Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35322e302f32342d3234203d3e20323633333131.roa
File:                     3139312e372e35322e302f32342d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          EbWTx5kA5CBhbZiJoq0kMSSJd/tpHdzFpRIiCQChzWg=
Subject key identifier:   67:1B:22:D1:17:36:E2:C0:D7:68:66:EE:40:62:1E:5F:26:50:6D:97
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       4ACEE9C47D5A03DFBFAE5C65D47FFB9FF2A61211
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35322e302f32342d3234203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:03:56 +0000
ROA not before:           Tue 23 Jun 2026 14:58:56 +0000
ROA not after:            Tue 22 Jun 2027 15:03:56 +0000
asID:                     263311
IP address blocks:        191.7.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ce:e9:c4:7d:5a:03:df:bf:ae:5c:65:d4:7f:fb:9f:f2:a6:12:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:58:56 2026 GMT
            Not After : Jun 22 15:03:56 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2e:a4:cf:47:60:7b:b9:17:e3:e9:25:4a:56:
                    04:82:0c:f2:15:f6:66:86:59:8e:6e:9a:20:95:2e:
                    f0:a5:ce:92:3f:c7:6e:40:54:78:f5:b3:03:42:51:
                    11:ff:68:cf:6c:f5:66:3d:fb:bf:8c:03:f0:c0:4a:
                    b1:c3:de:ae:61:fc:9a:e6:ed:3e:04:c5:bd:79:c7:
                    53:93:24:bc:c3:e0:e6:4a:53:3f:2d:59:b3:08:7b:
                    c9:b1:93:79:61:29:1e:0c:08:c4:be:07:ac:62:1d:
                    29:36:96:41:11:20:9a:2b:b1:d0:72:f5:42:18:73:
                    13:f2:73:ec:4c:dc:be:f0:ef:15:57:68:7e:8c:0d:
                    e3:5d:c8:92:0b:f2:7e:a3:5c:22:41:d1:fc:92:7c:
                    d0:46:dd:5a:28:2e:1b:c4:83:ea:55:67:4a:d6:e7:
                    08:b0:23:8c:da:4d:e2:f9:80:7e:38:fc:0e:38:a3:
                    23:85:63:6d:b8:a9:bf:e8:3d:24:8e:80:cc:34:93:
                    af:9e:39:9f:b7:2c:e1:76:42:e5:e7:b5:32:f9:73:
                    dd:ab:d2:8c:d2:e6:7d:77:c3:c1:12:67:b5:fd:61:
                    3e:32:ab:2d:5e:cc:c3:64:94:70:d7:00:28:cf:27:
                    7f:dc:ff:3b:36:99:ed:77:b7:10:41:b7:5f:13:57:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:22:D1:17:36:E2:C0:D7:68:66:EE:40:62:1E:5F:26:50:6D:97
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35322e302f32342d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d2:de:9c:da:53:39:4b:d0:8e:96:6c:42:f5:e1:f9:75:93:
         1b:ef:7e:c6:a6:1a:e8:a6:8d:a3:cb:70:dc:fc:15:49:9c:90:
         91:eb:62:ab:1e:47:b2:84:19:2e:8f:1a:c2:09:6e:9f:1a:56:
         fa:58:82:a0:8a:58:b9:b9:ea:77:6b:00:73:0a:93:53:73:46:
         e0:80:29:ba:34:e9:bf:31:90:dc:c4:2e:94:3a:a3:c6:30:27:
         64:e1:ae:ee:5d:06:67:b7:2e:b1:52:be:8d:50:e3:93:72:15:
         28:50:22:03:aa:dc:03:7f:8f:97:7a:15:85:34:c0:40:61:21:
         4d:37:34:0e:dc:64:33:dd:f5:f3:8b:cb:22:75:6f:1e:0c:90:
         ce:09:3d:4f:e8:62:23:91:27:2b:1e:21:06:e8:0c:7a:01:66:
         03:64:20:c7:22:69:91:0e:6c:40:d8:60:ab:e0:59:f1:f6:82:
         bc:56:f5:e0:e8:61:b7:e2:3d:c7:3d:d5:10:d1:00:18:2e:3e:
         5b:6c:70:a1:77:96:60:c0:60:bf:4b:ba:e5:08:dd:e1:4b:ea:
         3e:bd:8d:2c:87:76:5c:0b:1a:7e:ba:6b:ee:5c:31:b9:73:85:
         f7:43:15:35:47:13:ad:e4:dc:dd:c6:63:05:33:4d:3f:97:56:
         96:45:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:44 2026 by rpki-client