Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3237203d3e2031393136.roa
File:                     3135302e3136352e302e302f31362d3237203d3e2031393136.roa (raw, json)
Hash identifier:          F6P/LiiU6cOyw1NR44E7LTJOtzd0CXtybs/ei6UygJY=
Subject key identifier:   0A:75:57:9B:CB:C7:3C:72:70:45:4C:33:0A:6C:13:A8:9B:86:DB:A2
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       28EE1FED898A397D5CBCA89D3CFC06E77F0AEB17
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:04 +0000
ROA not before:           Fri 19 Jun 2026 19:56:04 +0000
ROA not after:            Fri 18 Jun 2027 20:01:04 +0000
asID:                     1916
IP address blocks:        150.165.0.0/16 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:1f:ed:89:8a:39:7d:5c:bc:a8:9d:3c:fc:06:e7:7f:0a:eb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:04 2026 GMT
            Not After : Jun 18 20:01:04 2027 GMT
        Subject: CN=0A75579BCBC73C7270454C330A6C13A89B86DBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:37:91:e4:03:94:d9:59:d0:a9:16:59:ea:
                    ff:93:61:fd:ff:73:bf:3f:63:ed:64:e0:95:2a:13:
                    e0:38:85:83:07:8a:00:20:1d:33:2d:14:9d:9e:21:
                    aa:d7:5e:ca:02:5b:64:f2:51:36:e1:0c:6b:01:a7:
                    bf:f2:cf:32:3f:24:7e:01:c8:8b:6c:8d:ca:dd:8f:
                    b2:12:1b:95:66:4e:bb:7a:aa:fe:02:b1:02:02:55:
                    bc:c1:40:d7:19:a5:8b:17:6d:56:7a:de:7e:25:de:
                    be:03:99:cc:78:e9:a8:ae:20:ed:52:f3:e4:07:f3:
                    20:e7:4c:e9:9a:dd:17:82:e0:93:30:d5:43:1c:ea:
                    82:cb:4e:75:0f:a4:02:35:24:f6:98:8c:75:79:90:
                    7c:0d:a8:7c:f3:fa:d3:d6:9c:74:66:60:f6:b0:46:
                    0e:45:72:b7:1e:53:8b:62:3f:23:46:d4:e0:a9:59:
                    2b:de:ad:7e:f1:80:be:9d:40:72:8a:f5:01:3a:d4:
                    57:32:16:6a:61:62:8e:48:6d:d0:12:59:ee:bf:26:
                    21:55:70:d4:99:51:eb:c9:df:ad:6c:3d:4f:51:11:
                    58:8f:ef:5e:1d:2a:7e:26:fd:eb:ea:f6:79:81:38:
                    62:f5:3a:e5:6d:cf:c2:ef:59:84:07:7f:db:38:7a:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:57:9B:CB:C7:3C:72:70:45:4C:33:0A:6C:13:A8:9B:86:DB:A2
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:44:67:12:35:9a:dd:73:3c:32:4e:c7:3f:4a:43:87:aa:
         a4:46:a8:4c:a8:66:90:6e:71:c4:2c:31:71:43:b7:79:8a:f6:
         f4:7b:2e:04:88:93:02:63:67:34:3b:58:f0:a4:f6:48:e7:b9:
         06:29:01:6a:f2:e5:5a:00:03:6d:54:e5:95:49:4c:a9:fe:7b:
         19:29:b4:5b:e7:09:fd:b9:0b:3f:ed:c3:b5:c2:d8:5b:50:f0:
         9b:13:cf:85:d4:55:ae:03:65:03:b1:61:db:7b:7f:bd:87:43:
         bf:a5:0f:d8:17:ea:70:7c:46:fc:37:ce:fe:5c:40:28:67:5f:
         87:c4:38:21:6d:35:30:25:3e:de:3d:45:de:7c:df:4d:ae:81:
         b0:50:fb:f5:e7:ad:36:57:2d:72:79:9f:b9:c3:78:c2:7f:50:
         1e:3b:84:e0:f3:eb:62:bb:06:91:24:95:fb:bb:47:29:fe:43:
         a6:d4:47:19:ba:1b:5a:2a:80:32:57:3c:17:65:ff:21:66:dc:
         11:3b:9c:67:43:fc:fb:da:6d:fc:54:2e:40:3f:d8:27:cb:86:
         de:1e:c4:31:85:bc:e0:da:f8:38:9e:65:5b:44:bb:e6:4e:cd:
         74:e9:14:cf:8d:b7:6d:55:52:c9:96:f3:62:80:4a:40:12:55:
         c7:4f:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:21:42 2026 by rpki-client