Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/3139322e3134342e39362e302f32322d3332203d3e20323636323239.roa
File:                     3139322e3134342e39362e302f32322d3332203d3e20323636323239.roa (raw, json)
Hash identifier:          g7w35NOViqCqNYqC2un5uTv85qneXj+Rmk3CKSwV4Cs=
Subject key identifier:   73:AE:C0:1A:E0:11:5A:E8:FA:66:8E:6D:74:8C:D8:98:08:BA:0D:39
Certificate issuer:       /CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
Certificate serial:       624C17DC1EDE9044B2DFE5DE1EF5C8221EF62A57
Authority key identifier: B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/3139322e3134342e39362e302f32322d3332203d3e20323636323239.roa
Signing time:             Mon 06 Apr 2026 16:49:52 +0000
ROA not before:           Mon 06 Apr 2026 16:44:52 +0000
ROA not after:            Mon 05 Apr 2027 16:49:52 +0000
asID:                     266229
IP address blocks:        192.144.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl
                          rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 09:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4c:17:dc:1e:de:90:44:b2:df:e5:de:1e:f5:c8:22:1e:f6:2a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6789ACD4DF939B25C41666FED49EE048FEEFAA8
        Validity
            Not Before: Apr  6 16:44:52 2026 GMT
            Not After : Apr  5 16:49:52 2027 GMT
        Subject: CN=73AEC01AE0115AE8FA668E6D748CD89808BA0D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:e0:71:93:d2:00:d2:a6:a5:3c:51:18:30:
                    66:84:0d:8b:8c:a3:2a:8b:44:85:eb:f8:eb:73:e5:
                    fa:6a:5f:d0:38:a5:e4:2e:6b:b2:83:ff:2a:32:b7:
                    af:cd:ff:10:0f:03:9f:fa:d3:37:37:21:f4:1b:5f:
                    b7:08:03:75:24:bb:0a:27:19:8a:fc:82:6a:39:c9:
                    82:03:4a:8b:be:3f:40:34:46:44:70:a6:2f:75:68:
                    1f:97:13:c1:ab:f1:49:84:5b:1a:04:a6:2a:98:b4:
                    47:ef:35:4e:da:01:ce:e3:ef:51:3a:de:1e:b0:e5:
                    ea:be:d8:a5:d0:bf:7d:83:07:27:3c:e9:62:7c:73:
                    b8:9b:a8:a1:4a:32:7f:52:87:4b:4a:53:dd:2a:5b:
                    79:46:2f:76:70:ce:f7:92:1f:6e:31:90:d3:0b:73:
                    49:ca:f2:99:9b:a8:91:9b:40:3c:b0:95:74:9f:a4:
                    26:8d:86:48:5a:b8:6c:03:66:cb:cf:3e:59:7e:9f:
                    16:28:a5:df:09:7a:4a:e3:64:03:32:b9:17:91:00:
                    e5:89:1c:74:8a:4c:cc:12:c0:93:95:2d:5c:7c:1c:
                    e1:aa:06:f8:58:33:b9:64:59:43:39:30:55:0d:37:
                    15:cb:dd:44:a8:5d:1a:8b:94:62:4a:35:0b:d5:3f:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AE:C0:1A:E0:11:5A:E8:FA:66:8E:6D:74:8C:D8:98:08:BA:0D:39
            X509v3 Authority Key Identifier:
                keyid:B6:78:9A:CD:4D:F9:39:B2:5C:41:66:6F:ED:49:EE:04:8F:EE:FA:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6789ACD4DF939B25C41666FED49EE048FEEFAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A47562jLkxiUfy2SLRSVaFEsNei8Zj1LjoDXdNtJ1Z3F/0/3139322e3134342e39362e302f32322d3332203d3e20323636323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:97:d0:0a:1c:14:8a:ce:6c:79:ac:46:43:cb:91:c1:10:c9:
         66:27:0a:42:23:f6:c8:15:25:f4:20:31:3b:62:ff:12:10:31:
         aa:3d:47:2f:37:47:7a:6e:fb:42:9f:50:c7:9f:09:5d:6e:08:
         c1:3b:3d:37:05:a1:6d:09:8d:5e:bc:c5:34:dd:98:3f:29:61:
         41:f0:c6:98:67:7b:30:7d:e6:c2:72:95:f2:fa:8a:ef:ca:9e:
         cf:b4:26:a9:85:7b:1d:55:94:f4:6c:b3:06:91:ad:8e:22:15:
         83:db:41:59:24:1a:3a:c9:d9:59:63:34:91:43:54:62:e0:54:
         eb:eb:b7:3d:0c:20:8e:8d:b3:a3:43:23:43:48:4d:46:6d:82:
         55:c1:bd:c4:00:1c:96:c5:8e:f2:37:39:3d:67:a9:bb:7c:0b:
         7f:af:1b:a2:29:b1:33:18:00:a7:f6:f4:df:0e:e4:5e:d7:1f:
         da:18:c3:f5:d9:a0:0a:87:c5:48:b4:b7:e2:99:de:b9:5d:b3:
         ae:1e:98:e2:07:66:92:69:98:31:c1:1a:ef:09:84:6c:20:77:
         ba:72:2b:24:1c:b4:8c:c9:b9:a3:fd:82:eb:0b:19:4d:95:9b:
         25:66:2c:96:85:6b:0c:48:0b:8d:70:50:53:13:9b:bf:69:2d:
         93:57:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:51:13 2026 by rpki-client