Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
File:                     3138392e38342e3230382e302f32302d3234203d3e203238313733.roa (raw, json)
Hash identifier:          +fZt22K/EKKHmtbGYfeYMqC7qv3rXMzF47as9majF3A=
Subject key identifier:   E7:11:D7:F3:6B:BA:52:59:AF:E1:B4:3A:D9:C1:CE:4C:64:8E:52:A7
Certificate issuer:       /CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
Certificate serial:       0CFAF713B2C6A9AE9DE078786767A7CB2C8D96AD
Authority key identifier: 70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa
Signing time:             Fri 01 May 2026 17:04:23 +0000
ROA not before:           Fri 01 May 2026 16:59:23 +0000
ROA not after:            Fri 30 Apr 2027 17:04:23 +0000
asID:                     28173
IP address blocks:        189.84.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl
                          rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:f7:13:b2:c6:a9:ae:9d:e0:78:78:67:67:a7:cb:2c:8d:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700C105F866D3955B5DC6A4CACFF8263EED77B4C
        Validity
            Not Before: May  1 16:59:23 2026 GMT
            Not After : Apr 30 17:04:23 2027 GMT
        Subject: CN=E711D7F36BBA5259AFE1B43AD9C1CE4C648E52A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c3:fb:54:2c:04:77:3b:0c:06:cb:9f:20:76:
                    79:73:1e:0b:24:40:38:a9:99:c3:4e:2e:c2:0a:4b:
                    5a:40:3a:c2:9f:ed:e9:75:6d:24:b2:25:2d:43:d5:
                    c1:d9:3d:13:32:a2:85:c0:70:53:1b:0e:f6:9e:9e:
                    f2:db:da:66:4a:c4:f0:9a:be:bd:ee:8e:27:dc:0b:
                    e3:21:a9:82:8b:4d:de:1f:e4:72:5f:cd:1b:d6:bb:
                    16:f4:da:89:87:87:24:68:67:9d:95:6f:1f:9c:9e:
                    4a:d4:d0:6b:f8:78:3d:3f:99:d6:c9:aa:84:ee:88:
                    47:a9:60:8c:b8:bf:c6:ae:33:82:6e:df:98:13:8e:
                    93:a6:06:92:e7:e3:40:de:73:ec:28:9f:67:1f:55:
                    78:23:3a:ca:21:5e:15:4f:bf:37:f1:6f:85:4b:f5:
                    5c:bc:00:c5:bb:f0:b1:2d:f3:96:bb:00:72:1b:7e:
                    95:73:71:25:c3:45:b7:dd:5d:c0:39:30:1f:93:43:
                    1d:11:53:97:0f:9a:2a:25:ef:b4:f5:12:9c:86:d7:
                    b2:04:1e:e0:c1:36:74:31:1d:fd:80:7c:93:90:7f:
                    ec:10:65:cb:26:ef:4f:16:fa:89:c3:63:63:03:e0:
                    e1:7a:5b:10:85:22:f3:18:35:94:65:6b:ca:18:48:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:D7:F3:6B:BA:52:59:AF:E1:B4:3A:D9:C1:CE:4C:64:8E:52:A7
            X509v3 Authority Key Identifier:
                keyid:70:0C:10:5F:86:6D:39:55:B5:DC:6A:4C:AC:FF:82:63:EE:D7:7B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/700C105F866D3955B5DC6A4CACFF8263EED77B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/700C105F866D3955B5DC6A4CACFF8263EED77B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/0/3138392e38342e3230382e302f32302d3234203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:df:26:0d:9a:de:ae:05:2e:b8:d4:ce:07:43:26:1b:ce:08:
         c9:12:21:92:51:87:3f:70:84:4d:d6:08:58:ab:0f:00:00:56:
         bf:5c:a2:2d:97:aa:12:d1:43:92:d7:dd:9a:98:30:de:67:65:
         66:9f:c2:11:29:cc:56:e2:c4:c8:e0:e1:63:cf:a7:75:53:0d:
         fc:5a:cf:ba:75:e3:76:54:ff:13:6d:b1:31:da:42:7d:11:c5:
         93:98:c9:c4:fa:77:92:6b:bf:56:80:9f:5f:51:52:c5:18:e7:
         dd:06:63:6e:57:46:32:6f:eb:9a:04:bd:40:94:65:e1:65:b0:
         90:5d:d3:08:76:3a:60:de:02:65:f2:7b:1d:b4:2c:77:db:50:
         9d:ed:b9:95:b5:72:cb:da:30:47:dd:90:dd:77:63:0d:fe:a2:
         4e:ad:95:b9:f3:68:4e:ae:f2:ab:0c:e8:de:fe:31:6c:b3:7a:
         19:12:15:50:c9:f7:d5:27:2c:25:7a:a2:b7:7c:e9:57:43:1a:
         ac:fa:51:02:1b:90:78:60:9e:dd:75:fd:ea:59:10:40:28:13:
         fd:40:9f:b6:0d:7e:d3:f9:e2:e4:15:68:fa:2e:0d:d8:83:c6:
         85:78:ca:45:23:8d:16:14:9f:da:5e:81:de:9c:ec:e0:7c:83:
         ed:21:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:52 2026 by rpki-client