Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3332203d3e203631383935.roa
File:                     3137372e39312e31362e302f32302d3332203d3e203631383935.roa (raw, json)
Hash identifier:          AbKsZ5WALUTcfbswOW8Xv4Xi04X3gVDgY/SDKxp72Fc=
Subject key identifier:   16:57:74:DC:6A:71:BC:F2:84:61:7F:AC:EA:E6:91:E4:BC:B0:FB:10
Certificate issuer:       /CN=42BF810F34BDC5224A540596A2E29E7B861D4949
Certificate serial:       1CB00D1CEC37D3CB1BCB3F123310F52546EA99F6
Authority key identifier: 42:BF:81:0F:34:BD:C5:22:4A:54:05:96:A2:E2:9E:7B:86:1D:49:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42BF810F34BDC5224A540596A2E29E7B861D4949.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3332203d3e203631383935.roa
Signing time:             Wed 10 Jun 2026 17:18:45 +0000
ROA not before:           Wed 10 Jun 2026 17:13:45 +0000
ROA not after:            Wed 09 Jun 2027 17:18:45 +0000
asID:                     61895
IP address blocks:        177.91.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/42BF810F34BDC5224A540596A2E29E7B861D4949.crl
                          rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/42BF810F34BDC5224A540596A2E29E7B861D4949.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42BF810F34BDC5224A540596A2E29E7B861D4949.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b0:0d:1c:ec:37:d3:cb:1b:cb:3f:12:33:10:f5:25:46:ea:99:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42BF810F34BDC5224A540596A2E29E7B861D4949
        Validity
            Not Before: Jun 10 17:13:45 2026 GMT
            Not After : Jun  9 17:18:45 2027 GMT
        Subject: CN=165774DC6A71BCF284617FACEAE691E4BCB0FB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:10:ee:52:ff:51:bc:59:6d:1e:41:9f:6d:
                    d6:20:96:35:71:02:ff:89:5c:ca:e5:cc:a2:4a:0a:
                    0b:88:05:93:aa:43:dc:63:04:9c:4a:79:f1:cd:84:
                    67:23:35:e9:8f:e6:b7:60:ae:dc:54:93:54:5c:c1:
                    ad:15:d1:95:bf:b6:0e:b5:8a:b1:fc:c5:4a:71:15:
                    41:c4:6b:dc:69:2b:79:56:cb:23:d2:55:4f:37:11:
                    ac:d5:1b:52:82:77:5e:5e:1d:67:a4:8a:cd:05:71:
                    31:c3:0f:50:e3:d8:2d:2d:15:e7:a3:98:32:ab:d8:
                    a4:b7:ac:62:86:98:1f:d5:5d:31:ce:23:e0:a3:30:
                    39:17:ba:94:aa:b9:fd:a8:db:6d:e5:13:e2:e4:c4:
                    2e:47:79:2e:59:68:47:32:8a:c7:9b:92:31:85:c3:
                    4f:30:59:eb:03:98:d5:38:7b:d3:28:3d:6e:43:20:
                    71:f8:24:27:72:60:6c:ee:7d:9e:0c:d1:86:b2:17:
                    03:e4:a9:66:37:77:10:c9:b6:f9:58:c6:dc:8e:18:
                    e4:b0:49:87:b7:55:ef:01:c9:9b:3a:0c:54:ba:fc:
                    82:86:34:d0:c7:45:e7:b5:44:37:23:eb:93:a7:38:
                    bd:59:d4:00:35:49:0f:4a:2a:84:02:71:64:7a:32:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:57:74:DC:6A:71:BC:F2:84:61:7F:AC:EA:E6:91:E4:BC:B0:FB:10
            X509v3 Authority Key Identifier:
                keyid:42:BF:81:0F:34:BD:C5:22:4A:54:05:96:A2:E2:9E:7B:86:1D:49:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/42BF810F34BDC5224A540596A2E29E7B861D4949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42BF810F34BDC5224A540596A2E29E7B861D4949.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/3137372e39312e31362e302f32302d3332203d3e203631383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:ec:4c:2b:e5:32:a5:6a:b1:4e:33:01:0e:d2:e7:be:ee:
         b1:f8:d7:10:94:55:f5:39:60:8e:27:d0:04:63:c3:f9:9d:7e:
         5e:79:21:5d:85:ee:49:33:03:6c:52:8e:c6:f8:50:83:03:3f:
         23:9c:43:a8:4f:9b:c7:8a:61:0a:05:34:c6:92:bb:32:b8:72:
         44:19:82:c4:f1:cb:dc:13:51:a1:1a:98:fb:9e:fe:48:41:0c:
         b1:9c:bc:68:de:3b:85:f2:77:f3:05:30:a6:d8:a7:22:b6:dc:
         38:08:75:ca:b2:02:e8:0f:52:6a:09:3f:bc:88:a3:1e:3f:a1:
         ba:9c:69:f0:2f:69:d4:ca:1f:f5:76:80:5a:ba:c9:dd:73:f9:
         51:82:a2:63:b1:fb:cb:5c:08:fb:76:96:db:4d:33:f6:91:71:
         b3:cf:04:fb:b7:77:d6:fc:ae:55:09:f2:fb:91:34:0b:eb:5b:
         d7:df:50:48:29:78:58:67:7e:19:bd:1d:5e:ce:ec:66:13:d9:
         96:63:35:2d:37:5b:e7:88:1b:b9:f3:54:e3:c4:ed:5a:13:55:
         7e:21:84:88:2c:39:68:88:d9:07:0b:18:21:68:ac:72:d3:25:
         f5:e5:b3:63:c9:c7:4e:22:11:53:65:b2:e5:5f:31:6e:40:0d:
         28:d3:f4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:04:09 2026 by rpki-client