Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa
File:                     3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa (raw, json)
Hash identifier:          xsIYnhu+xyFeBn/i4v0UREHNiLhuJHH9qVlw13mjcg0=
Subject key identifier:   87:D1:C9:AF:A6:D9:74:52:5C:03:CE:A9:48:9A:F7:4C:B9:00:CD:17
Certificate issuer:       /CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
Certificate serial:       2B01CCF5BC2916B444C199F036B692711457FD5A
Authority key identifier: E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa
Signing time:             Wed 20 May 2026 12:08:16 +0000
ROA not before:           Wed 20 May 2026 12:03:16 +0000
ROA not after:            Wed 19 May 2027 12:08:16 +0000
asID:                     270561
IP address blocks:        189.85.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl
                          rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:01:cc:f5:bc:29:16:b4:44:c1:99:f0:36:b6:92:71:14:57:fd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4CC883D424B3F78EF4AE46288059D5FB1F48DB7
        Validity
            Not Before: May 20 12:03:16 2026 GMT
            Not After : May 19 12:08:16 2027 GMT
        Subject: CN=87D1C9AFA6D974525C03CEA9489AF74CB900CD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:fe:04:b8:04:db:ef:c8:af:06:03:86:cb:
                    35:a9:41:8c:12:93:29:e7:7e:df:a2:bf:af:a1:ae:
                    6c:87:75:9b:63:91:36:51:97:fe:d9:03:3b:9c:00:
                    c8:30:28:2d:f7:ea:46:68:47:58:54:29:ef:56:56:
                    ab:73:d4:27:f5:b7:14:50:58:d9:cc:38:ae:eb:c1:
                    05:02:87:22:bd:ee:09:ca:cc:d2:a4:70:26:ca:25:
                    25:a4:f1:33:0c:3f:a4:e0:9b:8c:d1:c9:e3:18:88:
                    78:18:e8:d0:e3:b0:4b:3c:45:82:52:85:b3:9c:fc:
                    f0:9a:4e:ea:e8:8c:de:42:2d:3d:1f:b1:d9:3d:b7:
                    8f:8a:8c:3e:b6:75:df:87:ef:dc:92:7d:3b:5e:30:
                    53:a4:df:7b:41:4b:9e:f8:ef:ea:be:01:93:4e:48:
                    87:23:15:33:2f:28:c4:da:5c:eb:85:c4:61:ae:39:
                    ef:d2:28:03:4d:1e:38:d6:92:4e:4e:89:7c:cb:de:
                    ba:6f:33:fa:95:56:86:31:8a:f0:dc:56:81:20:2c:
                    ee:df:60:64:c3:96:08:95:b3:03:8a:7a:ac:4c:37:
                    ce:3a:16:ce:c6:d4:f2:8c:44:e9:0b:d1:63:d2:f6:
                    18:ae:1a:82:45:2b:7d:ed:f2:6f:2c:ef:fa:01:69:
                    c1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:C9:AF:A6:D9:74:52:5C:03:CE:A9:48:9A:F7:4C:B9:00:CD:17
            X509v3 Authority Key Identifier:
                keyid:E4:CC:88:3D:42:4B:3F:78:EF:4A:E4:62:88:05:9D:5F:B1:F4:8D:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4CC883D424B3F78EF4AE46288059D5FB1F48DB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gq3SDQcuJcmQwTzNmgf5o3zY9oHw7bFNN7netiuizMm/1/3138392e38352e3131362e302f32342d3234203d3e20323730353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:21:a9:85:6c:18:32:36:d3:a6:5e:5c:f4:3c:c0:ef:21:da:
         ee:b8:0a:84:76:84:ec:50:f7:b5:90:7f:8c:36:36:04:09:ba:
         66:23:4d:20:11:f2:7b:ba:b6:74:16:34:26:cc:34:3c:eb:96:
         49:d3:01:e9:2e:d1:2d:6c:57:78:cc:6e:8c:2f:72:17:9a:c8:
         7b:5e:8e:86:a8:1d:9a:c7:38:50:db:b6:12:9f:11:2a:7c:6a:
         38:7d:04:0d:a7:cf:64:55:21:a7:bc:43:6a:a5:f0:10:00:35:
         7b:20:8c:02:84:dc:82:f7:be:5c:06:1d:c2:d0:26:e5:78:d0:
         24:fd:0f:a6:57:ff:f2:35:ef:e5:38:fc:bd:00:a9:36:02:36:
         b8:19:60:4f:1e:50:91:5e:8a:f5:c0:53:31:4d:1c:6d:79:f9:
         a5:ae:57:96:38:24:be:80:0a:4c:48:7d:11:9e:3e:19:09:ea:
         39:d3:03:1a:34:b3:2e:7e:0b:f5:23:01:c8:aa:d5:7f:9b:8c:
         f4:bd:02:03:74:26:c7:b8:13:56:44:47:9c:f5:60:ba:a8:14:
         ad:f7:9f:d7:67:0c:bb:09:54:29:b8:c8:dc:2b:0e:3b:49:07:
         e9:64:5f:cf:e8:6d:ab:d1:27:35:aa:da:bd:df:79:86:98:c0:
         35:28:eb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:27:15 2026 by rpki-client