Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa
File:                     3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa (raw, json)
Hash identifier:          tqIjkzr0YB3Bo/jtczNhz4jhUKqMXM77sSCA8YgTROI=
Subject key identifier:   0F:F2:7C:CE:C1:75:CB:16:61:59:73:C2:C2:F5:B1:E7:5C:24:91:DE
Certificate issuer:       /CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
Certificate serial:       789E08EC2FEDEAE9144503EB36E7711F9EBC2E86
Authority key identifier: 8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa
Signing time:             Mon 22 Jun 2026 20:20:37 +0000
ROA not before:           Mon 22 Jun 2026 20:15:37 +0000
ROA not after:            Mon 21 Jun 2027 20:20:37 +0000
asID:                     270545
IP address blocks:        187.120.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl
                          rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 19:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9e:08:ec:2f:ed:ea:e9:14:45:03:eb:36:e7:71:1f:9e:bc:2e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6
        Validity
            Not Before: Jun 22 20:15:37 2026 GMT
            Not After : Jun 21 20:20:37 2027 GMT
        Subject: CN=0FF27CCEC175CB16615973C2C2F5B1E75C2491DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:3b:32:3b:4f:68:9c:e6:7d:48:68:63:ec:
                    36:2a:23:6e:ac:dc:a8:59:9d:c8:e7:e7:2d:0e:65:
                    f4:e3:1d:8a:38:95:16:f4:58:2b:8f:21:da:27:1e:
                    63:37:3b:f0:b4:ed:03:f4:5c:ed:32:9e:4b:d0:c9:
                    4b:91:bf:5f:55:cc:dc:0d:9a:9e:c3:f8:b3:bc:f9:
                    c4:4c:c6:09:d4:2a:1f:40:ff:76:7c:61:d4:f7:43:
                    ed:27:5e:db:c3:df:a4:0d:fb:ee:b0:24:3b:ad:79:
                    11:78:80:47:6e:4f:7d:cc:e4:8e:40:87:a0:fe:3c:
                    85:09:b6:72:97:92:af:eb:e2:a4:3c:68:47:8e:c9:
                    f5:a2:e9:49:31:8b:60:9a:4f:97:b7:38:19:55:cc:
                    e3:36:fc:ea:f1:64:be:a1:7d:9d:d2:46:de:c1:6b:
                    5f:65:12:9b:34:06:5e:09:3b:66:14:86:c3:d6:9f:
                    bb:58:61:17:25:e1:e6:cf:d8:ae:1f:72:ba:6d:d8:
                    d9:a4:66:f4:81:d8:1f:23:52:40:58:12:6c:c3:05:
                    10:f6:ef:95:44:4f:4a:68:1a:42:ef:80:cb:2b:47:
                    be:c8:c4:4a:c6:73:a3:65:7d:e7:f6:30:31:64:8e:
                    bc:06:e6:ac:7b:db:70:76:f7:b3:e8:62:0f:0d:ab:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F2:7C:CE:C1:75:CB:16:61:59:73:C2:C2:F5:B1:E7:5C:24:91:DE
            X509v3 Authority Key Identifier:
                keyid:8A:C4:50:34:40:25:3C:4A:4B:47:1C:CC:1B:5D:B9:D6:F1:EC:6A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AC4503440253C4A4B471CCC1B5DB9D6F1EC6AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BtMMJnVCGfnYWw948awLnzmiKDbKxkza4yKU3qgDTUnB/0/3138372e3132302e3136342e302f32322d3234203d3e20323730353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:81:f8:87:a1:aa:0f:99:4f:6c:26:85:bd:21:11:0a:22:51:
         20:a2:bb:68:17:06:7d:22:3d:22:5e:81:fb:ce:26:68:1a:6e:
         56:c8:96:55:4d:70:86:0e:9d:6c:3a:d8:78:af:2d:0f:3b:9d:
         56:bc:e7:95:ee:2f:97:3b:3b:12:a8:b8:51:fc:82:1a:c3:d7:
         63:1b:b1:b7:2e:cd:d4:24:cb:cf:2b:36:ec:aa:24:61:0e:75:
         ff:75:2f:b8:dd:42:53:e8:b9:09:13:65:4a:4e:3a:3d:e5:be:
         b6:f9:83:a6:7e:57:0e:63:2e:92:ee:46:74:2c:a6:41:61:b9:
         c2:b9:83:91:a0:f7:93:a1:55:8f:cd:73:c4:be:fd:cc:3d:d2:
         a5:32:e7:20:bd:f6:aa:a0:c3:d1:9d:8a:e4:54:fd:24:e3:1a:
         6c:1d:4a:1b:0c:10:b7:ea:72:86:da:a1:cf:c5:60:12:ed:ac:
         cb:f3:dc:a0:10:19:6a:29:f2:fa:b3:0c:c0:a4:2e:51:a1:7c:
         d4:ca:a3:eb:3c:ca:92:8f:8e:a1:f4:7a:d4:2a:26:eb:b9:39:
         ab:55:b5:de:cd:06:4b:44:39:7a:55:df:a6:f9:fd:88:05:a7:
         5d:4e:bf:49:23:97:c7:13:c9:05:3d:da:06:98:eb:c7:42:2e:
         29:b7:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:14:24 2026 by rpki-client