Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS273683.roa
File:                     AS273683.roa (raw, json)
Hash identifier:          yvHHOV8MsdJwpfj8J+6tCPZj6+Hm2tHwwjaWcyFph1c=
Subject key identifier:   8E:59:95:17:8D:22:90:8F:B9:7A:D9:87:DF:B6:E4:03:14:89:12:F3
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       045DC9BD4111709E9B4FFDC6B36443508E34807A
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS273683.roa
Signing time:             Wed 01 Jul 2026 14:59:17 +0000
ROA not before:           Wed 01 Jul 2026 14:54:17 +0000
ROA not after:            Wed 30 Jun 2027 14:59:17 +0000
asID:                     273683
IP address blocks:        168.0.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 11:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5d:c9:bd:41:11:70:9e:9b:4f:fd:c6:b3:64:43:50:8e:34:80:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Jul  1 14:54:17 2026 GMT
            Not After : Jun 30 14:59:17 2027 GMT
        Subject: CN=8E5995178D22908FB97AD987DFB6E403148912F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:02:7b:dc:df:03:e5:f8:41:ea:43:e1:e9:
                    ba:38:19:d5:6f:56:0b:e0:01:eb:5f:70:a9:1e:fd:
                    6d:2f:5a:63:ff:3c:36:b6:84:ed:05:38:4b:63:73:
                    fd:2e:11:50:5c:ea:51:af:54:5a:b7:44:5f:30:8f:
                    42:06:61:aa:69:e3:f5:50:31:17:e4:92:d0:fb:a2:
                    ad:ab:c3:e3:5b:dc:40:02:cb:a1:06:94:b4:24:fd:
                    d3:28:0f:ca:3e:1c:b1:93:6c:62:d2:41:31:97:c7:
                    61:1a:85:5c:a2:8a:b4:b2:5d:0a:cc:c8:a5:5f:ee:
                    e8:2e:d3:9a:35:ed:08:af:e3:81:87:9c:f4:f4:6d:
                    1c:4d:b7:00:64:6a:db:f6:2a:40:1a:e6:a4:f4:ec:
                    b5:c0:5b:4a:65:38:52:3d:d6:5e:cf:6f:c8:80:ce:
                    53:2d:7a:f3:38:65:71:8c:2e:3c:8c:25:7c:76:af:
                    0b:4f:50:a9:6b:f3:06:79:63:4e:68:35:7d:3a:61:
                    cd:81:fc:ab:c0:77:c2:15:6f:a6:bc:52:4c:5e:3d:
                    e0:7b:bb:aa:15:2a:d0:91:e7:b3:b9:8f:b2:f0:64:
                    7e:ab:db:66:71:31:a5:9b:ea:80:e5:7f:61:e9:8f:
                    7a:48:cd:dd:17:77:e6:aa:b4:13:8b:d9:27:cc:a4:
                    22:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:59:95:17:8D:22:90:8F:B9:7A:D9:87:DF:B6:E4:03:14:89:12:F3
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS273683.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:3b:05:e4:42:0d:d4:e5:c7:98:d3:0a:8b:3b:0d:35:dd:
         7e:de:84:14:bd:2b:5d:dd:2a:42:59:dc:cc:27:41:26:84:27:
         d0:2d:1d:54:26:54:f5:98:fe:a9:5d:89:f7:31:69:e6:90:81:
         7f:10:09:97:0a:ea:d8:af:cc:a3:12:42:ec:f1:2d:0c:8d:58:
         a3:76:cd:59:52:59:a8:71:b9:cc:87:a4:e5:6d:66:41:75:1c:
         44:a4:62:98:b1:7b:c7:70:23:52:83:a6:85:f2:a6:97:55:7f:
         5d:0c:d5:7f:34:5b:75:86:b8:00:44:c7:11:23:ba:16:3e:a3:
         de:f4:b8:a3:53:21:d6:9e:c1:6f:c9:24:ce:0d:81:0b:37:2c:
         01:fa:ba:a4:2e:95:5c:f8:8b:9d:b4:d9:19:39:8f:7d:6b:2d:
         c8:d8:1f:cf:11:bb:67:e3:ba:42:c5:c2:e0:d1:3d:3f:0f:6d:
         86:64:0c:bb:d9:eb:63:5c:a2:0e:b1:37:51:88:28:b3:ac:36:
         3d:31:39:c2:a9:b0:3a:7c:b5:bb:44:14:21:6d:73:9b:8a:09:
         cf:e0:b8:c3:23:b4:c7:49:22:2a:95:78:85:ca:42:54:d5:a2:
         9e:80:a5:64:e2:a5:2c:91:af:94:ac:22:a6:bb:99:c0:f4:62:
         7d:5b:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:07:25 2026 by rpki-client