Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
File:                     3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa (raw, json)
Hash identifier:          /tzVYz3zlU70MsmFB4Uj/Y468LFw6I7bBfbNMaPXL8w=
Subject key identifier:   74:D2:20:0B:8E:3F:73:54:6A:FD:D8:C4:40:C3:AA:46:75:7B:80:62
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       192A60BE00BEEB89892B7F81E02DA8C75A63EB46
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa
Signing time:             Fri 22 May 2026 14:50:57 +0000
ROA not before:           Fri 22 May 2026 14:45:57 +0000
ROA not after:            Fri 21 May 2027 14:50:57 +0000
asID:                     270711
IP address blocks:        189.127.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2a:60:be:00:be:eb:89:89:2b:7f:81:e0:2d:a8:c7:5a:63:eb:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: May 22 14:45:57 2026 GMT
            Not After : May 21 14:50:57 2027 GMT
        Subject: CN=74D2200B8E3F73546AFDD8C440C3AA46757B8062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:94:56:28:02:9b:33:b6:de:93:1d:dc:14:d8:
                    90:9d:27:4f:51:d6:61:4d:69:cc:de:a0:17:08:03:
                    32:23:3f:03:fc:5d:32:bb:89:f6:84:31:28:8e:94:
                    f4:35:3e:88:2c:43:1b:1b:75:17:d9:aa:69:aa:1a:
                    db:82:4c:bf:b8:4c:5c:c3:86:72:00:f6:fd:c0:6d:
                    04:53:53:85:10:f4:9e:44:b6:4f:95:3b:aa:7e:c8:
                    a1:57:07:81:c7:61:6e:eb:38:a1:53:fb:76:3c:4c:
                    46:d6:75:09:c7:01:de:37:9e:ef:07:f8:20:4d:e5:
                    8a:95:74:f7:39:45:32:e9:29:f3:a2:75:67:6f:35:
                    84:b6:b3:a2:9b:f4:7a:d1:e6:70:eb:54:2c:75:6b:
                    83:29:9f:53:a9:fb:1c:31:c3:90:77:40:cb:83:27:
                    19:cb:b0:ba:f2:6a:b6:a8:07:85:19:d7:7b:f7:9f:
                    95:ce:a8:07:98:6e:c1:a1:dd:73:cc:32:79:54:54:
                    a7:bd:22:cb:84:4e:3e:f4:17:d6:b9:cb:dd:11:10:
                    17:0f:3d:5a:39:da:9c:57:cd:c4:20:3d:5d:af:ca:
                    b1:4a:03:83:fa:13:08:f3:5c:1d:7c:cd:bb:09:b4:
                    86:26:0e:e1:6e:b9:c8:3f:4c:dc:e4:10:0e:50:04:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:20:0B:8E:3F:73:54:6A:FD:D8:C4:40:C3:AA:46:75:7B:80:62
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3133302e302f32332d3233203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:fc:30:4a:fd:96:0f:01:9c:20:a7:48:82:89:cb:f3:8e:55:
         ed:19:32:64:40:ae:df:5c:84:6b:22:df:c1:67:66:0e:de:59:
         0e:39:31:89:01:22:bf:e1:a6:32:bf:9d:c9:c7:30:53:85:17:
         6d:33:42:38:64:04:52:f4:c7:e8:c8:2a:70:38:d3:f9:3b:8e:
         82:eb:b6:35:17:b4:ff:26:b5:a4:b5:c0:b1:00:bb:3b:79:d5:
         22:2f:53:f2:73:7d:4d:3d:fa:e3:5f:bc:42:2f:86:39:66:57:
         ba:b7:f8:d0:29:a3:af:7e:e9:7f:0f:c2:7f:ec:95:58:35:e5:
         3d:1b:1b:43:3b:14:6f:50:d0:d4:33:1c:f2:d8:a7:4d:ee:71:
         21:2f:91:13:fd:42:25:c5:b1:77:75:74:89:b7:bd:32:ad:2c:
         63:1e:e6:f5:0d:5e:44:d4:17:0e:6f:bf:2c:4c:8c:14:3c:96:
         3b:fc:88:dc:21:51:c2:78:db:90:35:c6:d5:18:0d:9b:9f:2a:
         fc:88:b4:f7:4b:ab:51:8a:e8:6f:3d:ed:ff:e6:01:e8:ca:b6:
         15:3d:d0:b5:f3:e9:c0:05:0f:a1:13:2a:af:f1:a3:d2:17:61:
         ca:1e:29:2c:7f:a5:fe:b9:8b:ac:dc:83:bf:d5:37:78:d8:00:
         e9:9c:59:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:18:52 2026 by rpki-client