Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32342d3234203d3e20323730333431.roa
File:                     3139302e38332e39362e302f32342d3234203d3e20323730333431.roa (raw, json)
Hash identifier:          irjAVo0bmVdG7aF79vl0f2D9PCzuRW2LbAS7Hejw5zk=
Subject key identifier:   24:5E:70:A2:98:BE:B1:54:D5:03:AC:8F:C2:3B:35:20:C0:56:F6:58
Certificate issuer:       /CN=D4CE1443D6786421014CB2B08469ADBFF750F303
Certificate serial:       69DE158AFE45FB93ACF04F060DBAE2CC452D4AA8
Authority key identifier: D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32342d3234203d3e20323730333431.roa
Signing time:             Thu 25 Jun 2026 13:51:13 +0000
ROA not before:           Thu 25 Jun 2026 13:46:13 +0000
ROA not after:            Thu 24 Jun 2027 13:51:13 +0000
asID:                     270341
IP address blocks:        190.83.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl
                          rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:de:15:8a:fe:45:fb:93:ac:f0:4f:06:0d:ba:e2:cc:45:2d:4a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4CE1443D6786421014CB2B08469ADBFF750F303
        Validity
            Not Before: Jun 25 13:46:13 2026 GMT
            Not After : Jun 24 13:51:13 2027 GMT
        Subject: CN=245E70A298BEB154D503AC8FC23B3520C056F658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:13:e0:87:83:e3:13:5f:8f:d7:77:a6:ce:
                    f7:56:da:af:bd:7c:b2:63:e7:b7:ee:cd:98:d0:7b:
                    e9:27:70:b8:f0:fc:af:e4:7e:1f:d6:53:b4:5b:40:
                    3a:99:c5:dd:fc:1f:de:60:03:06:17:3c:ee:ca:73:
                    48:ff:e3:2c:23:52:98:9a:13:5b:d3:1a:26:b4:da:
                    f0:a6:1b:3a:8b:9c:45:c4:25:55:96:4d:ba:0c:24:
                    ca:09:b3:e3:eb:8d:b1:36:40:8d:ec:5c:d5:03:7a:
                    09:87:19:a2:15:d6:1b:46:c3:43:ae:8c:97:2a:59:
                    72:b9:ba:cf:a1:f5:c4:86:f2:14:8e:1d:d7:50:7c:
                    c2:bd:ab:e4:48:82:2b:e7:53:38:a6:39:cb:5c:f6:
                    79:c5:39:24:48:8c:6c:56:54:16:56:98:1d:32:96:
                    0a:1f:1c:f9:a0:9f:d4:74:d6:5e:83:b1:e1:00:fb:
                    d9:af:61:b8:87:d3:1a:32:17:6c:96:f2:be:ce:a0:
                    0c:95:b8:a8:e3:18:5f:42:67:a0:47:39:03:1d:88:
                    3e:e2:5a:e8:f8:bf:26:f5:94:e0:f6:49:e0:d4:29:
                    95:13:a0:56:89:c1:72:d0:be:fc:fb:ab:14:ff:27:
                    1d:d6:b1:86:f7:8f:96:77:c2:ba:b7:28:c5:cd:3d:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:70:A2:98:BE:B1:54:D5:03:AC:8F:C2:3B:35:20:C0:56:F6:58
            X509v3 Authority Key Identifier:
                keyid:D4:CE:14:43:D6:78:64:21:01:4C:B2:B0:84:69:AD:BF:F7:50:F3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/D4CE1443D6786421014CB2B08469ADBFF750F303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4CE1443D6786421014CB2B08469ADBFF750F303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EunLcF2cCcunjWQ15KnMYKCSBAeyTHYCu71EPDdUmQBN/0/3139302e38332e39362e302f32342d3234203d3e20323730333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:51:dc:8d:78:e7:a7:04:ee:f8:55:c4:80:8b:8b:a7:db:
         3c:46:25:d6:12:22:cd:98:85:c1:b6:09:89:ad:74:58:1c:fc:
         44:fc:33:a8:b6:3c:50:87:0c:6a:f4:ce:8b:b7:36:c3:5f:de:
         66:c1:06:b3:4e:e7:42:ca:f7:8c:64:79:db:db:a8:57:d2:da:
         57:96:08:92:d4:d2:91:7f:ce:8f:9f:8d:42:72:48:3f:a0:b3:
         07:66:c7:90:44:43:63:1c:a9:08:42:e5:ca:f4:ff:eb:4f:06:
         98:b4:31:a3:c8:5e:a9:38:d7:2d:4a:95:ee:0f:7b:f0:b2:c2:
         25:fa:2d:fa:fe:a4:d9:3c:89:5c:73:89:58:53:76:e0:09:ba:
         07:22:ff:73:e9:4d:5e:c5:dc:8f:fd:b2:c4:36:83:21:93:51:
         16:36:ee:30:e3:3f:cf:c4:c4:a7:1f:e6:63:f3:8b:56:1a:88:
         65:26:fa:08:7c:cd:df:4a:2c:51:83:1c:16:d7:11:57:7d:b2:
         7b:d9:55:ff:02:08:a9:ce:09:51:d0:7f:8a:4d:d9:6e:7d:ec:
         c1:9a:72:b1:dc:2f:25:06:60:09:a3:ec:c8:f3:58:37:51:a1:
         bd:be:98:7c:49:4e:59:e3:f8:80:9b:af:ac:e9:c9:94:2a:36:
         4f:dc:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:06:59 2026 by rpki-client