Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137332e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137332e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          jZJGuoS/6qF7jjzm75MwOSf/86GdjAWqCDDRImo72gc=
Subject key identifier:   96:8E:33:15:0E:B4:47:F5:F3:E0:13:36:23:D2:2D:68:62:30:C9:AF
Certificate issuer:       /CN=4642EFFE9A5A87B998C9CB16FDC7133EB8E36171
Certificate serial:       6203712EC243CB398EBF678B44BBFCEE715A648A
Authority key identifier: 46:42:EF:FE:9A:5A:87:B9:98:C9:CB:16:FD:C7:13:3E:B8:E3:61:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137332e302f32342d3234203d3e20323731353636.roa
Signing time:             Wed 03 Jun 2026 22:40:37 +0000
ROA not before:           Wed 03 Jun 2026 22:35:37 +0000
ROA not after:            Wed 02 Jun 2027 22:40:37 +0000
asID:                     271566
IP address blocks:        179.63.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 23:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:71:2e:c2:43:cb:39:8e:bf:67:8b:44:bb:fc:ee:71:5a:64:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4642EFFE9A5A87B998C9CB16FDC7133EB8E36171
        Validity
            Not Before: Jun  3 22:35:37 2026 GMT
            Not After : Jun  2 22:40:37 2027 GMT
        Subject: CN=968E33150EB447F5F3E0133623D22D686230C9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:7d:31:da:8e:38:7d:6e:a2:79:57:09:b3:
                    fd:e9:dd:a6:99:a3:82:10:7c:23:00:90:82:db:f1:
                    47:d2:a1:f0:cf:a2:00:72:ec:63:8d:5c:e2:6c:a7:
                    bd:88:ff:00:d2:17:42:0e:82:8f:4c:d2:5c:9f:45:
                    1d:f3:b8:fa:c3:25:6d:11:94:48:f6:c6:76:e1:31:
                    ae:27:d7:dd:ca:32:dc:93:f3:60:70:33:a3:cb:f1:
                    2f:1a:89:7d:fc:8a:09:88:e2:bb:42:b3:21:99:73:
                    53:2b:b2:01:0d:9d:66:cd:5a:af:e0:85:dc:03:f6:
                    2b:02:67:85:c0:6a:18:b6:ad:0d:65:a7:13:b4:e3:
                    4f:ea:ff:6b:f8:b5:02:6c:2b:b2:49:2d:c2:93:de:
                    ca:13:d7:ee:77:62:71:2a:9a:dc:1a:8a:6b:30:29:
                    fa:df:8d:3d:09:92:fe:46:28:b8:46:2d:d6:c0:2b:
                    8a:98:74:3f:f9:20:2d:22:97:0b:7b:18:b5:f3:ea:
                    18:33:b5:a3:88:e1:ef:6d:fb:b9:88:90:2b:b7:24:
                    15:5a:81:db:f8:66:98:7c:b3:d2:00:6d:e0:9b:3a:
                    53:24:ea:aa:fb:71:5e:87:49:1b:b3:60:67:00:00:
                    6d:8b:41:f6:f4:80:7d:1d:ac:b6:7a:00:bb:b4:c8:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8E:33:15:0E:B4:47:F5:F3:E0:13:36:23:D2:2D:68:62:30:C9:AF
            X509v3 Authority Key Identifier:
                keyid:46:42:EF:FE:9A:5A:87:B9:98:C9:CB:16:FD:C7:13:3E:B8:E3:61:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137332e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e4:b8:cc:5f:4b:40:34:54:1f:1c:cd:fa:fd:34:38:69:1e:
         84:3e:a7:ca:e8:c8:b6:de:02:c5:3d:6f:d9:b5:73:c3:3a:a4:
         69:7c:a4:47:41:d2:07:35:7a:1d:a5:c0:a1:d2:a3:16:c9:79:
         e5:f9:35:45:9d:b0:81:11:a1:7b:f4:20:eb:2d:e0:5a:e3:fe:
         6d:42:0a:ab:2a:a5:9f:f4:aa:1e:0f:9f:92:d4:eb:aa:a0:48:
         f8:b2:91:20:d2:9b:93:f9:37:53:b8:1b:21:62:51:91:ae:15:
         79:7c:66:da:17:c6:bd:70:90:78:ae:c5:68:58:af:32:77:2a:
         b5:ab:e5:25:6d:0f:15:b0:87:d2:f9:0b:6e:70:27:95:6c:e7:
         64:55:dc:c5:72:43:1a:d6:f4:47:11:bc:c2:5c:63:b3:d9:5d:
         7e:09:25:b8:f8:7a:09:e5:3a:9e:63:e9:30:1d:65:dc:50:e0:
         09:cf:b2:0d:64:a9:c9:6c:03:43:8e:34:da:b7:e5:9c:d1:fc:
         7e:a1:6a:d0:1e:55:a0:25:35:df:ab:8a:5d:dd:78:6c:00:c3:
         2d:fc:37:b4:aa:e1:01:40:04:ce:47:0d:dd:be:07:a2:bb:c7:
         31:32:d3:6c:15:46:f1:c2:0a:27:42:9d:06:24:8f:a1:15:8c:
         f2:fe:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:24:39 2026 by rpki-client