Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3234203d3e20323639303733.roa
File:                     3133382e39342e3132342e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          O0W+2jBzgDyLm9V9QXaJPL8LnzQlsxfV9bglMffb4lw=
Subject key identifier:   FA:17:85:37:6C:D2:4B:2D:75:E9:70:3B:BE:F5:7E:A1:48:56:22:5C
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       6A0D456A61E0E7ED05EBCE9535B24C2FF3335283
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3234203d3e20323639303733.roa
Signing time:             Mon 08 Jun 2026 12:44:21 +0000
ROA not before:           Mon 08 Jun 2026 12:39:21 +0000
ROA not after:            Mon 07 Jun 2027 12:44:21 +0000
asID:                     269073
IP address blocks:        138.94.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl
                          rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 23:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0d:45:6a:61:e0:e7:ed:05:eb:ce:95:35:b2:4c:2f:f3:33:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Jun  8 12:39:21 2026 GMT
            Not After : Jun  7 12:44:21 2027 GMT
        Subject: CN=FA1785376CD24B2D75E9703BBEF57EA14856225C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:39:af:2d:8c:4f:17:a5:4c:e2:75:64:44:
                    bf:c7:7b:69:73:21:ac:ab:5f:3d:32:16:a9:83:05:
                    ce:9a:53:a1:e8:49:e5:14:e0:75:52:bb:f4:cb:23:
                    68:bb:dc:3a:8b:a3:20:e0:73:c7:68:30:dd:cf:61:
                    41:af:70:30:f2:94:07:41:1f:b1:9d:85:4a:22:01:
                    17:59:aa:89:89:9b:df:47:46:3d:dc:96:aa:04:da:
                    04:55:f4:f4:65:92:ef:ba:35:98:d0:8f:12:6c:0e:
                    a2:a3:62:5d:a3:82:23:bf:8c:e7:46:39:f2:c4:4a:
                    09:e4:00:04:5f:ab:bc:ca:29:72:9d:0f:28:a3:e9:
                    1d:ef:fe:78:17:cd:5e:88:2d:fe:47:16:e3:f9:31:
                    44:09:83:95:9d:b0:10:59:d7:15:e9:f3:a8:15:c8:
                    3b:06:87:29:aa:dd:9d:41:ea:06:7e:a8:34:71:81:
                    ff:3e:3e:df:9b:05:f2:d7:b6:4c:6c:09:10:1c:b3:
                    9d:a4:76:25:60:f2:84:fe:6e:d4:2e:7f:78:c0:16:
                    26:86:86:6b:f3:c7:ac:2d:55:02:27:93:ef:21:00:
                    6b:1f:ba:8f:09:27:71:5b:0b:b9:e0:d4:9c:08:b7:
                    79:e7:e3:0b:0c:37:7e:e6:83:51:2a:e5:2f:b7:16:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:85:37:6C:D2:4B:2D:75:E9:70:3B:BE:F5:7E:A1:48:56:22:5C
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3133382e39342e3132342e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:45:22:87:07:c8:48:f6:e8:41:36:83:19:79:be:20:1f:
         94:83:dd:a4:c2:f1:52:b1:19:fe:1e:94:e2:f7:47:a4:0b:2f:
         b3:55:31:cd:37:f6:c4:8c:1e:fd:1b:1f:13:fa:3d:33:1c:4c:
         cb:83:85:69:ca:f2:1a:7e:fb:03:7d:77:e1:39:69:5a:84:51:
         0b:10:af:d9:81:ed:ef:13:3b:d6:76:6b:3f:ec:87:77:75:0a:
         9f:3f:10:04:2d:75:91:56:dc:94:06:58:8b:34:00:e5:91:df:
         ae:d4:a0:b1:bc:7b:0a:f2:a5:a2:34:1c:8b:13:1c:eb:d2:fc:
         07:b7:be:d5:0e:bf:34:3b:03:c2:43:27:12:25:3b:6f:82:d1:
         4d:b9:4d:40:cd:e3:3e:c7:9e:16:d7:c0:e9:f2:af:44:41:e1:
         be:f7:e7:6e:db:66:2f:52:2e:7b:40:c4:0e:b1:40:a3:ef:fc:
         66:8d:14:82:55:6e:42:87:3d:51:4e:ca:fb:52:65:ad:45:ce:
         93:6f:b4:1b:bc:92:73:42:7d:cb:41:9f:c8:93:07:c3:68:9b:
         fa:45:b3:3e:8e:1a:f0:da:84:f4:93:de:9b:a8:36:9e:68:1b:
         6a:3c:a3:5b:88:64:00:9f:b3:4a:2f:71:c0:96:01:08:50:3f:
         92:10:da:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:21:45 2026 by rpki-client