Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
File:                     3138392e38342e3136302e302f32302d3234203d3e203238313731.roa (raw, json)
Hash identifier:          cljmnmwM0qz57RCZ/tP+9uVEHvBbHg7N5N1UAF3K0sg=
Subject key identifier:   6B:EB:9E:B9:C6:15:68:43:12:6D:A5:A5:80:D6:4F:9D:3E:B2:FB:00
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       6F998560C2A819B20AC6246BC47658357C709151
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:31:49 +0000
ROA not before:           Mon 10 Aug 2026 17:26:49 +0000
ROA not after:            Mon 09 Aug 2027 17:31:49 +0000
asID:                     28171
IP address blocks:        189.84.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:85:60:c2:a8:19:b2:0a:c6:24:6b:c4:76:58:35:7c:70:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:26:49 2026 GMT
            Not After : Aug  9 17:31:49 2027 GMT
        Subject: CN=6BEB9EB9C6156843126DA5A580D64F9D3EB2FB00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:92:a5:94:1e:57:31:4f:1d:77:b0:8a:01:
                    1d:32:d5:87:d8:9e:8f:01:cd:19:71:2c:3b:2e:5a:
                    a2:e7:e9:83:f2:92:72:be:c7:65:fc:96:11:08:49:
                    e7:22:f3:29:b5:5f:61:55:d3:12:2a:d2:dd:19:2e:
                    9c:21:93:2b:f8:80:af:a1:67:3f:2e:09:32:d8:24:
                    c5:ec:4b:ca:dd:98:98:b0:05:16:06:60:ce:37:ab:
                    3a:33:e5:f8:de:02:ad:8c:74:29:53:80:d7:02:18:
                    f3:8d:39:44:7e:df:60:fb:38:e6:9b:bf:37:f1:e6:
                    60:88:f6:e7:db:af:6d:b4:39:3a:99:75:49:a2:18:
                    c7:da:5d:25:a8:71:a2:0d:02:cb:58:76:fa:3d:9f:
                    f4:dd:7e:0a:7c:28:4f:4e:eb:7a:c1:c3:ee:f8:7c:
                    a6:52:32:27:4f:78:26:fa:7a:26:28:a2:f7:9b:4c:
                    bd:3a:ea:ef:1e:59:44:7f:b9:f9:42:63:f3:16:57:
                    c4:03:e8:df:90:aa:ac:a5:43:54:27:39:d9:ec:e3:
                    fe:26:53:ef:e1:18:b9:ec:f3:b5:f9:53:cd:de:71:
                    ba:f8:b3:58:78:fe:88:bb:f6:b4:15:14:b1:0a:b2:
                    86:c3:95:c5:de:97:1d:08:98:a0:81:27:29:75:d4:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:9E:B9:C6:15:68:43:12:6D:A5:A5:80:D6:4F:9D:3E:B2:FB:00
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3138392e38342e3136302e302f32302d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:06:a4:e6:ae:48:da:56:a8:d5:73:41:f5:bb:68:46:51:0a:
         96:84:8c:a1:69:91:cb:91:4a:83:ba:ee:df:d7:88:75:4c:28:
         38:11:65:0d:00:d7:8f:98:b5:75:57:bc:ae:e5:51:3f:b2:50:
         17:be:c4:d9:55:2b:55:07:90:c0:6f:6a:95:95:fc:bf:a9:3d:
         09:64:b3:e4:72:80:67:1a:92:38:55:a0:9b:1c:dd:f6:75:b9:
         6a:0d:86:34:8f:4b:5c:6b:57:40:47:92:54:40:b7:6b:d1:6d:
         19:0f:44:e0:42:5b:af:c4:e6:25:fa:30:b4:79:79:f1:b2:42:
         7c:9d:80:ee:8c:40:5f:f5:db:95:a6:c5:51:8b:f7:13:27:a0:
         1e:d8:0a:bc:d1:5f:9e:8c:f3:6a:06:aa:d6:ea:39:3b:a1:ef:
         be:5b:d7:b5:74:17:24:de:89:93:9e:1d:4f:25:b7:3e:b2:78:
         08:ab:2c:16:55:27:3f:82:d9:64:e2:c7:02:35:d3:f7:cd:b5:
         7a:59:d1:f3:fb:e5:9f:69:b9:07:59:9a:fd:56:4e:b0:15:01:
         fe:07:f1:2e:1c:5a:90:19:20:32:77:45:11:27:3a:b2:54:13:
         f2:39:9c:03:04:5e:4e:0a:1f:03:f1:c4:ed:08:25:ed:cd:57:
         8a:f8:cc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:39:28 2026 by rpki-client