Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32322d3232203d3e20323732363336.roa
File:                     3133382e3230342e3137322e302f32322d3232203d3e20323732363336.roa (raw, json)
Hash identifier:          la/wVZWbQv7dB9OKNfO0FGQQinpkhJbEvWi7rq5PQR8=
Subject key identifier:   17:8E:B9:19:1D:FA:6A:4E:DC:EE:AE:0B:69:F7:BB:7E:8C:91:01:E3
Certificate issuer:       /CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
Certificate serial:       6D58B5AD1B8A195BC433C6A98279309BB205088A
Authority key identifier: F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32322d3232203d3e20323732363336.roa
Signing time:             Wed 17 Jun 2026 03:09:03 +0000
ROA not before:           Wed 17 Jun 2026 03:04:03 +0000
ROA not after:            Wed 16 Jun 2027 03:09:03 +0000
asID:                     272636
IP address blocks:        138.204.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:58:b5:ad:1b:8a:19:5b:c4:33:c6:a9:82:79:30:9b:b2:05:08:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
        Validity
            Not Before: Jun 17 03:04:03 2026 GMT
            Not After : Jun 16 03:09:03 2027 GMT
        Subject: CN=178EB9191DFA6A4EDCEEAE0B69F7BB7E8C9101E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f4:9e:10:0b:b6:fa:90:a9:74:fd:6e:65:9b:
                    d9:61:d2:10:35:99:9a:c5:49:19:05:60:c5:fd:0e:
                    e8:b0:d5:d3:d1:db:ca:b8:a2:6b:88:a8:6a:80:98:
                    24:34:49:f0:f7:97:2b:c4:53:6f:a4:4c:82:bc:94:
                    53:58:97:4a:93:b9:a1:ec:e0:70:96:69:43:fd:19:
                    b5:f2:0f:1c:3f:03:b7:e5:42:90:3f:23:79:79:8b:
                    d7:42:02:cd:b1:de:8f:8a:de:f1:cd:7e:ec:61:f2:
                    15:b2:38:71:39:69:39:97:15:20:e0:8b:31:c6:7b:
                    7a:7f:3a:dc:4c:b1:3b:fc:57:a2:f7:60:6f:65:4d:
                    15:84:09:cf:de:fc:20:4f:63:f9:cc:8f:52:34:cc:
                    94:49:5d:02:c4:0e:53:36:db:de:bf:27:3f:ce:6e:
                    a5:93:63:e6:15:41:af:c0:76:b6:d7:e1:d6:b1:66:
                    17:de:be:db:98:cf:b4:97:b3:ce:dc:af:06:f6:02:
                    a0:eb:98:04:e8:69:a2:fe:8f:ec:01:1f:3d:5f:49:
                    3e:7f:61:27:51:45:32:8d:7f:40:18:42:02:b9:72:
                    45:41:7c:09:7a:fd:4a:ee:96:1f:c3:6e:60:25:8e:
                    1f:ac:47:18:71:01:51:16:3e:bb:ef:cf:e8:18:ef:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8E:B9:19:1D:FA:6A:4E:DC:EE:AE:0B:69:F7:BB:7E:8C:91:01:E3
            X509v3 Authority Key Identifier:
                keyid:F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32322d3232203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:0b:fe:9f:62:d8:07:05:db:f9:1d:3a:f8:16:30:5e:25:a1:
         dd:0f:cd:63:a3:11:38:e2:07:64:3f:b3:63:e5:2d:06:a8:f3:
         f7:b3:67:f5:73:76:bd:43:43:ea:50:c1:4b:57:97:a2:f7:c2:
         7f:de:85:28:c3:22:04:29:98:d9:f9:71:75:12:a6:44:e9:79:
         71:42:dc:26:30:ef:07:a4:9e:b6:87:e6:02:3b:ad:b4:48:b8:
         b1:d1:52:c7:11:a5:89:39:94:05:be:29:5e:ea:a3:f4:6f:47:
         5e:92:38:45:01:de:18:8a:f1:8f:69:fa:95:2d:f7:cd:c0:b0:
         e4:b1:ed:1e:ec:d4:08:c4:b0:71:16:51:29:5f:97:f1:19:b2:
         ba:44:f1:f0:48:27:b6:4e:5c:99:8c:d1:30:c1:9a:ec:78:4e:
         4d:b3:66:59:4d:f7:66:78:ea:84:f4:42:f4:a0:cf:f9:1a:f6:
         0f:7c:a0:97:e6:d0:39:43:2c:ea:25:d4:45:93:08:50:df:9e:
         8a:2c:05:39:57:5e:0e:e1:04:a8:05:b1:78:30:42:2c:8f:02:
         7d:bf:65:79:f4:81:d4:6d:06:cb:fe:0f:75:f0:45:2c:da:ab:
         2f:e2:a0:5c:c9:96:e7:60:44:54:75:71:b1:c9:aa:6a:ee:a6:
         7b:82:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:13 2026 by rpki-client