks:        170.83.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/0F05ADB3720F468A08C61628810EA25E93919EEA.crl
                          rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/0F05ADB3720F468A08C61628810EA25E93919EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F05ADB3720F468A08C61628810EA25E93919EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1e:69:a5:98:24:3a:f7:fb:2f:35:de:f2:8c:be:19:e2:7b:cd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F05ADB3720F468A08C61628810EA25E93919EEA
        Validity
            Not Before: Jun  6 12:37:35 2026 GMT
            Not After : Jun  5 12:42:35 2027 GMT
        Subject: CN=CB6C1F0B54B4CCFE0F0133FDC6A3FAE9C2F9EA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:05:9c:59:6a:aa:e4:88:2d:b7:67:fd:d6:1e:
                    84:4d:38:91:d0:3c:5b:d9:04:96:30:b3:a8:72:c8:
                    8a:ba:ca:53:4f:91:ed:69:bd:65:6c:67:f6:42:83:
                    44:2a:88:b4:85:f9:22:43:d3:1c:46:0e:ee:f3:cc:
                    64:7b:74:8b:e7:a4:c3:52:4c:72:5a:99:a2:c3:04:
                    1c:2a:46:db:14:00:86:0e:ed:5c:8f:11:33:fd:d5:
                    a5:f5:14:6b:17:89:ed:d5:cd:d0:33:45:89:c4:30:
                    d6:4f:bc:67:8a:a0:c7:26:e8:5e:1c:49:3d:0d:02:
                    e8:23:23:4f:0c:8a:ca:c4:d8:3e:31:3f:c2:47:6e:
                    d4:b1:26:c1:91:8b:62:3c:31:bb:4e:17:de:90:12:
                    53:7c:bd:ea:8e:52:5e:dd:98:59:ed:50:75:bf:0b:
                    31:2c:05:a6:b6:16:ca:e4:ea:33:48:78:9a:1f:7f:
                    44:90:41:20:16:21:fb:69:59:e5:d4:08:c0:b5:05:
                    55:18:37:6a:0b:12:8a:c9:58:92:78:d0:c5:54:50:
                    c3:31:7c:c1:df:34:6b:7a:df:8e:a8:5b:11:70:92:
                    53:5f:3d:c6:eb:0a:f9:87:65:dc:6c:cf:8b:c2:d2:
                    b9:98:e0:08:e4:b1:84:7e:45:71:82:18:ce:43:01:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:1F:0B:54:B4:CC:FE:0F:01:33:FD:C6:A3:FA:E9:C2:F9:EA:4E
            X509v3 Authority Key Identifier:
                keyid:0F:05:AD:B3:72:0F:46:8A:08:C6:16:28:81:0E:A2:5E:93:91:9E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/0F05ADB3720F468A08C61628810EA25E93919EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F05ADB3720F468A08C61628810EA25E93919EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3137302e38332e38302e302f32322d3234203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:f5:11:92:3c:ad:46:56:3c:87:92:c1:7b:af:db:fa:d8:54:
         a1:d6:da:da:61:b6:61:97:f6:cd:98:7e:b3:1a:f8:cf:be:ef:
         7c:20:02:b2:ec:88:65:86:27:d6:93:20:f1:50:9d:bc:f9:a8:
         58:88:14:61:95:8c:0f:a9:dd:b0:87:bf:ed:6a:6b:9b:1c:47:
         fa:35:99:1b:00:ef:f6:fe:6c:6b:40:eb:41:38:bf:8f:d3:5e:
         28:f2:f1:ee:8e:87:59:ec:cc:f1:fd:a2:b7:a6:42:c8:ce:cd:
         f1:ab:98:23:5f:d3:f8:06:95:66:0d:a1:75:6b:9e:9d:4a:5d:
         e8:bf:5e:46:88:df:c6:e3:44:69:db:08:1b:b3:24:36:11:32:
         9b:25:30:a1:ab:60:ce:63:0d:94:8c:61:f1:42:2a:c4:2b:a1:
         08:6e:91:66:99:33:f6:1f:31:55:de:02:e3:83:f5:88:f1:75:
         14:c1:7f:35:b4:f1:43:97:28:7f:0b:83:bf:f4:57:a8:b2:73:
         d5:2b:1c:56:c4:8a:7a:f6:94:92:57:ea:09:0f:67:54:9d:4a:
         95:73:ec:b1:ea:c2:5e:75:9a:61:79:d4:b7:62:15:15:63:5f:
         32:f2:64:d5:f5:88:01:e9:f1:b4:a4:62:a8:68:dc:e1:fe:34:
         df:8f:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:05:58 2026 by rpki-client