Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3232203d3e20323634303039.roa
File:                     3136382e3232372e3133322e302f32322d3232203d3e20323634303039.roa (raw, json)
Hash identifier:          HTV9Z8qbdGcvria+UqXzv/zMHbJSZh7mDinc/4cu2g0=
Subject key identifier:   9A:9B:5B:3A:B1:84:F1:F6:43:F6:05:F8:0A:A9:12:F5:96:85:A6:12
Certificate issuer:       /CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
Certificate serial:       33E606A2CA32A686B4406CCA6895067B8491D537
Authority key identifier: 0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3232203d3e20323634303039.roa
Signing time:             Tue 30 Jun 2026 11:36:37 +0000
ROA not before:           Tue 30 Jun 2026 11:31:37 +0000
ROA not after:            Tue 29 Jun 2027 11:36:37 +0000
asID:                     264009
IP address blocks:        168.227.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e6:06:a2:ca:32:a6:86:b4:40:6c:ca:68:95:06:7b:84:91:d5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
        Validity
            Not Before: Jun 30 11:31:37 2026 GMT
            Not After : Jun 29 11:36:37 2027 GMT
        Subject: CN=9A9B5B3AB184F1F643F605F80AA912F59685A612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3e:1c:36:a3:73:d9:27:a7:63:b0:da:93:2f:
                    b2:85:ed:f7:9b:ea:96:d8:3f:a5:e2:90:86:46:0a:
                    87:26:11:dc:7f:60:26:60:81:06:35:c2:09:92:ce:
                    fd:02:a7:74:84:5f:2c:8e:11:7b:37:09:b2:c3:b7:
                    86:68:88:34:04:29:e1:57:fb:99:2c:9f:35:5b:01:
                    92:56:70:db:8d:98:25:1d:a4:d7:a3:db:65:be:ae:
                    39:a1:58:14:1e:aa:9d:24:46:b2:8f:02:ec:b2:36:
                    7f:8c:95:1b:4c:04:b6:69:f0:37:61:22:68:96:ab:
                    b8:3b:94:1d:f9:ef:8c:95:04:aa:ed:41:90:01:45:
                    4c:dc:71:78:82:ee:5a:64:79:87:83:83:0e:da:2a:
                    10:b8:24:67:ba:ba:8a:86:f8:1a:c6:f3:2a:3f:c1:
                    2d:64:0e:64:90:00:2c:41:76:45:4c:e1:1d:45:0f:
                    65:db:b6:7b:60:9d:29:a3:01:a7:12:12:51:8e:f1:
                    6c:c9:4a:c0:c8:ca:a8:0e:70:a5:91:c4:3a:22:37:
                    28:ee:42:30:20:d6:06:33:e4:67:8b:32:84:cf:e3:
                    dc:6d:5e:94:4d:a9:88:1b:11:3b:60:b1:30:a5:2d:
                    3a:e3:c5:f6:0f:71:eb:88:c5:31:53:02:c7:f9:d6:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:5B:3A:B1:84:F1:F6:43:F6:05:F8:0A:A9:12:F5:96:85:A6:12
            X509v3 Authority Key Identifier:
                keyid:0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32322d3232203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:7b:68:dd:b5:f1:23:b6:56:ed:66:42:01:7b:93:67:74:81:
         7f:e1:00:66:f8:99:be:17:81:6c:20:c2:3e:c6:66:75:f4:e7:
         6b:77:5e:56:96:2e:59:e6:2e:29:94:b2:d0:2c:ac:7c:04:8a:
         29:66:bd:4f:26:d7:2a:ce:df:20:68:f4:e3:17:98:f1:98:cc:
         80:8a:d0:ab:e0:0b:33:f3:6c:f5:c6:c0:5e:70:f1:44:85:b2:
         87:56:b3:cf:5d:c4:e3:64:97:8c:d6:d2:0b:d4:d8:31:f4:1b:
         b3:0a:ab:d5:5b:41:73:fe:0c:87:79:ff:79:15:a9:21:c1:21:
         4d:63:8f:17:9e:88:96:11:90:43:b7:64:65:1a:30:28:19:88:
         2e:a0:e7:0d:1d:8c:c9:56:1a:d7:a7:3e:f6:08:0e:04:38:88:
         bf:81:60:8d:6f:c2:87:1a:74:2a:1a:e8:7d:cc:b7:b3:3b:66:
         55:ff:97:03:82:4d:62:1d:24:44:00:eb:b8:53:12:6c:ad:32:
         75:72:30:00:41:60:45:4c:dd:33:a4:f6:18:2d:d9:e3:64:61:
         66:a1:a0:7a:77:1d:c8:12:cb:35:53:4f:45:18:b9:b2:5c:e4:
         31:04:a1:78:c9:eb:1f:0e:78:30:a4:27:fa:5b:84:5a:da:62:
         91:07:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:10:40 2026 by rpki-client