Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e31302e302f32332d3233203d3e20323636313534.roa
File:                     3139322e3134302e31302e302f32332d3233203d3e20323636313534.roa (raw, json)
Hash identifier:          +iT8DV2qiXHPSh2zWYRo0CRxkrrZJPvOe69DGnctKjI=
Subject key identifier:   0B:91:06:00:6B:12:31:4E:3B:6E:07:98:4A:52:15:91:F1:85:28:98
Certificate issuer:       /CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
Certificate serial:       1BE2CF7AC127BC4D9823154ECD807D44B7E07B10
Authority key identifier: 61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e31302e302f32332d3233203d3e20323636313534.roa
Signing time:             Wed 08 Jul 2026 12:45:31 +0000
ROA not before:           Wed 08 Jul 2026 12:40:31 +0000
ROA not after:            Wed 07 Jul 2027 12:45:31 +0000
asID:                     266154
IP address blocks:        192.140.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e2:cf:7a:c1:27:bc:4d:98:23:15:4e:cd:80:7d:44:b7:e0:7b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
        Validity
            Not Before: Jul  8 12:40:31 2026 GMT
            Not After : Jul  7 12:45:31 2027 GMT
        Subject: CN=0B9106006B12314E3B6E07984A521591F1852898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:82:d8:96:54:88:53:cc:71:2a:e7:39:22:
                    31:76:20:8b:af:af:c8:81:32:04:fa:1a:cf:a1:c6:
                    65:88:0b:c5:b5:17:42:93:74:fd:c1:39:0f:85:c1:
                    c1:9d:41:09:24:f3:eb:28:30:a8:c3:16:84:63:24:
                    41:8b:31:1e:ce:63:19:9c:c5:d8:89:7a:bc:a7:b4:
                    36:06:dc:3d:f3:ca:22:4c:d1:e1:43:6b:ce:5e:24:
                    20:01:8c:23:fa:11:78:6e:77:56:ee:0f:db:8e:5f:
                    48:7b:2b:47:09:db:e7:b5:ad:2d:fc:63:61:9e:5c:
                    71:42:72:5c:d5:7d:2a:4a:d5:9e:60:4a:53:c7:a0:
                    e7:ef:02:10:1d:bc:8c:f0:2d:a3:08:25:45:e8:9f:
                    e6:6e:b1:81:33:0e:be:aa:2c:25:1c:30:02:d1:3a:
                    97:6a:a2:b3:d6:f6:ef:75:da:f2:97:bd:1b:82:d1:
                    67:d0:5c:7c:70:71:27:98:a8:ab:ba:b7:b1:8f:51:
                    bb:6d:37:e3:26:d8:d7:a7:40:8f:28:45:9a:a9:95:
                    19:1f:ae:a8:3f:f9:07:d7:9d:29:59:95:ee:27:8a:
                    93:91:bc:c9:25:42:f2:d2:ee:11:15:1a:ab:82:0e:
                    32:52:6e:e1:33:56:6b:4c:12:87:6c:20:a0:4f:ee:
                    15:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:06:00:6B:12:31:4E:3B:6E:07:98:4A:52:15:91:F1:85:28:98
            X509v3 Authority Key Identifier:
                keyid:61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e31302e302f32332d3233203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:74:72:b2:7f:8d:a1:2a:ea:54:8c:af:fc:45:59:93:5b:20:
         e3:41:6a:ea:66:44:14:ca:07:b3:20:69:d3:8d:56:5e:2c:2c:
         8a:ec:41:01:c3:69:69:ca:f8:c4:1d:a2:d7:59:24:91:8e:52:
         ad:33:16:22:84:44:cc:d1:d4:63:df:56:e1:bb:cd:44:18:d5:
         be:09:56:9d:52:59:cb:83:a3:f6:a3:0d:6a:2c:08:87:45:d0:
         49:37:7a:56:d0:9c:a8:31:1b:05:35:bd:0e:51:bf:60:b3:c8:
         90:70:61:fe:57:b8:75:7d:26:8e:e4:52:71:10:13:9c:2f:e6:
         37:62:22:6a:ae:5a:c2:2c:e2:fe:79:87:6c:f9:33:47:94:d9:
         7b:cb:a1:23:74:76:8a:78:23:4e:42:de:b6:a2:7d:92:8c:57:
         b3:d5:f1:b7:4c:6e:97:1c:18:45:8e:f6:3d:50:67:81:6c:12:
         a5:28:6d:98:36:ae:e4:0d:cd:0b:7c:35:d3:37:d0:c6:11:3d:
         4f:e6:39:c2:9e:85:a3:83:0d:1e:9e:30:43:2d:48:94:47:99:
         1a:ca:d8:cd:94:9b:d0:f0:d9:99:e9:99:60:a9:48:c6:f8:b6:
         e7:b0:2b:e2:b4:ec:f7:e9:46:12:05:43:2f:e7:0c:c7:a7:06:
         28:bd:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:34 2026 by rpki-client