Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133302e302f32342d3234203d3e203133333335.roa
File:                     3137372e3130342e3133302e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier:          zGnXyTfeUrCDlJH93VsyMHIBb6Ga7XOS708WaMRKeXc=
Subject key identifier:   DC:64:C6:47:F5:07:88:00:45:9A:BA:28:6B:68:02:4B:B0:F2:BA:F9
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4A6E93D4084083F8074AEACFF06E02D07576D5AE
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133302e302f32342d3234203d3e203133333335.roa
Signing time:             Mon 01 Jun 2026 21:04:22 +0000
ROA not before:           Mon 01 Jun 2026 20:59:22 +0000
ROA not after:            Mon 31 May 2027 21:04:22 +0000
asID:                     13335
IP address blocks:        177.104.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jun 2026 19:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6e:93:d4:08:40:83:f8:07:4a:ea:cf:f0:6e:02:d0:75:76:d5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  1 20:59:22 2026 GMT
            Not After : May 31 21:04:22 2027 GMT
        Subject: CN=DC64C647F5078800459ABA286B68024BB0F2BAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:49:47:fc:b1:1a:f3:fb:fb:e6:e1:74:9a:
                    25:9e:6e:12:0c:70:ad:fd:91:8f:7c:06:7f:c1:63:
                    ba:ab:8d:af:a4:aa:b4:fa:c1:e8:a0:94:8c:eb:f4:
                    93:1c:75:dc:c5:7e:25:fe:1a:35:56:b6:ef:d3:48:
                    75:0f:3b:75:5c:a5:ac:07:6b:f5:2a:27:1e:c9:47:
                    ca:00:21:d6:f3:08:1c:42:ac:5b:bf:69:0c:b6:51:
                    83:0b:b1:27:62:4e:23:ba:55:ec:35:53:51:b8:b9:
                    c1:d5:c0:32:33:2e:59:fb:18:9f:e5:44:31:41:05:
                    39:60:49:70:b4:ae:b6:d9:78:fd:bb:2d:ba:ca:b3:
                    b9:11:bf:0e:86:ef:ba:8e:0b:76:ae:a2:87:85:6b:
                    43:0d:02:78:f7:e3:e0:44:21:aa:13:80:55:9e:ee:
                    83:ee:a3:c7:52:f9:66:c9:ae:91:fc:f4:42:39:db:
                    58:a6:f2:2a:d8:66:af:5b:7b:45:47:8a:d6:64:b0:
                    07:2d:e4:14:10:99:1a:74:a4:b8:ae:71:6f:07:24:
                    0f:00:59:b7:45:69:44:53:f3:ca:94:e1:3f:89:b1:
                    7e:9f:7f:83:8c:ee:e4:72:9b:7a:9c:8f:ad:f4:35:
                    d4:5c:8e:61:29:c8:11:1f:bd:ef:66:b4:26:9e:8e:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:64:C6:47:F5:07:88:00:45:9A:BA:28:6B:68:02:4B:B0:F2:BA:F9
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3137372e3130342e3133302e302f32342d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:9e:46:cd:dd:2d:ef:33:8d:0d:9d:6a:59:b5:83:03:cd:
         1d:12:05:2e:70:da:fb:17:ab:85:e6:eb:49:79:fe:8f:a1:b6:
         8e:5f:fb:35:c2:4b:ae:e1:49:01:41:37:6d:e1:56:3d:55:7a:
         82:c1:5c:44:6c:d5:41:5f:78:1b:f6:be:c2:e5:68:50:36:19:
         fa:06:88:17:de:2b:93:85:c8:a8:09:18:43:72:b2:9e:d9:6e:
         fa:36:76:12:15:57:9c:e5:2c:f7:51:13:9b:7a:0e:93:79:89:
         85:fd:7e:91:35:92:24:8f:c8:13:7b:81:e6:0c:c9:96:fd:34:
         a9:8a:80:ca:17:56:5c:c9:4c:26:88:95:21:61:03:ca:03:e9:
         6b:8c:a8:65:b5:3c:f8:df:da:e0:02:d2:ed:24:ea:cb:e8:0e:
         74:ac:9c:e5:96:b4:c0:a8:3c:f9:38:2d:f3:12:4b:4f:fa:04:
         7e:1a:4c:07:13:ec:a8:00:be:99:d4:8d:db:28:02:ac:68:4b:
         df:12:5d:56:f7:f1:d6:5b:59:4a:62:e2:ff:11:d5:7d:38:b6:
         f9:7b:d6:d7:07:3e:6d:86:86:51:51:a4:75:03:81:b4:ca:eb:
         39:ee:7c:fe:05:b2:e8:3b:dc:0a:7a:a9:62:d2:97:19:74:39:
         92:9a:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:19 2026 by rpki-client