Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3234203d3e20323634303039.roa
File:                     3136382e3232372e3133322e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          1qCXvLzAKxX6r0MIBNoyYaHnojwMg3Zq+LkJ6BgAc/k=
Subject key identifier:   40:5A:71:34:7C:E3:A2:CF:62:5D:2E:2F:6B:FC:4E:01:B9:AE:4B:B4
Certificate issuer:       /CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
Certificate serial:       731BFCD3E8E116638986363A5DA34158410E1309
Authority key identifier: 0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3234203d3e20323634303039.roa
Signing time:             Tue 30 Jun 2026 11:36:37 +0000
ROA not before:           Tue 30 Jun 2026 11:31:37 +0000
ROA not after:            Tue 29 Jun 2027 11:36:37 +0000
asID:                     264009
IP address blocks:        168.227.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1b:fc:d3:e8:e1:16:63:89:86:36:3a:5d:a3:41:58:41:0e:13:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D679A6C82FC83BC1115370A0DECB38653E04BBC
        Validity
            Not Before: Jun 30 11:31:37 2026 GMT
            Not After : Jun 29 11:36:37 2027 GMT
        Subject: CN=405A71347CE3A2CF625D2E2F6BFC4E01B9AE4BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:75:a4:0b:e8:91:3c:0f:6b:85:bb:27:5e:
                    52:2a:45:b3:51:97:25:ea:95:19:a0:fd:93:54:99:
                    0a:92:a3:53:9d:32:5d:9b:83:b4:29:a3:a4:4c:c6:
                    7b:fc:8d:03:c8:69:37:49:93:c7:70:03:7a:ca:05:
                    9e:21:72:4b:09:1e:2a:45:fc:9e:b4:1e:9c:1e:ab:
                    e5:ba:11:e5:54:f1:38:1b:0d:c8:28:25:8e:22:15:
                    5d:f1:6b:37:92:49:ad:ea:6c:74:15:88:f2:b1:86:
                    2a:43:6b:bd:5e:33:7b:aa:2c:14:f2:5b:e1:ef:13:
                    09:5b:6a:40:07:9d:88:d6:46:ec:76:c2:1b:47:91:
                    7a:e1:0a:c2:8a:d3:ba:e9:8d:38:2f:2c:92:d4:db:
                    0a:47:0b:64:60:b1:de:b3:17:80:c8:c5:5e:24:24:
                    77:11:bd:46:e1:b1:b8:ad:2c:34:34:c2:61:3d:2e:
                    80:3f:92:b5:d4:06:b7:4f:89:01:82:2a:6a:63:b6:
                    45:db:30:2e:de:3f:fb:4d:73:e4:2b:45:11:dc:be:
                    8e:f4:9d:d5:5a:c9:fd:a8:05:c7:ce:35:f0:63:ad:
                    ab:92:d7:86:49:1f:5f:84:4e:18:8e:ad:cc:9e:02:
                    c3:12:8c:57:75:a2:e9:dc:90:7a:0a:e8:02:83:19:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5A:71:34:7C:E3:A2:CF:62:5D:2E:2F:6B:FC:4E:01:B9:AE:4B:B4
            X509v3 Authority Key Identifier:
                keyid:0D:67:9A:6C:82:FC:83:BC:11:15:37:0A:0D:EC:B3:86:53:E0:4B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/0D679A6C82FC83BC1115370A0DECB38653E04BBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D679A6C82FC83BC1115370A0DECB38653E04BBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3136382e3232372e3133322e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:55:62:60:4e:f5:fa:f8:35:20:9f:73:b4:c0:41:15:75:
         10:a6:b4:02:7b:9e:ce:b9:5f:2e:70:8f:89:fc:79:3d:60:e3:
         02:68:6c:ce:6e:1b:d8:48:ad:1d:07:ab:60:c4:71:ce:0c:73:
         d3:18:c0:0e:d7:1f:65:71:ce:cc:24:5d:1e:e3:07:2c:df:e8:
         31:5f:49:79:b0:cb:6c:ff:60:42:63:5c:3f:14:c7:eb:b9:6e:
         5f:50:a7:7f:55:c9:79:4f:b8:31:18:23:09:b1:11:ed:d6:25:
         6f:dd:72:b1:a2:e8:78:60:5a:77:d9:ed:26:7e:ae:f6:73:96:
         81:39:3b:5a:7c:88:fe:38:81:27:4b:18:74:84:43:61:61:9c:
         49:29:6e:5c:0d:6f:17:93:68:89:a3:24:49:81:bf:c9:da:d0:
         33:b2:d0:84:b2:b8:b4:12:93:77:c0:e4:5f:ac:db:31:e2:f1:
         ba:3e:4a:3f:02:19:f3:37:38:55:84:04:fb:91:7a:c9:cb:fb:
         e6:5d:cf:98:82:7f:e4:c9:a1:d0:35:32:e5:b2:6a:3b:d6:62:
         f7:db:ec:e8:81:66:6d:4e:36:8d:03:ca:2b:f0:39:2e:a5:dc:
         5d:38:1d:69:36:55:85:d5:48:69:b3:12:cd:41:c3:81:ba:95:
         f7:80:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:49:18 2026 by rpki-client