Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa
File:                     3139312e372e302e302f32342d3234203d3e20323733343331.roa (raw, json)
Hash identifier:          fEXEy6f38y/H/yvbfiMQo3yiMkNDAWqE7AibE76j6/w=
Subject key identifier:   F8:88:D5:18:BA:4A:B2:73:A1:8B:5F:1A:FC:07:E5:E5:5B:EE:77:45
Certificate issuer:       /CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
Certificate serial:       6CD9B818262E7E321418A8A3A473E79543B45CFD
Authority key identifier: 88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa
Signing time:             Mon 15 Jun 2026 11:58:29 +0000
ROA not before:           Mon 15 Jun 2026 11:53:29 +0000
ROA not after:            Mon 14 Jun 2027 11:58:29 +0000
asID:                     273431
IP address blocks:        191.7.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl
                          rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 01:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d9:b8:18:26:2e:7e:32:14:18:a8:a3:a4:73:e7:95:43:b4:5c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671
        Validity
            Not Before: Jun 15 11:53:29 2026 GMT
            Not After : Jun 14 11:58:29 2027 GMT
        Subject: CN=F888D518BA4AB273A18B5F1AFC07E5E55BEE7745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:d5:6f:3f:d4:5b:19:72:b7:92:43:09:ad:
                    5b:4e:a5:9c:6e:2a:43:ca:4c:99:fe:97:6f:2a:1e:
                    4f:f5:6c:e1:32:df:6a:de:3b:10:ef:61:58:16:8b:
                    ca:5b:78:58:88:4c:ba:e0:15:74:c2:3e:a3:37:1c:
                    bc:5b:f9:17:ff:d6:f1:eb:40:aa:6c:a1:42:f0:a6:
                    d8:bf:6d:f1:e5:b4:e2:37:78:92:c5:49:a1:f2:91:
                    78:29:a3:9f:58:f5:51:0e:0a:78:5a:8c:e4:50:dd:
                    a5:8f:d8:60:41:9e:b9:76:43:ad:f5:56:9d:16:98:
                    9c:36:d6:27:39:1e:5f:00:21:89:86:66:23:1f:ca:
                    7b:c0:a5:f6:e5:85:84:ff:a7:22:d1:9d:c1:2b:6b:
                    f4:34:04:e8:2d:c1:af:bc:6b:a0:06:fb:13:d2:73:
                    26:f4:3e:fc:60:11:65:fc:9c:9f:33:dd:b9:3f:b6:
                    48:e4:cb:24:7c:01:44:e4:67:52:ff:41:c2:95:f3:
                    ad:84:9c:9b:5b:28:43:56:d9:2c:78:70:1c:9d:ed:
                    fa:61:e7:b9:d4:89:6b:3b:f4:b9:00:90:68:52:1f:
                    cd:b5:1e:36:52:89:e3:81:cb:57:d6:e5:e4:38:04:
                    35:9f:d4:4b:c4:94:13:a7:6e:4e:e0:08:ae:a7:61:
                    67:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:D5:18:BA:4A:B2:73:A1:8B:5F:1A:FC:07:E5:E5:5B:EE:77:45
            X509v3 Authority Key Identifier:
                keyid:88:BB:A0:1D:8B:F5:C5:D5:AC:36:70:42:86:B4:BC:BA:F2:9D:86:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BBA01D8BF5C5D5AC36704286B4BCBAF29D8671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/3139312e372e302e302f32342d3234203d3e20323733343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:00:02:94:09:43:0a:dc:71:6c:ee:54:92:e1:70:44:02:
         27:f8:01:74:ad:7e:2b:ef:c7:6c:fe:c1:72:24:31:fb:ad:73:
         3b:d8:51:ba:7a:4e:ce:fb:d3:89:78:45:28:35:00:32:cc:bb:
         cb:7b:8e:2e:4b:39:da:88:3b:e4:95:66:f4:6d:2e:cf:9b:a1:
         39:31:55:77:c9:63:df:aa:7a:37:95:2b:64:31:12:f4:31:6a:
         e2:9f:14:f9:b4:ac:18:dd:e6:92:b4:eb:3a:1b:ca:25:0f:9f:
         6e:4f:a7:f4:b0:30:e6:14:2d:f2:eb:3f:ca:3f:dd:b1:de:86:
         d7:46:71:f7:f5:5f:c8:e6:55:f9:57:69:98:c1:1c:e0:f0:dd:
         2a:c2:76:0d:13:9d:6e:e0:35:9a:75:f8:32:7e:30:06:5f:c6:
         3a:56:03:97:1f:f9:7a:a2:ad:a1:4c:55:90:35:dc:cb:66:c3:
         09:ee:cc:dd:e8:8d:ba:ba:62:28:a7:6b:61:b7:b1:21:37:c2:
         0f:05:66:17:18:3b:9d:47:1e:af:b1:ad:8c:36:0d:2e:60:8e:
         10:04:95:f4:a6:b8:c2:2f:75:72:ff:67:48:88:e7:61:25:ba:
         89:eb:fd:db:42:16:ba:f6:a2:25:b7:7e:6c:c7:06:4d:e3:a1:
         04:f5:e2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:12:01 2026 by rpki-client