Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa
File:                     3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa (raw, json)
Hash identifier:          U3BuaeGxDCQ4hUOFMkciRfnyiyUiwzas96lW2DRW1r0=
Subject key identifier:   3D:ED:F8:A6:E1:B2:B2:7C:4B:D2:5B:B0:9A:CE:37:FF:4C:F0:A9:C1
Certificate issuer:       /CN=9314D53106A385E776432E46329AA22CC6980F59
Certificate serial:       284FA6B72D606BAD5B0CC240A8BFD53A30F555FF
Authority key identifier: 93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa
Signing time:             Wed 20 May 2026 17:49:00 +0000
ROA not before:           Wed 20 May 2026 17:44:00 +0000
ROA not after:            Wed 19 May 2027 17:49:00 +0000
asID:                     263656
IP address blocks:        201.139.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl
                          rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:a6:b7:2d:60:6b:ad:5b:0c:c2:40:a8:bf:d5:3a:30:f5:55:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9314D53106A385E776432E46329AA22CC6980F59
        Validity
            Not Before: May 20 17:44:00 2026 GMT
            Not After : May 19 17:49:00 2027 GMT
        Subject: CN=3DEDF8A6E1B2B27C4BD25BB09ACE37FF4CF0A9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:ed:5e:9a:e3:cc:f1:b0:4b:54:8a:37:75:
                    54:eb:c0:49:bb:c1:88:ac:96:3b:9c:3c:58:4c:d2:
                    13:92:59:73:35:6e:91:26:09:45:a6:3c:7f:9d:1c:
                    69:e4:bd:5c:b3:b2:71:10:35:3b:e4:c9:79:c5:62:
                    7a:dd:8e:de:d3:30:69:8d:5e:ca:74:0d:e4:a6:64:
                    55:64:f6:f1:3e:89:40:77:d1:88:a1:88:e6:3f:b6:
                    3a:a6:53:1c:fe:dc:cd:86:ae:ad:65:bc:38:86:dc:
                    a3:18:b6:9b:5f:45:b2:67:f0:7b:59:1d:0e:9d:5c:
                    9c:cf:d0:fa:a4:7a:18:b1:fc:20:53:59:03:21:42:
                    e1:8d:14:b9:dc:9a:3f:e9:8b:08:c1:00:c1:7d:46:
                    70:38:cb:ac:64:49:93:68:64:ac:5b:4e:c8:5d:70:
                    12:fa:50:18:f6:29:1b:e9:31:4e:97:0a:1b:95:2b:
                    c7:be:bf:23:19:48:ce:e1:ab:ad:c9:c2:dc:8f:da:
                    23:53:fc:25:7b:dd:2e:7b:71:d2:b9:32:e6:9b:4d:
                    9e:2e:85:47:03:6a:5e:33:42:ad:c6:50:cf:df:1e:
                    e2:4a:87:d2:cf:f4:50:a4:dd:cc:68:1a:64:30:3a:
                    21:52:0e:d2:35:79:fa:f8:2f:ad:09:50:59:02:8c:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:ED:F8:A6:E1:B2:B2:7C:4B:D2:5B:B0:9A:CE:37:FF:4C:F0:A9:C1
            X509v3 Authority Key Identifier:
                keyid:93:14:D5:31:06:A3:85:E7:76:43:2E:46:32:9A:A2:2C:C6:98:0F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9314D53106A385E776432E46329AA22CC6980F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9314D53106A385E776432E46329AA22CC6980F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/3230312e3133392e38342e302f32322d3234203d3e20323633363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:32:f3:26:d1:b2:06:8d:99:76:df:39:28:34:8c:be:32:b3:
         4b:87:e9:d8:1f:78:a8:7a:cf:04:37:e0:ed:e9:4c:e7:57:9c:
         23:cb:4a:00:14:75:6e:fc:0c:e0:bf:95:ca:7e:ad:e8:cc:2b:
         c0:6f:18:8e:15:55:e3:cb:8c:9c:bc:d8:3f:ff:b9:38:5e:2b:
         12:16:e4:d0:7b:50:34:d5:84:6f:8e:85:44:6c:0d:a6:94:dd:
         6c:b2:dc:42:f8:b8:54:37:00:23:44:67:e6:f8:e7:a1:3e:fc:
         24:76:d3:3c:c6:53:50:5c:1e:a1:7b:19:31:fe:b2:d0:78:07:
         47:80:4b:c8:0d:c8:72:4c:6d:d7:de:26:e3:af:f4:5b:cf:78:
         b7:ea:ed:07:13:e4:65:b8:a7:d7:c3:bd:29:38:a7:fa:3f:38:
         3b:71:cf:c9:29:29:a6:5d:74:85:71:54:72:3d:aa:df:17:9d:
         7d:42:20:31:2c:55:4b:56:6d:95:46:4c:f1:2f:19:8b:dc:20:
         0b:b6:3f:5b:7e:43:a5:1d:f0:3f:66:41:5d:cf:07:36:eb:58:
         fb:37:17:04:e3:d3:dc:08:e8:44:9b:c9:65:e1:90:b3:20:b8:
         b3:b8:33:cb:4d:c8:25:7a:4d:2f:1e:ca:6d:9a:2e:0e:da:26:
         5d:24:07:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:19:05 2026 by rpki-client