Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231322e302f32322d3234203d3e20323734333636.roa
File:                     3139302e31312e3231322e302f32322d3234203d3e20323734333636.roa (raw, json)
Hash identifier:          wSQl8h7vqYdMFjjqHOnSXVwzg+R6UngMp8CGn13BABs=
Subject key identifier:   5B:A3:E3:AA:B9:42:09:5B:A9:61:E8:80:76:E8:4D:64:9D:11:B9:15
Certificate issuer:       /CN=4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C
Certificate serial:       0EF2E6BB85511138C7348A128B3E7DE397C7B178
Authority key identifier: 4B:23:5A:1A:B7:44:46:1E:39:CD:6D:3A:D9:AB:4A:71:8B:D7:E2:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231322e302f32322d3234203d3e20323734333636.roa
Signing time:             Thu 02 Jul 2026 15:21:23 +0000
ROA not before:           Thu 02 Jul 2026 15:16:23 +0000
ROA not after:            Thu 01 Jul 2027 15:21:23 +0000
asID:                     274366
IP address blocks:        190.11.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.crl
                          rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f2:e6:bb:85:51:11:38:c7:34:8a:12:8b:3e:7d:e3:97:c7:b1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C
        Validity
            Not Before: Jul  2 15:16:23 2026 GMT
            Not After : Jul  1 15:21:23 2027 GMT
        Subject: CN=5BA3E3AAB942095BA961E88076E84D649D11B915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:6b:4e:52:3b:d3:3a:7b:e7:be:c3:b4:dc:
                    66:0a:c9:d0:b1:78:ec:d1:83:c2:0f:8d:6b:48:d8:
                    8f:f8:24:d7:db:70:7a:e3:8b:4c:cc:ec:1d:23:40:
                    6b:ac:79:c0:70:e3:fe:79:3f:d7:5e:3e:29:a3:8c:
                    8e:5a:bb:10:a2:a8:25:ec:50:f3:9f:31:02:72:01:
                    f3:a2:d1:26:d1:fc:5b:58:bf:3c:90:7c:d9:66:69:
                    dd:4b:0a:02:ab:44:4a:0d:e0:b5:37:92:64:05:00:
                    87:0b:23:f9:42:64:fd:da:35:bf:da:11:16:f3:32:
                    b2:39:56:2f:61:58:dc:f6:28:12:d0:4c:fa:ea:d7:
                    50:68:c4:b7:b0:fd:25:52:0b:0d:7a:da:43:7d:39:
                    35:49:d8:44:3c:8a:ac:e2:4c:4e:25:ad:bb:52:f3:
                    a5:38:ea:d8:0c:b9:12:b1:ed:be:e8:ce:38:52:74:
                    36:bd:1c:cb:73:3f:52:fb:0a:fc:b7:bf:b6:85:72:
                    cc:d5:0c:4b:8b:bb:85:02:7c:4d:45:97:69:30:a1:
                    0b:cb:fc:b6:6a:78:5d:fc:55:17:c4:8a:23:1e:3d:
                    63:0f:a9:e5:bb:76:6a:aa:39:94:5d:4f:64:98:b9:
                    50:40:22:9f:bc:d5:28:c5:f9:be:93:6d:a3:81:3e:
                    cb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:E3:AA:B9:42:09:5B:A9:61:E8:80:76:E8:4D:64:9D:11:B9:15
            X509v3 Authority Key Identifier:
                keyid:4B:23:5A:1A:B7:44:46:1E:39:CD:6D:3A:D9:AB:4A:71:8B:D7:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B235A1AB744461E39CD6D3AD9AB4A718BD7E26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDfaHrniRSZZDJsY5eaJ6psEKgNxdfrGCKAyWorQj1Ef/0/3139302e31312e3231322e302f32322d3234203d3e20323734333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:04:ff:f2:fe:a8:df:0d:f9:cb:ec:ed:4d:b2:a0:01:f1:93:
         f4:6f:e4:24:80:f8:ac:46:ca:bd:11:37:c8:11:02:c8:02:1f:
         b4:98:20:0a:45:89:33:da:c5:5a:62:ca:45:f1:42:bb:45:07:
         0f:d8:a0:c0:4a:f2:ca:03:e8:17:a6:57:9f:51:fd:dd:3d:a5:
         45:09:9b:dd:05:91:21:3c:d5:63:2c:42:55:b8:bf:a6:85:70:
         cc:3b:9f:00:1e:c4:c9:26:02:c5:a5:46:e2:ec:4d:5c:3e:f7:
         01:92:96:68:e0:58:ca:cc:45:71:fb:0c:f3:0a:f1:3d:e3:a8:
         43:89:99:54:22:84:28:ff:97:19:e5:80:bc:ef:76:d3:42:22:
         b1:a1:87:dc:32:3c:eb:22:a9:9a:e9:2e:fc:f8:5e:d6:c5:a1:
         fe:82:7f:85:07:bb:86:92:6f:a5:b1:79:69:c5:2f:30:5f:c6:
         fe:b4:d3:1e:71:b4:b4:f9:36:37:ff:70:d0:c4:65:fd:c6:92:
         47:8c:f7:cd:bb:df:43:06:24:78:9c:d1:f6:f2:67:61:26:02:
         d3:bc:e8:32:14:2e:c8:45:b4:dd:26:89:0d:76:36:09:bd:3a:
         54:21:70:eb:06:72:bd:6b:74:13:12:7d:01:ff:35:0c:fc:b5:
         d5:71:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:49 2026 by rpki-client