Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32332d3233203d3e20323636313534.roa
File:                     3139322e3134302e382e302f32332d3233203d3e20323636313534.roa (raw, json)
Hash identifier:          LjyIz9vMSG6xBLRewms6IDzALTzRWKvVEAaUT99G718=
Subject key identifier:   C3:EC:63:01:95:C3:2A:0A:4F:2B:B3:94:9A:E0:6C:29:9B:A1:FB:26
Certificate issuer:       /CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
Certificate serial:       724D0D96B347EBAD0285AA17FAD5993EEA222918
Authority key identifier: 61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32332d3233203d3e20323636313534.roa
Signing time:             Wed 08 Jul 2026 12:45:33 +0000
ROA not before:           Wed 08 Jul 2026 12:40:33 +0000
ROA not after:            Wed 07 Jul 2027 12:45:33 +0000
asID:                     266154
IP address blocks:        192.140.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl
                          rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:0d:96:b3:47:eb:ad:02:85:aa:17:fa:d5:99:3e:ea:22:29:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161DCDEAC336F5128DE0AC943B5D036BF0F16C1
        Validity
            Not Before: Jul  8 12:40:33 2026 GMT
            Not After : Jul  7 12:45:33 2027 GMT
        Subject: CN=C3EC630195C32A0A4F2BB3949AE06C299BA1FB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2f:f2:21:47:84:75:9e:0c:86:ce:de:10:68:
                    ab:ab:74:5a:a7:5d:68:87:c1:8a:eb:92:9f:fc:aa:
                    23:aa:fc:04:6c:f3:17:4d:1d:50:d7:2e:41:ba:49:
                    56:22:4b:3f:b2:a3:37:f5:c9:19:5a:cd:61:10:b3:
                    60:58:52:b9:ef:16:9c:fa:37:62:a8:d6:de:1d:8f:
                    75:28:c1:95:18:48:8f:9b:58:63:b1:28:f3:9a:3e:
                    bd:79:1a:98:a3:20:98:8e:3c:f1:84:27:81:84:36:
                    63:39:bf:7a:2c:53:17:20:59:20:5c:3a:ef:7f:d7:
                    49:64:db:5f:1e:b5:36:9b:e9:6a:03:c3:b5:45:b6:
                    13:52:5b:91:99:81:a9:93:c8:30:72:fa:d1:1f:a6:
                    f8:58:72:e3:d1:33:6f:6b:d8:2d:a9:05:5d:e0:7c:
                    9c:13:bc:40:2e:9a:f4:59:0e:ec:1f:7d:c1:89:25:
                    27:3b:e8:e3:1c:ef:0d:31:e0:8c:f9:19:1a:cb:e3:
                    45:e7:dc:d1:30:e2:69:90:b5:92:6f:70:d1:da:93:
                    a2:35:c4:68:8c:7e:73:27:76:1d:4e:16:ec:84:4a:
                    3d:a7:40:82:49:d1:50:2b:0d:15:0c:92:be:39:96:
                    be:9a:c7:21:70:05:ec:e6:cf:95:48:72:53:fc:27:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:63:01:95:C3:2A:0A:4F:2B:B3:94:9A:E0:6C:29:9B:A1:FB:26
            X509v3 Authority Key Identifier:
                keyid:61:61:DC:DE:AC:33:6F:51:28:DE:0A:C9:43:B5:D0:36:BF:0F:16:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6161DCDEAC336F5128DE0AC943B5D036BF0F16C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/0/3139322e3134302e382e302f32332d3233203d3e20323636313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:f2:6a:4f:33:a2:e3:6d:04:99:5d:59:af:76:fb:71:c9:
         80:ad:af:0c:8a:89:3b:72:9c:22:a7:16:8d:fa:54:9d:40:3c:
         fc:21:9b:00:57:a1:ae:82:56:3d:f8:20:c5:06:66:6c:a3:d4:
         0f:a5:21:e4:81:1c:43:2c:56:e9:ab:33:2d:70:a2:f6:cb:d8:
         f3:f5:87:b2:84:13:e7:a5:e6:e4:c6:4e:35:33:ae:df:b8:e2:
         ea:d4:a0:a7:83:8f:47:87:de:f3:8b:ad:18:c7:91:75:38:d6:
         74:ab:5f:61:78:8a:a0:bb:c1:9e:f2:df:4d:a9:07:28:18:8d:
         b3:7d:28:15:10:c6:20:40:4d:f5:52:21:7b:5e:c6:2a:41:8a:
         3b:39:75:72:76:b4:22:5e:ba:e8:ac:de:a3:26:c3:c5:5f:6f:
         de:49:23:99:7f:95:d1:26:6a:32:8f:19:c4:52:58:cc:8f:db:
         ea:03:83:6d:cb:52:01:e8:32:22:81:f6:c1:e4:87:eb:52:43:
         93:c6:dc:b2:3d:07:11:bd:f7:56:ec:83:bd:ca:8e:b1:3a:34:
         e8:83:4a:69:4e:07:80:f3:d2:82:72:8f:8c:a7:35:1e:5e:ce:
         15:97:18:ef:a4:89:88:bd:73:b7:96:2f:44:af:2a:73:80:31:
         f3:1d:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:36 2026 by rpki-client