Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3232203d3e20323633303938.roa
File:                     3136372e3234392e3138302e302f32322d3232203d3e20323633303938.roa (raw, json)
Hash identifier:          7Td7FFcYBTFSrv4RpwYnFZC9hyAxglj07eLd2l6hVUk=
Subject key identifier:   35:1E:69:97:7F:16:66:02:7C:EA:65:8A:D4:42:CA:A4:BC:41:31:34
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       779B6358CA6DFFCD288D8C2DC579803528C328EF
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3232203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:26 +0000
ROA not before:           Wed 03 Jun 2026 16:06:26 +0000
ROA not after:            Wed 02 Jun 2027 16:11:26 +0000
asID:                     263098
IP address blocks:        167.249.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9b:63:58:ca:6d:ff:cd:28:8d:8c:2d:c5:79:80:35:28:c3:28:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:26 2026 GMT
            Not After : Jun  2 16:11:26 2027 GMT
        Subject: CN=351E69977F1666027CEA658AD442CAA4BC413134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:8f:8e:ef:14:ed:02:ac:ac:90:39:40:b7:
                    1b:b9:0e:14:35:47:df:1d:b3:eb:37:4a:58:10:0e:
                    31:19:3f:ce:b6:50:8e:ea:cf:4d:6e:82:63:5f:36:
                    6c:c3:38:4a:fd:96:84:e7:bc:4e:00:ac:49:03:a0:
                    74:3e:06:f1:8c:73:83:2d:b3:df:3b:dc:33:ce:74:
                    2a:3b:a2:fc:33:a8:98:01:25:ed:0a:d5:38:87:88:
                    08:f3:f2:3b:3f:6f:54:ef:a8:8c:8d:1a:bf:d6:c5:
                    7a:bb:2b:22:61:51:24:2e:7d:4b:bb:b9:90:c9:08:
                    5a:cc:fe:52:23:00:87:d6:2c:2e:ae:71:3c:46:b2:
                    19:14:61:06:9b:84:72:2a:15:d7:6c:0d:3e:3a:d1:
                    77:78:03:57:e5:17:63:a4:1c:1f:38:9a:1c:85:92:
                    2e:1a:89:55:2c:3a:68:08:9c:93:3b:96:b4:c4:89:
                    f3:40:69:83:c1:95:cf:b6:90:d4:f6:62:88:e7:68:
                    39:b0:96:52:8b:0e:ab:fc:52:40:cd:be:76:7a:21:
                    b6:eb:4d:d2:79:83:9b:71:3c:c9:ac:4a:37:06:71:
                    bc:c5:d3:a4:47:0c:9a:af:59:8d:b5:80:27:53:0e:
                    62:b6:a4:5d:c7:fb:22:2c:73:f4:55:2a:59:c7:dc:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:1E:69:97:7F:16:66:02:7C:EA:65:8A:D4:42:CA:A4:BC:41:31:34
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3136372e3234392e3138302e302f32322d3232203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:4c:19:85:45:76:bd:41:bc:17:34:83:f1:59:56:92:49:cf:
         fc:9f:24:53:86:f1:98:2a:b9:a9:ce:a5:bf:dc:2f:5b:ca:4d:
         c3:8e:9e:93:7b:18:38:8c:95:bb:1c:7f:c5:eb:20:76:a7:d1:
         4d:18:42:93:e5:10:d0:4c:b1:74:18:9c:66:d2:1f:78:b5:b2:
         24:5a:c6:fd:9f:fc:43:7f:dc:97:b3:1f:25:b7:58:37:51:6e:
         f9:01:a1:04:fe:8a:08:c2:26:8a:44:01:5a:ac:82:df:cd:29:
         00:88:60:ae:e7:1b:d1:5a:1e:23:d4:46:96:25:c2:03:59:64:
         61:18:95:e1:74:1a:c3:d6:d8:3a:6b:12:62:d0:15:ad:32:a4:
         73:59:ff:68:58:0f:8a:06:c4:07:17:b8:40:1d:8f:f0:c7:ab:
         17:07:a6:31:50:bd:2a:6e:73:1f:16:d7:68:84:69:5c:ba:35:
         c9:1a:7c:47:91:0a:dd:04:4f:50:d7:88:a5:59:bf:d0:19:94:
         f8:42:d7:e1:a7:a4:47:e3:f1:dc:25:79:b8:d4:08:32:46:4d:
         9e:86:18:61:2d:40:25:b8:62:b7:1d:83:cc:28:99:6a:b1:9c:
         e6:31:9a:c8:21:23:02:a4:80:02:aa:cd:8c:1d:6c:6b:25:7a:
         0b:56:e6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:01 2026 by rpki-client