Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32332d3233203d3e20323732363336.roa
File:                     3133382e3230342e3137322e302f32332d3233203d3e20323732363336.roa (raw, json)
Hash identifier:          81ason8W6FNNNzFPJq+9bj3Uy+KCnC9nnKm2ObMfwxg=
Subject key identifier:   6D:42:EF:3E:9D:82:59:0C:99:90:85:71:52:79:1F:16:88:C5:EE:23
Certificate issuer:       /CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
Certificate serial:       7FA70F93BD6A263A86D99A9D77165D59AD06BB01
Authority key identifier: F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32332d3233203d3e20323732363336.roa
Signing time:             Wed 17 Jun 2026 03:09:04 +0000
ROA not before:           Wed 17 Jun 2026 03:04:04 +0000
ROA not after:            Wed 16 Jun 2027 03:09:04 +0000
asID:                     272636
IP address blocks:        138.204.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a7:0f:93:bd:6a:26:3a:86:d9:9a:9d:77:16:5d:59:ad:06:bb:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
        Validity
            Not Before: Jun 17 03:04:04 2026 GMT
            Not After : Jun 16 03:09:04 2027 GMT
        Subject: CN=6D42EF3E9D82590C9990857152791F1688C5EE23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:b8:1c:e2:4f:0c:f6:3c:29:6e:9b:15:6c:
                    fd:7d:12:b0:f5:76:eb:49:22:3e:c0:34:9c:48:2e:
                    c5:74:17:87:39:ab:de:1f:e3:05:90:d6:42:a0:aa:
                    26:8b:df:b8:05:9d:8b:78:a0:ed:57:ab:78:0b:ce:
                    34:a2:e2:38:ed:18:bb:04:b2:8b:9b:e1:b0:48:77:
                    29:cc:c8:7a:d8:9f:15:72:14:30:d8:30:7d:5c:0a:
                    ec:6b:8b:9f:d7:54:e8:a8:39:29:ba:a4:78:a7:bb:
                    4a:e0:d2:6d:1c:f6:23:5f:79:72:5a:7b:61:8e:c1:
                    da:42:5d:22:32:30:3e:95:e0:ee:65:9d:5f:89:1a:
                    cd:f2:f1:bc:0a:c8:d5:9b:24:4d:e2:45:a1:f6:b1:
                    41:93:18:7a:20:06:44:0c:c3:88:84:3c:c9:51:9e:
                    89:6b:37:12:7e:07:b9:04:30:b0:13:04:3a:22:38:
                    e4:ff:93:57:d8:29:71:88:9e:e8:96:45:3b:f1:d4:
                    22:02:af:1d:7f:49:75:fa:46:61:18:84:20:4d:a9:
                    f8:c5:2a:0d:f1:0a:41:1b:96:cc:8e:d5:fe:70:76:
                    b3:15:34:e0:69:ab:68:c5:64:d3:ee:61:33:15:8f:
                    cb:83:17:18:76:b7:aa:65:c2:29:11:9f:81:fb:66:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:42:EF:3E:9D:82:59:0C:99:90:85:71:52:79:1F:16:88:C5:EE:23
            X509v3 Authority Key Identifier:
                keyid:F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137322e302f32332d3233203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:d1:18:d1:06:53:6d:36:8d:45:80:7f:48:1a:46:60:97:9b:
         6e:89:4c:9e:98:2d:50:da:96:69:22:ac:54:ca:f3:b9:20:d9:
         5b:2b:65:7b:55:39:3e:c8:63:b3:0f:36:a5:b0:ba:e5:ed:68:
         7a:e7:f4:40:fe:d1:c8:43:1a:52:3f:6d:fb:78:8e:94:f3:04:
         80:ab:52:d8:66:d9:ff:21:1d:49:8e:5a:2c:05:c5:e4:1b:f9:
         cf:84:ff:1a:45:b1:aa:1f:e0:9d:d6:cb:cb:d0:07:53:0e:90:
         f0:48:26:0a:7f:7c:6d:ad:c7:0d:69:e4:90:c5:e8:0a:3b:2f:
         af:c4:10:06:3e:75:1a:02:48:23:f5:42:b5:04:47:39:2f:b7:
         4b:5b:67:de:53:25:74:b7:b0:34:d1:50:49:55:3d:a9:b9:2b:
         1a:13:63:0d:f2:c3:56:c2:8e:55:32:9e:03:dd:59:28:ed:c1:
         a5:23:73:09:96:01:0e:29:e5:83:68:ad:e2:70:e8:9e:68:ae:
         bc:16:61:e1:a1:da:07:35:f4:e7:62:bd:3b:12:9a:31:b9:2a:
         6b:d4:24:02:51:12:7a:b4:44:20:19:88:f3:33:c4:29:7a:6d:
         9e:3b:d5:14:07:46:2a:98:a4:02:b7:51:20:5a:6f:9a:fd:0e:
         97:75:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:16 2026 by rpki-client