Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
File:                     3138392e39302e33322e302f32302d3230203d3e203238313931.roa (raw, json)
Hash identifier:          a7HFeaPOEK/3K6bxsaeNOHWojBM1goWeffZEiKNFfv0=
Subject key identifier:   E9:B1:97:35:EF:B5:55:8A:5A:2A:FD:FA:4E:9D:5C:60:86:5A:31:C8
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       5363D61BF3A99C3EE7328E2C9EDECFB7504B1D4B
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:21 +0000
ROA not before:           Mon 15 Jun 2026 11:17:21 +0000
ROA not after:            Mon 14 Jun 2027 11:22:21 +0000
asID:                     28191
IP address blocks:        189.90.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:d6:1b:f3:a9:9c:3e:e7:32:8e:2c:9e:de:cf:b7:50:4b:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:21 2026 GMT
            Not After : Jun 14 11:22:21 2027 GMT
        Subject: CN=E9B19735EFB5558A5A2AFDFA4E9D5C60865A31C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:e7:de:6b:5e:d0:13:32:9e:9c:00:3d:33:
                    94:fb:5f:aa:3f:7f:d5:e5:2f:d8:68:8b:f6:63:b5:
                    9d:e5:21:11:25:27:b8:c9:8d:3c:67:f6:89:51:65:
                    3d:ea:0d:1a:07:86:b5:a5:2d:8a:ee:1a:29:0d:49:
                    f9:73:3c:d2:e1:03:a1:cc:ed:15:bd:e2:a4:70:26:
                    8d:33:6b:34:d6:00:17:3d:ca:a2:ea:2e:4a:5b:eb:
                    47:44:7b:d9:fe:ee:be:cd:53:65:3b:cb:85:4e:ba:
                    a7:61:d1:2e:97:cf:ad:d7:b5:85:f3:32:b0:aa:08:
                    1d:d2:c3:90:93:8d:ee:01:51:aa:7e:e6:73:7e:6e:
                    5b:21:f3:da:f6:a4:d5:83:da:36:bd:46:84:59:08:
                    ef:9c:a4:0d:22:c9:2d:63:d4:29:98:3b:64:5f:04:
                    69:2e:5c:15:fa:04:fb:86:91:0a:f5:0e:25:1d:5d:
                    ca:7c:7a:79:8d:67:c0:d2:f1:b8:76:08:e4:f0:9c:
                    08:22:77:99:00:dc:fc:34:df:67:db:12:7f:04:13:
                    16:e4:60:0e:1b:d3:a5:e9:f6:8c:58:28:27:28:1c:
                    0a:6f:65:a0:04:2b:58:a6:20:6e:f9:1e:8c:69:7d:
                    1c:e0:c9:0e:cb:08:fe:f4:c6:82:84:cc:29:d3:2f:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:97:35:EF:B5:55:8A:5A:2A:FD:FA:4E:9D:5C:60:86:5A:31:C8
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32302d3230203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:01:98:64:35:44:9b:07:5d:76:de:d4:07:1c:a3:a9:48:
         42:69:70:b1:ab:1c:48:f4:2e:6d:43:14:86:26:79:32:59:48:
         c7:e5:fb:57:c7:a0:89:c7:f6:d3:3f:21:4f:c7:b5:a4:07:d5:
         84:93:84:5c:71:ed:78:24:d0:85:1a:2f:47:d3:41:94:e2:27:
         46:59:5d:f1:d0:52:89:26:9b:f5:c1:f3:6a:f8:0c:bd:9b:07:
         34:dd:f6:71:a5:e0:97:bd:27:f1:a1:80:7b:53:47:47:ca:c7:
         08:c3:86:40:5c:87:1e:8e:68:72:12:f8:ed:e8:a0:32:12:08:
         0d:cf:db:d4:88:78:e9:b7:79:e2:2b:91:10:38:93:86:a2:cf:
         33:d1:10:0e:34:7c:f2:ec:2c:2a:65:40:bd:91:fa:9a:77:8f:
         52:b7:a2:fc:59:5e:aa:67:27:1e:db:dc:f5:83:47:d9:b7:1a:
         8f:a0:36:c4:99:db:03:f3:ee:4b:ae:61:38:49:5c:06:1c:db:
         d0:1b:2f:0f:3a:e2:4a:85:cf:a1:be:a1:0c:90:76:0b:f2:2a:
         a7:6d:70:68:27:32:d9:49:81:05:a9:00:14:eb:80:1c:31:9f:
         6e:15:93:7e:a8:a2:31:ec:39:42:e9:0d:56:b2:0f:6c:f5:61:
         10:a3:91:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:48:18 2026 by rpki-client