Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa
File:                     3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa (raw, json)
Hash identifier:          WJkxi7Rvyg5volz3dXuJICzuq58nbCX8n3csbxWtbME=
Subject key identifier:   F3:56:85:B1:07:8F:C3:73:58:40:D2:34:4E:DD:EC:F3:28:95:90:9B
Certificate issuer:       /CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
Certificate serial:       07F87DCC5C73987DBD3DF457C0634E1DC9DE1083
Authority key identifier: 9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa
Signing time:             Fri 19 Jun 2026 20:01:03 +0000
ROA not before:           Fri 19 Jun 2026 19:56:03 +0000
ROA not after:            Fri 18 Jun 2027 20:01:03 +0000
asID:                     1916
IP address blocks:        200.133.192.0/19 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl
                          rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 02 Jul 2026 01:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f8:7d:cc:5c:73:98:7d:bd:3d:f4:57:c0:63:4e:1d:c9:de:10:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD
        Validity
            Not Before: Jun 19 19:56:03 2026 GMT
            Not After : Jun 18 20:01:03 2027 GMT
        Subject: CN=F35685B1078FC3735840D2344EDDECF32895909B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:2f:37:aa:69:ce:bc:5d:43:eb:f6:8d:4f:
                    ed:1a:52:b6:2c:31:17:dc:ef:b0:dc:ca:ab:f6:63:
                    69:a2:07:3c:c3:f8:6f:23:99:fd:55:e6:b6:9b:e0:
                    73:ab:30:ce:e1:94:a9:d3:4f:d7:ba:c7:cf:c9:7c:
                    b5:cf:c0:cc:b1:e8:0d:6c:05:d0:1e:fe:0f:43:11:
                    23:b9:d0:29:72:10:7c:87:5d:28:90:f2:8b:10:94:
                    83:83:9a:10:4d:6c:56:af:cc:3f:11:c6:7b:30:6b:
                    1e:30:70:69:16:94:48:0f:be:3d:8b:5f:66:23:26:
                    c5:46:3c:35:39:78:ca:0b:bf:1f:0b:61:0b:59:17:
                    68:05:78:f0:41:b4:3e:03:46:c1:d1:09:cb:90:0b:
                    de:88:80:b1:b1:c4:8d:f6:b7:70:4f:14:9f:57:73:
                    94:ad:3d:c2:12:2e:85:e2:c5:97:9f:97:98:5f:a7:
                    6e:bd:14:0f:74:9f:a9:59:0b:60:bd:da:82:46:b4:
                    61:e0:9d:22:88:c1:b6:13:6c:7a:8e:05:b0:fb:84:
                    63:17:4d:7c:13:12:7c:5c:e2:c3:49:bc:23:05:fd:
                    db:5b:a2:36:54:cb:be:ce:b1:98:15:b9:a1:a6:ee:
                    15:3c:2a:c0:69:e1:e5:b8:66:b6:cb:86:9c:4c:3b:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:56:85:B1:07:8F:C3:73:58:40:D2:34:4E:DD:EC:F3:28:95:90:9B
            X509v3 Authority Key Identifier:
                keyid:9C:26:39:5E:84:B6:16:8C:D8:93:F9:5E:DA:C6:D4:BD:C4:C7:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C26395E84B6168CD893F95EDAC6D4BDC4C7C9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e3139322e302f31392d3237203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:8c:60:fd:e1:ef:ff:32:39:ab:8e:90:66:36:c0:e6:92:
         4a:f6:80:42:e8:af:07:8d:41:b0:79:8c:3b:80:dc:7d:71:83:
         28:cb:9e:35:7e:1f:04:3b:32:5b:60:22:dc:2f:20:36:9f:dd:
         ba:97:11:f9:b9:69:16:e5:bc:fa:94:68:71:6a:93:9f:af:5b:
         df:be:e9:85:f2:04:17:44:4e:4f:07:1e:35:4d:1c:9a:ba:a9:
         b0:57:2f:c7:a9:e8:bc:ad:88:23:fa:4a:3a:f8:80:a3:1b:b0:
         b0:a0:0c:c9:0a:96:1a:e0:df:28:e7:21:a5:f2:ed:48:81:a9:
         65:5e:7c:fa:2f:da:a1:e8:2e:2e:88:38:87:39:a9:d0:35:ab:
         bb:71:82:f4:af:f8:5e:c2:bd:e2:27:2e:3b:e1:b7:90:24:47:
         bc:df:1e:ff:29:58:d3:ac:b6:ca:cc:c9:dd:ed:b5:0f:2e:74:
         7e:7d:81:81:4a:6f:6d:59:f4:1c:95:ed:cb:24:2f:58:c3:0a:
         12:8c:0d:c0:20:81:e0:fd:2f:34:06:0e:19:90:39:d8:bf:66:
         8a:96:83:58:d3:af:63:ff:a2:29:18:ae:bf:6a:1b:a7:e0:05:
         dd:ff:24:a0:80:54:ea:f5:de:14:3c:6d:9b:db:82:90:cf:68:
         08:20:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 08:22:12 2026 by rpki-client