Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32332d3233203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32332d3233203d3e20323730373131.roa (raw, json)
Hash identifier:          +6qP0WYEZ5JVCCga9JloFVoMlbR4gFcw9BegVHK4X5A=
Subject key identifier:   34:89:74:31:55:45:80:13:41:1D:01:30:0A:6D:B7:5F:8D:67:9C:23
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       14463704FA97C43F3537083BBBB0E534997239EA
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32332d3233203d3e20323730373131.roa
Signing time:             Fri 22 May 2026 14:50:57 +0000
ROA not before:           Fri 22 May 2026 14:45:57 +0000
ROA not after:            Fri 21 May 2027 14:50:57 +0000
asID:                     270711
IP address blocks:        189.127.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:46:37:04:fa:97:c4:3f:35:37:08:3b:bb:b0:e5:34:99:72:39:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: May 22 14:45:57 2026 GMT
            Not After : May 21 14:50:57 2027 GMT
        Subject: CN=3489743155458013411D01300A6DB75F8D679C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:7b:6f:77:fc:a2:02:9d:13:8d:72:51:1f:
                    37:62:2a:69:39:e4:f5:7e:50:55:9c:b9:63:93:17:
                    27:7f:d6:e8:ac:15:87:21:8a:4c:86:f0:d0:25:ac:
                    8d:1e:ad:b7:fb:6d:c7:71:c9:c3:07:eb:54:45:88:
                    3e:27:e4:7d:2d:d2:e8:30:c0:fb:a6:46:2b:9f:3f:
                    af:b3:be:2a:24:0d:79:56:6f:3c:16:85:f5:4a:8d:
                    f2:6c:ee:eb:86:c1:f9:a9:c4:cc:f4:fc:79:5f:a1:
                    c9:b7:cf:13:9f:01:17:16:59:41:cd:ce:1c:a9:98:
                    88:44:1b:fb:13:91:27:e6:f8:b6:c5:8e:94:46:45:
                    22:73:e5:1e:1e:56:54:5c:29:0a:65:56:f3:04:76:
                    09:16:06:55:68:b5:38:83:96:02:7a:95:1f:9c:f1:
                    3f:42:62:30:4c:fc:08:ee:93:34:70:8a:c4:df:e1:
                    74:a0:81:2e:f7:f6:56:6c:15:26:88:59:1b:60:59:
                    38:85:8f:c0:a1:9e:38:62:10:da:4b:27:28:1d:11:
                    67:28:71:c4:45:50:7e:fb:56:d5:7d:30:ec:87:52:
                    8b:f2:54:0d:fd:c2:2b:55:3d:a8:73:b4:cc:5d:09:
                    a1:1a:fe:34:44:89:ad:d1:e3:2a:c9:2f:9b:19:cd:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:89:74:31:55:45:80:13:41:1D:01:30:0A:6D:B7:5F:8D:67:9C:23
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32332d3233203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:88:fa:71:9a:60:05:d8:cd:ff:11:e7:0c:5d:88:cf:bb:26:
         26:5a:3b:b1:df:5a:d4:ca:f6:2b:7a:8b:e7:6b:f7:4a:b3:9f:
         1a:f4:b1:93:aa:3c:55:5a:42:97:d6:f1:be:0e:05:9c:c7:75:
         d8:1d:4f:f0:17:58:34:db:59:14:89:6d:8c:52:e9:9e:2f:24:
         7d:18:73:1f:36:a3:63:c1:06:02:8f:f8:2b:b2:b6:59:a7:1a:
         3a:c2:08:36:08:1f:30:b8:43:56:74:84:e5:e5:ab:2d:73:93:
         d2:8f:61:63:e0:fa:80:5e:08:34:c0:a3:14:86:a1:1e:95:70:
         54:31:98:48:06:4d:4f:03:9f:dc:90:5e:74:77:87:38:eb:15:
         d5:c8:73:6e:84:4e:bb:24:ab:80:17:a1:d1:26:b1:40:3c:ee:
         3f:f2:48:29:e6:50:a2:0d:9a:d9:22:f9:e7:c8:f9:8d:22:64:
         65:ef:9c:f7:77:55:db:80:94:97:99:56:a7:9f:24:5f:4d:2b:
         6a:45:c4:d4:b5:91:e0:4e:44:2f:62:9d:ed:42:e3:4a:be:5e:
         12:8b:03:c5:57:c3:7c:6b:8d:20:ed:77:61:de:99:7a:36:cc:
         15:10:76:a9:95:9b:a1:30:22:17:be:3d:b9:44:cf:b7:0b:e0:
         5f:af:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:18:55 2026 by rpki-client