Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa
File:                     3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa (raw, json)
Hash identifier:          6knTUY93jEPQN3TZPdDCM1HowzenYNc+2KeqE3xfm5k=
Subject key identifier:   9C:26:74:AE:20:83:2B:BC:EA:A8:83:4C:DC:79:2D:C4:76:3B:DB:7C
Certificate issuer:       /CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
Certificate serial:       39FE28620FD2D461F845559746E79FBD604382DC
Authority key identifier: D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa
Signing time:             Wed 08 Jul 2026 14:19:42 +0000
ROA not before:           Wed 08 Jul 2026 14:14:42 +0000
ROA not after:            Wed 07 Jul 2027 14:19:42 +0000
asID:                     266360
IP address blocks:        170.239.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl
                          rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fe:28:62:0f:d2:d4:61:f8:45:55:97:46:e7:9f:bd:60:43:82:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D600665C768DDDD6F0854F9E530DA1E46582EB84
        Validity
            Not Before: Jul  8 14:14:42 2026 GMT
            Not After : Jul  7 14:19:42 2027 GMT
        Subject: CN=9C2674AE20832BBCEAA8834CDC792DC4763BDB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:bf:11:cd:6c:c0:d4:65:6f:a0:3f:e0:d5:
                    70:7d:51:5a:19:d2:30:61:4a:8b:3d:4b:08:ec:15:
                    83:fb:1f:1b:cc:6c:1c:67:20:44:7c:57:f4:f1:05:
                    0a:c8:ea:4f:3f:15:06:d4:a2:3d:87:4d:7a:3b:d1:
                    9d:06:7a:4d:ef:73:06:ed:b0:a5:dd:d7:5b:fd:2a:
                    48:68:86:63:f1:ce:78:27:ac:74:e9:f4:d9:88:bf:
                    2f:19:29:39:ed:08:3b:2f:f9:cc:f1:59:5a:6e:31:
                    e9:1a:3d:6b:38:96:5d:6c:00:90:46:b6:ca:3c:7a:
                    1e:df:04:02:b9:08:6f:96:04:cf:82:ce:ec:9c:50:
                    ae:29:77:2c:4a:5d:ba:0d:fe:a6:bb:a7:96:7b:8c:
                    40:5b:03:2b:f2:e9:df:3d:6d:76:a0:a8:c8:8c:6e:
                    07:58:8d:0e:24:af:f0:f2:51:77:a6:f2:ca:54:fb:
                    40:c2:de:5f:8a:d6:ca:df:45:59:c4:85:a8:36:3f:
                    9a:43:50:45:fb:ce:25:3a:2e:f6:94:82:c4:a7:00:
                    f5:76:5f:7f:8e:25:c3:e5:22:9b:72:18:17:d4:54:
                    64:df:00:f0:b6:b7:97:b5:91:33:b1:eb:40:b0:f8:
                    36:f5:dc:76:f1:53:bd:76:99:3a:7d:9d:f1:e4:38:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:26:74:AE:20:83:2B:BC:EA:A8:83:4C:DC:79:2D:C4:76:3B:DB:7C
            X509v3 Authority Key Identifier:
                keyid:D6:00:66:5C:76:8D:DD:D6:F0:85:4F:9E:53:0D:A1:E4:65:82:EB:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/D600665C768DDDD6F0854F9E530DA1E46582EB84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D600665C768DDDD6F0854F9E530DA1E46582EB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ENYxUXExuSywE8RaV6kDivJURVw2JapMnF1GSZApJSS/0/3137302e3233392e3235342e302f32332d3233203d3e20323636333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:72:a6:39:f3:f9:73:6b:a6:00:e1:f4:61:06:9f:e4:1e:
         3a:d0:9c:82:fe:0a:a2:e3:1e:83:47:6c:06:6c:35:73:ef:7c:
         9d:09:71:8f:6a:2f:21:8c:b7:2a:5f:2a:2b:b7:ed:74:d0:c6:
         3f:83:ed:e2:f2:1a:24:fd:92:cb:05:1d:67:a2:c6:3b:e7:47:
         40:e3:ca:0d:01:05:66:48:aa:b6:42:0f:a8:36:64:2c:8f:0c:
         2d:de:40:1a:f5:e9:5f:c4:dc:b7:db:9f:da:d5:00:fb:26:a1:
         17:90:46:d0:9f:fc:83:03:47:b5:4a:3f:dc:05:48:72:8f:be:
         20:27:79:6b:ea:76:a1:e9:47:c2:7b:e9:e0:51:f7:b8:7b:8e:
         7e:d3:f3:aa:67:ee:47:d8:83:14:ef:7e:2f:ed:e8:1a:ad:cf:
         c8:be:3d:f0:cc:f9:f5:3a:6d:b4:d6:da:96:0a:13:d2:e3:36:
         83:8c:75:d7:5f:9f:cd:58:25:59:7f:a9:6f:46:cc:73:04:7c:
         50:95:23:b6:25:30:3c:97:03:a6:30:fd:77:e3:c4:b2:cf:aa:
         96:d4:9c:83:7b:0b:6d:17:db:88:ca:a8:c3:a8:45:fd:b9:01:
         9a:3d:aa:01:64:4d:56:3c:2f:de:9c:20:af:a4:1b:4b:f3:78:
         39:1d:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:04:38 2026 by rpki-client