Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa
File:                     3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa (raw, json)
Hash identifier:          YkITss1iZB4GmcUUl55/TwccznhasdgU+Mvacvlv8T0=
Subject key identifier:   37:41:8C:ED:57:FE:84:63:01:7C:1A:46:EC:CE:74:20:BC:0D:65:D1
Certificate issuer:       /CN=92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A
Certificate serial:       7015E6FA660488AD8417E5E6872409D065BA1E
Authority key identifier: 92:69:9D:D6:DF:1A:66:EB:9E:05:CE:E5:69:B3:E7:31:CC:21:AC:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa
Signing time:             Thu 18 Jun 2026 20:50:47 +0000
ROA not before:           Thu 18 Jun 2026 20:45:47 +0000
ROA not after:            Thu 17 Jun 2027 20:50:47 +0000
asID:                     275648
IP address blocks:        191.227.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.crl
                          rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 07:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:15:e6:fa:66:04:88:ad:84:17:e5:e6:87:24:09:d0:65:ba:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A
        Validity
            Not Before: Jun 18 20:45:47 2026 GMT
            Not After : Jun 17 20:50:47 2027 GMT
        Subject: CN=37418CED57FE8463017C1A46ECCE7420BC0D65D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:ba:a5:27:2a:ab:1f:f5:79:0d:bf:19:40:
                    38:75:4d:58:5c:4d:ae:ec:3a:d8:2b:ab:e9:92:7a:
                    f2:2b:7d:d4:b1:f2:9d:6d:40:ea:de:94:0f:b9:d9:
                    2a:66:07:ef:45:51:d9:d8:f6:f3:c2:1b:82:a7:96:
                    0a:fa:54:88:b9:7c:d4:70:85:fe:f9:03:85:fa:b1:
                    2b:7d:a0:17:0b:84:b7:51:ab:55:ca:5f:1b:db:df:
                    1a:4d:b6:90:8b:6b:fb:69:b6:dd:28:17:68:16:6e:
                    56:95:97:ba:c1:6e:ae:07:9a:94:ea:43:55:13:de:
                    7a:59:db:58:a7:50:ee:70:60:41:39:bc:c2:38:52:
                    e1:51:05:5b:15:ab:73:3f:a6:6d:da:e1:0b:a3:72:
                    d0:3f:c0:1c:a6:69:32:59:e6:3c:aa:9c:c6:5a:21:
                    83:cb:6c:95:d8:d0:da:95:26:9b:91:20:93:11:34:
                    86:64:8d:ef:ad:41:ba:40:99:79:39:c2:80:72:43:
                    30:39:53:ce:78:e0:d5:90:ac:9f:1e:74:2d:46:15:
                    7d:0e:a0:1d:11:69:6f:08:f3:fc:b2:5d:55:27:a6:
                    9c:55:6e:e5:ad:42:3c:f8:a9:49:d8:6d:a6:e4:b2:
                    30:25:64:9a:b9:c0:7d:56:d7:30:d4:09:5c:fa:bd:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:8C:ED:57:FE:84:63:01:7C:1A:46:EC:CE:74:20:BC:0D:65:D1
            X509v3 Authority Key Identifier:
                keyid:92:69:9D:D6:DF:1A:66:EB:9E:05:CE:E5:69:B3:E7:31:CC:21:AC:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92699DD6DF1A66EB9E05CEE569B3E731CC21AC0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.227.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:5b:3b:4f:2f:1d:95:7b:01:a9:8b:95:19:eb:24:2d:ad:9e:
         e4:cf:70:19:78:ad:6c:14:16:12:1c:1f:28:01:24:f3:e8:8d:
         b6:8c:85:7c:c4:ce:b4:17:cc:fe:32:ba:f8:c6:be:cc:68:9e:
         ef:30:55:3c:1b:44:62:b4:26:a4:c9:64:58:bd:14:31:cd:91:
         c4:c4:e7:c3:70:22:dd:e5:d6:72:fe:71:5a:7b:0a:63:7b:33:
         ec:f6:75:84:23:0c:54:0f:5f:26:6a:46:50:bc:c8:2c:23:89:
         70:6a:35:96:0a:a8:db:ad:03:28:e0:a4:d5:29:f1:8a:5f:72:
         e6:b3:90:12:10:82:11:fc:26:82:14:32:52:46:03:f8:19:0f:
         6c:ea:27:32:f3:a0:f4:e9:ca:8e:2b:1e:bc:d7:a6:02:db:39:
         ba:a3:1f:7b:09:49:5b:85:88:34:8b:45:52:62:66:00:93:a9:
         55:4f:e8:68:20:5c:d8:89:7d:98:ee:89:18:f1:63:47:e6:88:
         9a:2d:f8:96:df:f9:44:e1:4c:08:11:c4:00:50:c2:38:59:4e:
         da:24:79:fa:9b:8c:a0:3d:46:3b:69:f1:64:c4:a2:8f:c0:49:
         14:1f:ce:c8:bb:5a:bd:2b:d0:bc:c1:9f:ab:58:b2:cb:87:40:
         c7:8e:19:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:58:23 2026 by rpki-client