Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa
File:                     3138392e33362e3139322e302f32302d3234203d3e203238333038.roa (raw, json)
Hash identifier:          63H52xzbTSCtzXPYPFuA+TdwcJTVhyq3wRNs+WUH/3A=
Subject key identifier:   BB:C6:C2:B6:6C:5D:86:07:7E:F1:68:5A:42:BA:01:7D:DC:E9:95:85
Certificate issuer:       /CN=444DB06404BA29790D13A1335E8CC31B78AF2E4F
Certificate serial:       6A252202055F5BB9BEC248393F9D81A693B540BD
Authority key identifier: 44:4D:B0:64:04:BA:29:79:0D:13:A1:33:5E:8C:C3:1B:78:AF:2E:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444DB06404BA29790D13A1335E8CC31B78AF2E4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa
Signing time:             Fri 15 May 2026 14:53:17 +0000
ROA not before:           Fri 15 May 2026 14:48:17 +0000
ROA not after:            Fri 14 May 2027 14:53:17 +0000
asID:                     28308
IP address blocks:        189.36.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/444DB06404BA29790D13A1335E8CC31B78AF2E4F.crl
                          rsync://rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/444DB06404BA29790D13A1335E8CC31B78AF2E4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444DB06404BA29790D13A1335E8CC31B78AF2E4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:25:22:02:05:5f:5b:b9:be:c2:48:39:3f:9d:81:a6:93:b5:40:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444DB06404BA29790D13A1335E8CC31B78AF2E4F
        Validity
            Not Before: May 15 14:48:17 2026 GMT
            Not After : May 14 14:53:17 2027 GMT
        Subject: CN=BBC6C2B66C5D86077EF1685A42BA017DDCE99585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:ca:18:21:24:6e:55:91:58:41:ee:a7:7c:
                    cc:d9:d0:ea:e1:ae:07:c6:c0:42:02:bc:d8:20:22:
                    f6:72:c4:df:59:82:e2:45:1d:4c:54:50:76:b8:8f:
                    b3:f3:7b:04:08:fb:61:5a:43:d2:34:55:d1:2f:d7:
                    b7:d5:22:6a:e2:2f:da:28:e1:17:7f:50:96:8c:cf:
                    50:01:b2:0a:ce:f6:d1:76:46:8e:fe:cc:a8:cc:37:
                    fa:ef:95:fa:bf:39:32:ba:58:35:67:07:e0:47:44:
                    3a:d8:db:03:f7:76:89:f3:0a:15:88:13:68:b2:9f:
                    c2:e0:40:64:83:53:22:f8:3a:73:55:fc:5c:fd:2e:
                    0e:12:1e:c1:6f:dd:10:0c:b3:5c:00:db:2b:05:9e:
                    e6:52:69:c6:1b:dc:5e:a0:b2:6f:a6:38:85:ec:02:
                    28:66:56:49:2f:1b:70:b6:5f:e1:c9:8b:04:51:57:
                    de:72:97:ae:ed:e6:8e:dc:37:a5:0c:03:e8:c9:69:
                    0f:d7:9d:46:83:01:e0:bf:97:95:1f:66:8e:04:cf:
                    1c:26:b6:24:5e:6e:8c:b3:24:f4:6a:58:57:5c:a3:
                    65:94:87:ed:c6:71:bd:20:1c:58:a8:14:1b:fd:ec:
                    f1:0e:74:62:ad:c8:94:7d:7e:d1:e9:6f:6c:4d:af:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:C2:B6:6C:5D:86:07:7E:F1:68:5A:42:BA:01:7D:DC:E9:95:85
            X509v3 Authority Key Identifier:
                keyid:44:4D:B0:64:04:BA:29:79:0D:13:A1:33:5E:8C:C3:1B:78:AF:2E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/444DB06404BA29790D13A1335E8CC31B78AF2E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444DB06404BA29790D13A1335E8CC31B78AF2E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUsF4MekddgTPsdzHMbMu7Dkzw2k2YykLCawf9X7wCNv/0/3138392e33362e3139322e302f32302d3234203d3e203238333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:eb:02:2f:ae:41:8e:69:3d:55:bd:3a:3a:ff:cf:06:c9:d2:
         d5:46:7b:82:78:e6:bb:49:b6:62:b1:a1:44:f3:d8:3b:cf:62:
         ed:5b:31:7c:e5:b9:57:c6:28:ce:a9:c3:ea:e3:77:b1:e7:4b:
         39:38:da:05:ab:86:3a:39:0e:8d:4e:ae:db:01:64:88:41:5d:
         01:c3:f6:fe:82:4e:32:72:d9:87:12:09:6b:16:e3:3d:4e:c9:
         73:04:ec:64:e7:48:4e:d1:f3:5a:8e:4e:71:17:d1:4e:9d:13:
         d6:a9:e0:4b:08:0b:ac:42:75:7d:35:5b:31:ad:02:d9:0c:56:
         94:27:de:4a:6c:bc:60:1b:ae:0d:8c:29:2b:88:22:b5:3e:9a:
         52:c7:d4:82:28:5f:34:32:b5:10:2b:47:f7:e2:95:c5:fe:0f:
         62:85:7d:8e:f7:16:8f:b5:a8:d3:d0:23:1c:91:fc:68:66:5e:
         24:e0:a7:8c:3e:d2:8b:89:23:a5:67:b1:02:b0:b6:14:36:84:
         91:1c:62:f6:ee:f2:10:8f:21:8f:f4:89:6e:31:c4:69:65:0d:
         3f:4b:a5:ff:6a:e7:48:39:1a:3e:0f:7d:0e:68:db:8b:32:81:
         f4:8e:cf:30:dd:4a:b4:92:d9:1e:b4:dc:53:d7:3a:29:3e:41:
         6e:59:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:25:53 2026 by rpki-client