Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa
File:                     3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa (raw, json)
Hash identifier:          G9JB4Ys6yx3GEkOwhTT6lr9JM0JlWnjd4Qmkh5p6yKQ=
Subject key identifier:   5F:33:69:F7:CB:86:A8:4D:91:A5:CE:E2:03:37:E2:48:36:FF:AB:41
Certificate issuer:       /CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
Certificate serial:       7E170C9536B87C62D5D4EE8BD888793CD3746A67
Authority key identifier: 58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa
Signing time:             Fri 05 Jun 2026 14:55:53 +0000
ROA not before:           Fri 05 Jun 2026 14:50:53 +0000
ROA not after:            Fri 04 Jun 2027 14:55:53 +0000
asID:                     265394
IP address blocks:        168.194.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 23:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:17:0c:95:36:b8:7c:62:d5:d4:ee:8b:d8:88:79:3c:d3:74:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BD557EA74905C1768E8C6151C4F2743E1E68E6
        Validity
            Not Before: Jun  5 14:50:53 2026 GMT
            Not After : Jun  4 14:55:53 2027 GMT
        Subject: CN=5F3369F7CB86A84D91A5CEE20337E24836FFAB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:8b:6d:35:c5:5e:e0:2b:ad:2d:29:b0:be:
                    72:a4:85:a6:3a:08:3f:ed:93:84:f2:5a:55:46:2c:
                    f0:43:9a:83:97:4e:3a:a8:10:b1:6b:61:a4:e3:d5:
                    5f:20:26:29:6e:76:8b:0d:ed:ee:31:87:a2:e1:08:
                    a9:91:d0:80:59:34:77:48:f8:9c:87:38:1e:77:8e:
                    1e:e6:8a:cb:45:67:cf:ac:6a:2e:9d:c1:b3:93:2d:
                    4b:53:86:94:b8:3d:40:cf:dd:b0:55:ef:4a:76:5b:
                    d6:ee:7b:94:ff:64:9b:ee:1e:cc:a9:22:12:fd:72:
                    5d:7f:32:d7:88:51:5d:c4:b8:30:f5:b2:06:8b:4e:
                    96:e6:28:3b:31:30:a2:8c:73:d5:ba:01:fc:4c:fd:
                    b2:c3:06:0d:9a:5f:08:cc:43:cb:1a:52:cb:87:4c:
                    6b:a1:62:16:88:14:3d:4f:99:eb:b7:ed:35:f4:f5:
                    76:42:b1:bd:c3:58:89:f7:35:0d:55:b5:56:46:e3:
                    04:84:65:23:fa:40:dd:20:10:71:0f:6e:32:50:6f:
                    5e:96:c8:fd:bc:ca:d6:f6:d6:4f:8d:9d:6e:bc:ea:
                    2e:24:4c:dd:44:64:94:82:cf:10:98:13:97:1d:65:
                    2f:4c:a8:14:f5:a2:f9:08:b4:f2:5e:76:58:e0:63:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:33:69:F7:CB:86:A8:4D:91:A5:CE:E2:03:37:E2:48:36:FF:AB:41
            X509v3 Authority Key Identifier:
                keyid:58:BD:55:7E:A7:49:05:C1:76:8E:8C:61:51:C4:F2:74:3E:1E:68:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/58BD557EA74905C1768E8C6151C4F2743E1E68E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BD557EA74905C1768E8C6151C4F2743E1E68E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/3136382e3139342e3139322e302f32322d3232203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:34:b7:2e:20:c4:7f:47:95:ed:c3:c4:c6:a2:da:5b:03:
         1d:7f:9c:01:5d:5d:94:59:38:a2:e9:b0:46:43:6d:05:49:e3:
         35:68:65:38:ec:47:86:1c:87:19:49:4d:ba:73:8d:54:d2:06:
         a6:d4:1d:ee:eb:1f:f1:58:29:dc:34:59:6c:8d:55:76:c8:b5:
         d4:45:18:1c:c3:64:59:78:dc:02:a0:e0:8e:73:39:48:66:af:
         b1:12:84:8f:99:d2:07:6e:17:36:5b:7d:c6:75:f8:8e:ca:80:
         32:1f:50:2b:24:ae:6a:fa:e5:e8:75:df:68:55:01:35:7d:50:
         93:b9:b0:dd:b4:ac:97:50:d0:57:0b:98:ee:c1:ad:f3:5a:f5:
         31:d4:0a:cf:e7:23:86:13:24:a8:a5:e2:c0:71:38:86:8d:7a:
         5e:f1:b5:82:2f:0c:9c:33:94:48:e5:65:37:f6:2e:ec:66:6e:
         f6:b0:78:39:e1:e4:af:a9:d6:60:63:47:b6:a8:a9:58:c4:5a:
         c2:e5:ca:3d:cd:6f:a4:05:d1:8a:94:8c:84:db:2f:b1:a6:5e:
         35:5d:73:4d:61:ca:06:bf:49:d3:96:28:fe:1d:19:62:b9:7f:
         e6:10:d4:a8:54:ca:80:b9:53:1a:d4:7e:7d:d9:e6:c7:3f:e5:
         b1:9b:fa:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:32:44 2026 by rpki-client