Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa (raw, json)
Hash identifier:          9Vph/0eD/x4OjTF29VfPY7XoTRpfAyIoaozv6VBZ4h8=
Subject key identifier:   3C:1B:B5:FC:30:89:5A:53:EB:98:A7:07:5A:94:CF:96:61:A7:2C:69
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       2A7AD4771F0913F1721D96A9A087C13B19D23329
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
Signing time:             Sat 13 Jun 2026 02:28:06 +0000
ROA not before:           Sat 13 Jun 2026 02:23:06 +0000
ROA not after:            Sat 12 Jun 2027 02:28:06 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 03:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7a:d4:77:1f:09:13:f1:72:1d:96:a9:a0:87:c1:3b:19:d2:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Jun 13 02:23:06 2026 GMT
            Not After : Jun 12 02:28:06 2027 GMT
        Subject: CN=3C1BB5FC30895A53EB98A7075A94CF9661A72C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:23:ea:f4:d4:78:9e:97:c6:5f:1b:5c:5a:
                    bd:e5:0b:f6:62:d4:a9:56:2d:58:13:5b:fc:0a:f8:
                    b8:94:e3:88:62:41:32:26:b2:41:a8:1c:cd:8a:b3:
                    73:b4:de:5f:6c:a9:85:76:f9:13:e6:8e:bd:4e:a6:
                    f1:87:ab:32:5c:ac:1d:92:d1:6f:f8:24:d1:ce:13:
                    5f:3e:af:49:9c:89:97:02:e6:22:69:88:bb:c4:f7:
                    92:d5:80:f2:96:4a:d7:c5:52:34:ae:d1:42:1f:f8:
                    48:50:63:76:ba:f5:57:ca:a7:63:69:cb:73:18:39:
                    7e:f4:dc:df:14:ee:76:0d:ac:e9:65:8d:a0:99:02:
                    2e:37:44:80:c3:ed:56:dc:1b:c6:a1:0f:87:e4:c9:
                    fe:5a:2b:86:7a:c8:e5:49:e8:97:02:02:4f:18:c8:
                    fa:5c:24:95:71:6b:80:7a:3a:da:86:71:e9:5a:26:
                    35:89:6f:b7:25:cc:0a:ce:42:3c:e8:24:0c:42:84:
                    e3:64:7f:c7:55:80:6c:92:7c:b8:bc:2f:48:45:e4:
                    ae:ec:b7:88:3f:bc:0a:d9:51:34:f8:ae:84:31:d2:
                    ea:51:ee:b7:55:8f:a2:1f:db:4c:7b:0c:0d:b8:f0:
                    63:c1:cc:60:7f:8d:6d:dc:29:b6:27:85:f1:f4:dc:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1B:B5:FC:30:89:5A:53:EB:98:A7:07:5A:94:CF:96:61:A7:2C:69
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:bf:1d:f4:37:c0:15:9e:fc:65:38:ad:c3:f5:00:fc:4c:
         90:9f:36:6a:15:ea:d9:86:50:c2:39:f3:ab:ec:4e:40:b9:27:
         c7:62:6e:0c:32:2a:26:3a:9b:7d:73:a1:05:7e:1d:59:63:7e:
         94:ee:63:38:04:02:0b:fa:de:8d:ed:d6:54:a9:99:51:2b:30:
         92:2f:ac:62:cf:3f:2a:1e:14:2f:01:5a:16:7a:21:38:de:da:
         47:1d:42:eb:6e:ed:79:78:d5:dd:b3:43:c5:be:37:84:9c:9c:
         ef:84:b8:d8:b5:b6:af:0b:65:b0:35:0f:45:17:56:1b:ca:25:
         50:b9:03:a8:1a:f0:ee:a3:c2:38:6e:2f:b4:1b:94:c3:ab:0e:
         2f:d8:ea:1a:e8:92:c9:e5:71:48:54:49:d9:7e:f8:cf:e8:0c:
         d7:5a:ca:a0:eb:97:ee:a6:4a:51:57:c7:2d:a1:29:70:a3:b6:
         60:7a:6e:99:72:e5:b0:82:6d:7a:bb:fc:48:78:6b:2a:71:b4:
         f8:da:e5:48:bd:19:4f:b7:b0:04:ff:de:f2:93:2f:d6:21:b7:
         aa:48:a8:5d:70:98:7e:75:d3:0f:e4:ee:2c:57:94:92:af:47:
         76:5c:86:63:43:66:78:fe:90:54:b0:96:b5:67:9f:75:2b:ae:
         96:f3:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:39:38 2026 by rpki-client