Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137342e302f32332d3233203d3e20323732363336.roa
File:                     3133382e3230342e3137342e302f32332d3233203d3e20323732363336.roa (raw, json)
Hash identifier:          Od/H87aglhxWwzphKOA4VaMsSc543pR2dxwlebhRM20=
Subject key identifier:   E5:48:90:F4:E7:1C:EF:13:DF:FF:5F:C7:BE:03:FA:C0:88:F7:C3:05
Certificate issuer:       /CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
Certificate serial:       70FE21638BE537B2A35FFE51A872CD163EA9C63D
Authority key identifier: F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137342e302f32332d3233203d3e20323732363336.roa
Signing time:             Wed 17 Jun 2026 03:09:03 +0000
ROA not before:           Wed 17 Jun 2026 03:04:03 +0000
ROA not after:            Wed 16 Jun 2027 03:09:03 +0000
asID:                     272636
IP address blocks:        138.204.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl
                          rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 09:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fe:21:63:8b:e5:37:b2:a3:5f:fe:51:a8:72:cd:16:3e:a9:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9D7850D070C4CB50D1E75E387695E15A0C47E7E
        Validity
            Not Before: Jun 17 03:04:03 2026 GMT
            Not After : Jun 16 03:09:03 2027 GMT
        Subject: CN=E54890F4E71CEF13DFFF5FC7BE03FAC088F7C305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:e1:50:a9:75:8a:02:de:49:13:da:d7:87:
                    a6:1c:ac:97:43:0a:52:4d:64:c6:8a:49:88:93:a6:
                    4f:8d:4d:6d:d1:c2:85:65:3e:a5:a7:2d:20:e8:be:
                    de:da:d2:20:11:66:3e:d4:0e:a6:83:4c:be:5b:08:
                    45:a0:7d:98:ff:17:0b:4a:51:59:7a:43:fc:73:67:
                    f9:25:a6:5e:e3:2f:78:db:0a:e6:df:6c:2e:3c:c1:
                    bd:e7:af:97:dd:d3:02:bc:bd:6e:03:de:d6:b3:70:
                    35:01:44:8f:af:cf:6d:99:fe:e5:cb:a5:ec:34:4c:
                    a2:5e:ef:97:7b:d9:37:0a:74:55:a6:f0:9c:be:06:
                    18:7c:4c:c2:03:23:bb:4d:b1:c2:60:e1:4a:f6:ce:
                    83:b7:11:0e:97:54:74:bb:c4:95:fb:8e:16:ec:c9:
                    b0:45:3c:06:45:42:b4:8f:be:21:52:5d:50:c2:0b:
                    fe:1a:99:11:55:6b:58:3e:3e:7a:c9:4a:4d:f5:f2:
                    57:8e:66:04:a4:50:cf:71:36:34:12:5e:b2:f1:ac:
                    a5:69:75:53:77:44:be:27:2a:9f:78:9b:59:d9:98:
                    f2:52:7d:60:43:5f:a0:9a:a3:60:c2:eb:4d:c3:3a:
                    d2:22:fe:bf:8c:61:19:b7:f8:0d:56:f4:f4:42:0a:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:90:F4:E7:1C:EF:13:DF:FF:5F:C7:BE:03:FA:C0:88:F7:C3:05
            X509v3 Authority Key Identifier:
                keyid:F9:D7:85:0D:07:0C:4C:B5:0D:1E:75:E3:87:69:5E:15:A0:C4:7E:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9D7850D070C4CB50D1E75E387695E15A0C47E7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/484ec12NmuyaFAM1WLBFzJS9PjjvNhp3uXUnKzVPkPYd/0/3133382e3230342e3137342e302f32332d3233203d3e20323732363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:e2:0a:1f:8b:20:be:59:97:c7:13:c1:ec:f3:1d:76:7b:
         5a:7b:03:8c:fd:49:f6:70:1b:c1:26:70:0d:4e:62:91:c8:1d:
         0d:1a:da:ee:99:66:a6:54:ad:eb:38:fe:f9:b6:ff:0c:19:3c:
         69:29:e7:49:02:96:32:93:71:61:92:2b:28:6d:0a:59:54:c7:
         bc:06:ea:0b:f4:70:4c:28:5c:43:ea:b4:cf:cd:df:80:2c:58:
         a5:df:32:f3:66:6e:2c:b0:a6:3a:8f:65:02:ff:09:64:85:f9:
         7e:b5:ab:8e:2b:c4:31:62:c4:5a:0b:6e:98:0f:78:68:19:a3:
         80:59:5b:72:fb:c1:ad:b7:74:c4:9b:76:d4:18:47:af:46:a5:
         03:e7:24:5f:9f:0a:f1:25:b9:00:86:0e:59:b3:02:2c:bd:47:
         ca:32:21:11:8f:6f:dd:a3:59:31:fa:c6:3b:a5:b4:ce:10:53:
         51:78:48:c8:a2:0f:8d:d6:3e:ef:c0:f7:4e:c5:13:fe:fc:2d:
         29:11:57:a4:62:8f:b8:f0:4d:7e:17:00:fa:a1:b5:0f:e2:53:
         7a:69:3a:b1:08:49:4f:19:71:a2:19:7a:71:f0:f5:91:8a:ed:
         0f:6f:65:19:bf:46:6a:77:04:01:18:9f:fd:e6:e7:ae:22:a8:
         91:df:ca:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:13 2026 by rpki-client