Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132362e302f32342d3234203d3e20323634343131.roa
File:                     3133382e3230342e3132362e302f32342d3234203d3e20323634343131.roa (raw, json)
Hash identifier:          F1072duKJA+7PREIZnJkiT42eXaa23MQZN4yoczIYeg=
Subject key identifier:   F6:25:68:CF:61:02:5F:16:B8:41:86:1A:9E:B5:73:C6:B1:FD:E5:30
Certificate issuer:       /CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
Certificate serial:       5D09F93DB9021CD62F9BB8B46238951AF7108C3C
Authority key identifier: 0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132362e302f32342d3234203d3e20323634343131.roa
Signing time:             Tue 09 Jun 2026 11:48:43 +0000
ROA not before:           Tue 09 Jun 2026 11:43:43 +0000
ROA not after:            Tue 08 Jun 2027 11:48:43 +0000
asID:                     264411
IP address blocks:        138.204.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl
                          rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:09:f9:3d:b9:02:1c:d6:2f:9b:b8:b4:62:38:95:1a:f7:10:8c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FC679D7315FDF14EBEF014559AE8C78EC5497FE
        Validity
            Not Before: Jun  9 11:43:43 2026 GMT
            Not After : Jun  8 11:48:43 2027 GMT
        Subject: CN=F62568CF61025F16B841861A9EB573C6B1FDE530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:64:b0:d2:82:13:c4:da:bf:fc:13:43:82:
                    a9:69:5d:ba:f3:3e:3c:05:15:c7:a9:e3:2b:e1:3c:
                    e8:87:2b:7d:99:4f:e2:6d:c5:07:61:49:55:14:85:
                    f1:29:e6:1e:8d:7a:e1:4f:52:13:2c:b7:77:4f:61:
                    56:f7:a3:3a:2e:6c:16:15:36:f0:ef:e4:b7:86:fd:
                    27:32:ef:1a:b6:0f:5a:2e:34:ec:bc:86:22:0b:f8:
                    1b:42:a4:e0:f2:d5:ac:d2:8f:13:01:d6:d6:60:74:
                    40:23:fa:5b:c6:66:7a:cf:95:34:70:ae:4e:a1:47:
                    87:ee:b4:23:57:12:eb:4a:bc:b3:32:69:42:4d:14:
                    8b:83:6e:a8:04:21:4b:b2:72:2a:77:b8:77:e8:e7:
                    cf:be:59:9f:48:cf:b6:d8:e5:e0:be:8e:b0:77:1d:
                    67:05:9b:7e:c3:36:1b:ec:eb:09:4d:6c:59:b2:92:
                    6c:65:91:f1:11:07:07:ea:9f:23:17:e6:7e:8c:9d:
                    21:48:54:eb:be:d3:bf:e8:de:c9:f1:54:a0:7d:5b:
                    98:e5:a6:42:32:42:1e:ee:25:94:35:fa:6a:72:21:
                    4f:26:2d:ac:b0:71:4b:4e:c3:e2:51:b6:e8:db:de:
                    a3:1c:f1:91:12:06:82:b5:24:a1:a3:d6:37:3b:d9:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:25:68:CF:61:02:5F:16:B8:41:86:1A:9E:B5:73:C6:B1:FD:E5:30
            X509v3 Authority Key Identifier:
                keyid:0F:C6:79:D7:31:5F:DF:14:EB:EF:01:45:59:AE:8C:78:EC:54:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FC679D7315FDF14EBEF014559AE8C78EC5497FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKDt1F2DTnutSYxRfqhDGvrtB9DfEcqGRPrRLuWQakew/0/3133382e3230342e3132362e302f32342d3234203d3e20323634343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:92:e6:36:64:2f:89:84:49:4c:5b:e2:60:c7:81:15:71:5f:
         d1:a8:b6:4c:99:a7:06:72:f8:e8:da:8c:a9:8e:12:b3:59:8b:
         76:6b:74:52:cc:9f:da:a1:1c:4f:d8:62:0e:55:56:44:e3:16:
         bb:b9:be:c3:4b:6f:2c:e8:cc:fe:f5:53:2b:07:ba:4f:2a:0d:
         38:c5:b7:bc:d0:70:6e:ce:fa:1c:c5:f7:09:b4:c0:d9:55:a3:
         2b:47:02:29:75:8e:9f:6b:64:75:2e:70:04:53:40:5f:b0:7a:
         94:5c:81:35:33:87:3a:cf:65:57:85:b9:54:35:6f:58:8f:8d:
         a6:83:2b:df:1e:68:f1:c9:c4:22:8b:74:b8:d0:9d:69:ac:94:
         00:12:29:d9:3f:fe:09:c4:4e:b5:6f:84:80:61:9e:4c:ab:86:
         13:3a:dc:f3:d8:ac:58:7c:9d:4f:fe:38:6a:e8:96:df:dc:d8:
         16:87:77:d7:45:a6:7b:55:50:20:6f:f4:20:b0:94:10:c9:1c:
         8d:9b:a5:25:34:4e:a4:10:49:89:c9:92:c1:56:36:e1:30:5b:
         7e:bd:2f:fe:3a:48:18:bd:c8:88:26:60:03:6a:94:26:26:e8:
         db:71:1c:8e:5e:fd:97:7c:02:c9:ee:11:9b:d1:c0:5b:f4:d7:
         1c:c2:26:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:52 2026 by rpki-client