Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3232203d3e20323731333233.roa
File:                     3136342e3136332e3136342e302f32322d3232203d3e20323731333233.roa (raw, json)
Hash identifier:          RbzCRTuhW3XLxr18PRvUC42BbE6Wa65k/lR3GfS0+1k=
Subject key identifier:   22:28:1F:A0:A6:90:2C:7D:CA:27:35:9A:C8:DD:28:34:AC:E5:D5:42
Certificate issuer:       /CN=613BE8AB98BDE26EA28F82707C5A1049DD47E34F
Certificate serial:       20DCD89C7A859AB951B273252D80EA68BD312E2A
Authority key identifier: 61:3B:E8:AB:98:BD:E2:6E:A2:8F:82:70:7C:5A:10:49:DD:47:E3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3232203d3e20323731333233.roa
Signing time:             Mon 15 Jun 2026 15:26:39 +0000
ROA not before:           Mon 15 Jun 2026 15:21:39 +0000
ROA not after:            Mon 14 Jun 2027 15:26:39 +0000
asID:                     271323
IP address blocks:        164.163.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 00:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dc:d8:9c:7a:85:9a:b9:51:b2:73:25:2d:80:ea:68:bd:31:2e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613BE8AB98BDE26EA28F82707C5A1049DD47E34F
        Validity
            Not Before: Jun 15 15:21:39 2026 GMT
            Not After : Jun 14 15:26:39 2027 GMT
        Subject: CN=22281FA0A6902C7DCA27359AC8DD2834ACE5D542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:cc:3e:b1:c1:94:35:c8:4e:f4:19:14:64:
                    8c:8c:dd:e9:4f:7f:96:68:b6:46:67:36:c5:b6:9f:
                    e6:87:65:7a:f4:e5:cb:57:d3:71:2e:b3:81:30:9e:
                    42:3c:8b:07:4c:76:f4:99:a0:f9:a3:9e:77:90:7c:
                    5b:ad:76:25:82:a0:37:df:2d:85:53:a7:47:69:dc:
                    89:14:61:cc:62:e8:69:72:64:4f:00:1e:d0:41:49:
                    7c:10:7b:ec:93:e4:d0:97:1c:c6:e4:8c:7a:66:d4:
                    c2:61:43:4b:43:7a:af:76:2f:5b:29:72:70:6d:43:
                    c0:cb:33:7a:9f:c1:34:ad:40:50:1b:26:22:1d:e7:
                    1c:a1:fc:74:af:dd:f6:c6:20:02:6e:e1:f9:27:ab:
                    d4:1a:63:25:30:c9:8c:37:5d:bc:c3:2e:0f:dd:04:
                    4b:9e:e4:1b:25:fa:36:1a:fd:a3:32:99:0a:93:b9:
                    96:a5:d9:c8:a9:0a:2e:e8:3d:26:1d:ef:66:cd:91:
                    ef:4a:d9:bc:43:cf:cb:ce:c8:c3:a6:0e:cf:df:22:
                    cb:cf:0b:33:31:64:dc:1c:94:a2:c7:76:e1:61:b8:
                    16:b8:54:6b:a4:f1:40:98:10:2c:f5:71:b8:e0:61:
                    ae:fd:3f:43:5e:85:f3:b0:9e:5f:30:8b:6d:2f:b6:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:28:1F:A0:A6:90:2C:7D:CA:27:35:9A:C8:DD:28:34:AC:E5:D5:42
            X509v3 Authority Key Identifier:
                keyid:61:3B:E8:AB:98:BD:E2:6E:A2:8F:82:70:7C:5A:10:49:DD:47:E3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136342e302f32322d3232203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:2a:c1:01:08:d8:8a:9e:87:98:c4:57:df:a8:2a:4f:6f:
         44:1f:58:df:c9:50:ce:6a:44:bc:32:8c:78:78:ad:28:68:dc:
         cb:fc:47:14:f3:54:16:e8:d4:e0:6e:44:13:14:77:5b:71:4a:
         37:82:eb:40:5d:36:a9:7f:72:ce:53:a4:82:bb:28:15:50:7f:
         09:58:02:44:7d:4d:35:3d:9f:62:7a:dc:9f:55:17:20:64:b3:
         c8:0c:4b:77:be:2f:58:98:1c:38:93:47:bb:98:07:e6:16:5c:
         18:75:b6:c5:bc:ee:93:d9:e6:bd:6f:9a:66:1b:64:99:cf:fd:
         af:e9:2b:da:77:8b:3d:16:24:bf:c0:39:43:83:70:80:cb:84:
         26:6f:36:d7:aa:f5:d8:b1:d0:98:d4:8e:4a:73:08:c0:65:2b:
         fe:05:7d:ad:e7:67:47:9b:ba:ed:6d:af:64:80:64:b9:f1:5b:
         7b:4e:ec:3d:01:a8:87:3c:40:35:bc:46:0b:e9:d9:ab:74:2c:
         e9:db:b4:f4:43:70:30:9b:c1:54:bd:8f:ec:0a:9c:ec:72:6c:
         56:12:15:c9:5d:ae:2c:95:51:0a:47:74:5a:cc:7e:0c:82:58:
         77:a4:54:8c:11:fc:6f:11:67:ff:35:bc:80:80:d1:fe:50:32:
         65:56:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:15:41 2026 by rpki-client