Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3234203d3e203237363933.roa
File:                     3137392e3130392e31362e302f32302d3234203d3e203237363933.roa (raw, json)
Hash identifier:          S1o8aE4S6+9HCUNgfnffBzJqv0z1j5FErr5rQVgrN68=
Subject key identifier:   EB:E2:19:3D:DC:0D:B1:E4:C1:3F:A9:4E:B1:01:D9:5E:48:74:7F:6A
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       4B4881B3A4A3726EE721F205D853583E5A44AE92
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3234203d3e203237363933.roa
Signing time:             Mon 08 Jun 2026 12:38:34 +0000
ROA not before:           Mon 08 Jun 2026 12:33:34 +0000
ROA not after:            Mon 07 Jun 2027 12:38:34 +0000
asID:                     27693
IP address blocks:        179.109.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl
                          rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 22:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:48:81:b3:a4:a3:72:6e:e7:21:f2:05:d8:53:58:3e:5a:44:ae:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Jun  8 12:33:34 2026 GMT
            Not After : Jun  7 12:38:34 2027 GMT
        Subject: CN=EBE2193DDC0DB1E4C13FA94EB101D95E48747F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:7c:60:30:fa:49:ba:16:4d:3a:77:05:17:
                    11:3d:94:de:7f:3a:17:b8:14:c7:ec:75:1c:ab:26:
                    43:4f:a5:2a:67:15:56:1f:79:9b:4c:ca:83:b3:f7:
                    d6:1d:8c:42:ea:09:59:5c:91:7b:9b:ec:8d:3f:53:
                    5b:16:ec:18:7f:2c:77:c6:58:42:f6:49:11:d4:70:
                    8c:32:fe:f0:72:e1:7a:f7:ca:dd:69:48:fb:55:b6:
                    71:78:d4:bf:cf:a8:cd:a8:57:a8:b6:a2:be:5a:24:
                    a9:87:74:a3:c5:51:16:98:10:c0:fa:b9:92:78:cc:
                    43:34:bc:c1:e3:70:91:74:bc:fd:45:9e:9b:d7:bc:
                    73:42:18:6b:f2:15:e0:6c:a2:07:64:84:c0:4a:88:
                    84:fd:77:b8:ce:e8:bd:10:23:cd:8a:d7:49:b6:d3:
                    d1:1f:5c:d1:12:c2:ed:ae:c5:b8:2f:15:ba:20:54:
                    e6:c8:e7:0d:b0:31:fc:08:0f:fe:6c:ba:52:18:2e:
                    d2:ff:c5:d3:60:2c:1b:3b:99:d9:73:5c:21:08:94:
                    ea:01:2d:d5:45:c9:f6:d9:f9:ad:cf:6a:59:23:7d:
                    e8:d2:3a:dd:18:bb:6d:c9:3a:fe:7a:97:ca:14:f7:
                    5b:57:a6:9b:1c:8b:dd:71:c0:8d:64:5b:19:4d:ca:
                    45:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:19:3D:DC:0D:B1:E4:C1:3F:A9:4E:B1:01:D9:5E:48:74:7F:6A
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3137392e3130392e31362e302f32302d3234203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:08:8c:aa:2e:ba:7e:20:6c:85:bb:7b:17:e3:71:c6:e5:
         fa:4c:83:46:e1:76:57:86:76:c2:5e:9e:1c:36:a6:5b:92:23:
         73:cf:df:d7:58:e5:53:c3:5c:db:63:b8:b6:a8:ab:68:5f:28:
         1f:55:7d:04:29:1e:1d:c4:e9:52:b3:73:ac:7e:46:17:0b:39:
         81:e4:87:02:3e:97:1a:fa:8e:60:cb:51:e2:80:e4:2d:e7:db:
         67:14:ca:58:09:52:02:14:a9:47:7e:06:24:56:8c:b0:83:4f:
         77:7d:36:df:3c:22:ab:a3:9d:a3:8f:4e:a5:55:a0:71:78:23:
         02:29:93:31:e3:57:43:de:cc:4c:50:ce:a8:13:a3:47:35:78:
         d9:4c:28:90:b0:c6:4c:0e:98:71:e7:46:9f:90:92:c9:17:72:
         9c:86:c8:51:43:6c:20:d2:46:48:2a:5a:45:13:e3:d0:46:e9:
         41:15:29:3e:95:ef:eb:95:c4:2a:7f:85:0a:65:45:c8:d9:6c:
         84:42:1d:2d:f0:77:7d:19:b0:d0:54:a2:23:af:97:fa:27:06:
         0b:da:41:d5:d4:7a:7e:37:1f:05:ec:1c:44:ca:cc:b0:b9:cb:
         f1:12:a3:75:4d:61:5b:b7:d3:14:f5:3a:da:19:65:54:f1:f6:
         5f:ef:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:15:43 2026 by rpki-client