Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa (raw, json)
Hash identifier:          xWjFkUUH3xOUgkG4v7wi/q2SB8ChAo5GzZN4HLrLRT8=
Subject key identifier:   83:58:60:C2:C9:A7:5C:A2:D3:45:14:E6:F3:E6:B9:F1:5F:E1:86:6E
Certificate issuer:       /CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
Certificate serial:       7A424883024B628D3A573E1CCD10F79DCDD1AAC2
Authority key identifier: 20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa
Signing time:             Wed 01 Jul 2026 18:16:01 +0000
ROA not before:           Wed 01 Jul 2026 18:11:01 +0000
ROA not after:            Wed 30 Jun 2027 18:16:01 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl
                          rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:42:48:83:02:4b:62:8d:3a:57:3e:1c:cd:10:f7:9d:cd:d1:aa:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DBD3A0B54D19E135BA53B31C458842C89D49F3
        Validity
            Not Before: Jul  1 18:11:01 2026 GMT
            Not After : Jun 30 18:16:01 2027 GMT
        Subject: CN=835860C2C9A75CA2D34514E6F3E6B9F15FE1866E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:e1:c7:6d:58:48:a2:b6:d3:1c:9b:c7:96:
                    b3:b4:08:ae:b4:08:8c:6c:35:58:9c:d4:34:53:ec:
                    68:e0:45:77:93:b8:74:d8:e5:37:9e:ad:d2:77:f9:
                    8f:f0:d9:1c:de:0c:be:2e:a1:99:f0:b5:f2:9a:b2:
                    16:00:22:0b:8e:e9:14:5f:09:dc:a6:2f:ce:c2:48:
                    c7:0d:2d:ea:ee:60:4a:5a:a9:5a:01:21:58:1b:d8:
                    c3:90:41:c3:e3:b3:90:f6:c7:73:c4:74:d0:01:0d:
                    4c:47:10:63:19:f0:2e:33:e0:77:66:cc:e3:d0:96:
                    98:d8:f0:06:83:03:85:b4:1e:23:cd:18:25:b0:aa:
                    7d:1c:d6:d1:b1:5f:fe:60:ab:02:83:3d:6f:47:36:
                    1b:68:0c:e1:4d:09:fc:c0:25:85:30:d6:1d:00:a9:
                    b0:51:9b:d1:a4:40:9e:b3:17:25:d5:da:88:36:32:
                    ed:4b:8b:c3:1e:42:d3:89:86:a1:f3:d5:59:99:ac:
                    00:e2:a9:18:c2:65:b1:b0:eb:ec:1d:bf:09:d7:58:
                    b3:f1:2f:d7:11:e6:e1:51:91:93:90:27:d7:2b:2d:
                    f0:6e:7f:09:18:ff:99:31:f6:63:28:fd:0d:97:3a:
                    69:62:78:92:0d:ac:1e:41:b5:92:f0:94:8e:29:f2:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:60:C2:C9:A7:5C:A2:D3:45:14:E6:F3:E6:B9:F1:5F:E1:86:6E
            X509v3 Authority Key Identifier:
                keyid:20:DB:D3:A0:B5:4D:19:E1:35:BA:53:B3:1C:45:88:42:C8:9D:49:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/20DBD3A0B54D19E135BA53B31C458842C89D49F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20DBD3A0B54D19E135BA53B31C458842C89D49F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3332203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:65:51:e8:b1:9f:72:0d:74:21:a4:e9:b4:6b:19:05:47:7a:
         81:32:c2:3d:bc:2a:80:f2:ed:81:80:89:5d:90:f6:4b:04:79:
         02:2a:ba:6f:f8:b0:a9:2e:d2:88:ea:ff:c9:13:e0:c9:50:28:
         db:0d:70:8a:44:c9:0c:a5:9a:f3:75:fa:6d:7d:08:6b:8f:1e:
         58:54:f0:a4:16:0c:c0:cd:05:2e:78:ff:4d:1b:b9:2c:c1:e1:
         b8:3f:fc:d2:59:1a:76:27:c5:6c:e2:2f:d7:6d:b9:1c:90:53:
         a9:90:8c:87:d7:b4:c0:38:48:80:3f:4c:54:23:63:89:9b:55:
         e6:b3:24:1e:39:5b:c9:62:ea:70:e4:7b:c8:e4:a6:46:5f:19:
         9f:d0:4a:81:4f:7a:8a:53:7c:c1:53:60:97:bb:e5:60:54:db:
         96:eb:46:7b:d3:31:df:46:9a:26:05:7c:91:d5:35:55:b2:fa:
         3e:d1:e9:ed:61:41:31:b3:e4:29:72:25:7c:80:9b:22:8f:df:
         1a:b0:1f:14:d3:68:e1:d1:82:aa:1d:c3:dd:85:b7:e0:51:ce:
         86:16:78:8c:07:65:cb:f6:7a:c9:8b:4d:51:04:31:be:c4:d9:
         19:d1:a7:7b:66:29:a2:dd:b6:51:e9:61:d3:fa:72:8b:23:b8:
         b5:71:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:22:54 2026 by rpki-client