Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/3138392e31342e3132302e302f32322d3332203d3e20323730383330.roa
File:                     3138392e31342e3132302e302f32322d3332203d3e20323730383330.roa (raw, json)
Hash identifier:          TulesmD/Z2Qee7aukSQ2ikdz67BBWP64Bh1rlpVAXZQ=
Subject key identifier:   8E:93:2A:94:1D:30:90:FE:43:AB:E3:C8:AA:CB:82:8B:65:0C:EE:C9
Certificate issuer:       /CN=6EC6AF6C2208BA1658C391D2395E6C34363DD843
Certificate serial:       5511791787A78F9B284FCE069D4796ECC4012E67
Authority key identifier: 6E:C6:AF:6C:22:08:BA:16:58:C3:91:D2:39:5E:6C:34:36:3D:D8:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EC6AF6C2208BA1658C391D2395E6C34363DD843.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/3138392e31342e3132302e302f32322d3332203d3e20323730383330.roa
Signing time:             Thu 18 Jun 2026 17:24:16 +0000
ROA not before:           Thu 18 Jun 2026 17:19:16 +0000
ROA not after:            Thu 17 Jun 2027 17:24:16 +0000
asID:                     270830
IP address blocks:        189.14.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/6EC6AF6C2208BA1658C391D2395E6C34363DD843.crl
                          rsync://rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/6EC6AF6C2208BA1658C391D2395E6C34363DD843.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EC6AF6C2208BA1658C391D2395E6C34363DD843.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:79:17:87:a7:8f:9b:28:4f:ce:06:9d:47:96:ec:c4:01:2e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EC6AF6C2208BA1658C391D2395E6C34363DD843
        Validity
            Not Before: Jun 18 17:19:16 2026 GMT
            Not After : Jun 17 17:24:16 2027 GMT
        Subject: CN=8E932A941D3090FE43ABE3C8AACB828B650CEEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:8e:24:79:62:cd:af:35:1b:02:bd:c0:cf:
                    e5:ee:2f:d7:93:b3:ed:35:f0:80:b1:1a:ce:35:62:
                    a5:f5:74:ba:c9:93:42:73:9a:91:09:86:a9:f2:49:
                    d0:c4:13:16:be:23:1e:38:7c:bf:bd:71:3e:39:da:
                    62:28:18:ec:21:cb:0c:3b:5f:32:36:81:ae:9a:9f:
                    0d:ea:96:84:e6:1a:01:6b:3b:3a:40:d3:ae:c9:9f:
                    f4:77:e6:ce:6f:b7:6a:75:cd:9c:84:5c:1b:08:fd:
                    b5:52:83:80:43:94:f4:4b:c6:c8:5e:b0:d5:8a:75:
                    97:80:49:de:f0:54:54:ff:2e:87:e7:d6:6c:99:ad:
                    51:c1:23:e3:4e:de:f6:fb:23:7e:82:dc:e3:af:f2:
                    c6:03:0a:1d:e1:5a:90:09:7d:74:20:b2:fe:1a:29:
                    ce:cb:62:8a:9a:45:28:dd:06:ee:85:98:8d:2a:4b:
                    84:9a:b4:2e:c8:5b:9b:ef:b0:8b:c7:b5:2f:c4:d4:
                    37:67:0b:91:9d:90:a2:89:72:f8:c4:ff:07:4c:e3:
                    6d:c6:89:79:39:c7:79:35:b5:98:69:8d:14:57:bc:
                    f9:af:91:cd:39:e1:6f:fc:25:be:dc:bd:ba:92:dd:
                    c5:f2:15:0b:0e:be:01:58:90:0a:a7:c0:27:30:a8:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:2A:94:1D:30:90:FE:43:AB:E3:C8:AA:CB:82:8B:65:0C:EE:C9
            X509v3 Authority Key Identifier:
                keyid:6E:C6:AF:6C:22:08:BA:16:58:C3:91:D2:39:5E:6C:34:36:3D:D8:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/6EC6AF6C2208BA1658C391D2395E6C34363DD843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EC6AF6C2208BA1658C391D2395E6C34363DD843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2R79aKjT7gFeYS25av6LLUnG1yvVt3BVcrx8cBDgvpAW/0/3138392e31342e3132302e302f32322d3332203d3e20323730383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:46:24:9d:59:b7:06:8a:b2:da:f2:f6:26:c4:c7:19:7c:
         7a:99:e9:83:81:b0:cc:5e:32:fa:17:86:5b:96:3b:55:61:e6:
         dd:0b:e3:91:17:53:cb:2a:2d:42:93:b9:39:43:c0:42:af:06:
         b0:38:e1:07:66:1d:4b:1f:55:9d:86:c3:1d:d3:a9:54:ce:18:
         5b:5d:02:1a:39:a6:85:c6:15:d4:52:a6:ff:55:95:2a:b9:de:
         52:9c:98:e3:15:0d:5b:6c:c0:be:44:e6:4f:6f:0b:30:34:97:
         af:53:54:1c:e1:ce:11:77:61:0d:01:ae:e5:b2:44:64:c3:44:
         bb:31:e2:4b:be:42:7d:5b:5c:36:f0:e1:bf:3c:21:0c:64:71:
         cb:39:9c:ea:e0:cb:7e:49:40:a0:9c:a0:02:65:b4:1f:7b:44:
         5a:a2:cc:17:b1:31:ed:a4:56:b2:5a:fb:72:60:ae:12:5a:ad:
         07:df:c8:0b:5f:3d:fd:59:0e:cc:6c:c5:f4:1a:c8:28:62:27:
         4a:3e:cb:32:6c:af:52:5f:6b:e9:a6:f9:3b:e3:6d:de:3c:bc:
         53:6c:45:09:a6:70:d9:65:79:5e:ae:60:9d:6d:d7:a6:d1:d0:
         8c:76:cc:0b:15:a2:35:5a:13:7f:64:f3:90:a8:ba:f9:f3:2c:
         f9:4b:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:12 2026 by rpki-client