Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32342d3234203d3e20323731353636.roa
File:                     3137392e36332e3137342e302f32342d3234203d3e20323731353636.roa (raw, json)
Hash identifier:          Ct6uUzmKa6DBnFmcFG3cuoDrsnX8cZmbAyPgLL9DrmY=
Subject key identifier:   1F:9B:E8:DB:A2:13:FC:BE:4F:63:9B:A0:15:97:C4:A7:3D:F1:52:90
Certificate issuer:       /CN=4642EFFE9A5A87B998C9CB16FDC7133EB8E36171
Certificate serial:       2FB16D6F0EEB81E841DC553C7C25381C96278BA1
Authority key identifier: 46:42:EF:FE:9A:5A:87:B9:98:C9:CB:16:FD:C7:13:3E:B8:E3:61:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32342d3234203d3e20323731353636.roa
Signing time:             Wed 03 Jun 2026 22:40:38 +0000
ROA not before:           Wed 03 Jun 2026 22:35:38 +0000
ROA not after:            Wed 02 Jun 2027 22:40:38 +0000
asID:                     271566
IP address blocks:        179.63.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.crl
                          rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 23:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b1:6d:6f:0e:eb:81:e8:41:dc:55:3c:7c:25:38:1c:96:27:8b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4642EFFE9A5A87B998C9CB16FDC7133EB8E36171
        Validity
            Not Before: Jun  3 22:35:38 2026 GMT
            Not After : Jun  2 22:40:38 2027 GMT
        Subject: CN=1F9BE8DBA213FCBE4F639BA01597C4A73DF15290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:d8:44:fc:ce:ec:3a:7f:cd:43:e0:0b:99:
                    2a:4a:8b:0e:28:5c:02:24:32:f1:3c:b0:8e:49:36:
                    bc:1b:73:e2:63:66:ae:f1:27:8a:71:27:d8:d1:03:
                    42:94:75:d3:fe:6f:3b:11:f0:9d:b3:6d:43:7d:71:
                    fc:56:51:d0:33:06:e0:c3:f5:e1:2a:5e:dd:af:57:
                    ec:18:30:86:58:cd:14:76:4e:8a:e5:52:ca:f8:fd:
                    18:2e:32:25:a3:3a:1a:e8:6f:1e:9c:c9:5a:47:8d:
                    c3:3e:e7:08:b5:87:3c:ea:55:ec:c8:82:97:a7:9d:
                    c8:a0:95:17:88:57:ed:91:f6:a5:c7:03:51:10:cf:
                    4e:eb:c8:bc:99:d4:a5:b8:64:00:38:1a:f4:ce:59:
                    06:49:71:6d:0d:a5:f5:ce:14:d1:ab:fc:ba:c5:5e:
                    48:94:93:13:33:0d:f9:3b:6d:8e:f4:6e:5c:7e:ed:
                    64:3b:0f:6e:b9:68:3c:2a:2a:f6:77:9e:e5:d3:89:
                    b2:61:ab:59:e3:95:30:09:e8:eb:b7:a7:b5:4d:e4:
                    8a:75:f8:a2:3b:d0:74:5e:d1:1e:44:d6:fb:44:c6:
                    97:9e:11:52:4e:11:fe:79:83:17:6f:69:d9:50:3c:
                    2e:89:b7:8d:7c:03:82:90:bc:64:d5:67:95:49:07:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9B:E8:DB:A2:13:FC:BE:4F:63:9B:A0:15:97:C4:A7:3D:F1:52:90
            X509v3 Authority Key Identifier:
                keyid:46:42:EF:FE:9A:5A:87:B9:98:C9:CB:16:FD:C7:13:3E:B8:E3:61:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4642EFFE9A5A87B998C9CB16FDC7133EB8E36171.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/3137392e36332e3137342e302f32342d3234203d3e20323731353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:55:5d:36:01:d8:dd:2c:2a:d8:83:6a:f7:23:da:2c:a8:
         2b:a2:5e:68:4b:71:10:9f:c4:eb:c9:5e:2d:fc:ac:fe:40:e0:
         fe:74:87:bf:1b:cc:93:09:5a:af:d0:3f:f5:d3:e8:fc:d3:6b:
         ab:39:0d:9b:7a:f2:e8:f4:f1:77:0b:92:b7:f8:e0:db:05:3a:
         53:1b:8d:f5:f6:88:d0:f5:b4:6a:6f:12:27:93:97:57:7e:17:
         31:d0:fa:d2:9c:36:aa:67:a5:64:ff:6f:6d:bd:21:fc:ac:47:
         c9:cb:a2:49:31:d8:d6:76:00:98:2f:d4:5b:0e:63:f9:ae:c0:
         74:22:07:f2:4f:04:9f:08:5f:77:10:57:7f:a5:f6:d2:45:86:
         eb:b0:c1:b1:d2:dd:b3:91:cf:a5:fd:04:c2:de:a7:8a:2d:78:
         a9:9b:77:81:a8:40:7a:7f:22:73:c5:ff:f5:c3:34:ad:b0:ff:
         6b:f2:5a:29:d0:23:96:5d:e5:22:30:70:c0:52:0a:fc:61:37:
         3e:34:c4:4e:b9:4c:d3:72:86:29:64:6e:34:03:27:84:4d:20:
         d6:4c:8f:c2:00:ef:5a:a3:c2:9e:96:7d:0d:4d:6d:40:bc:c7:
         83:9a:6c:48:25:48:d1:45:de:03:5b:8d:30:0f:93:67:c9:5f:
         1f:c1:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:24:43 2026 by rpki-client