Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
File:                     3138392e39302e33322e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          xqNhU7NqEQEK9rdBOS1T8MYYCOv4R7tNsBLNE+YfO2w=
Subject key identifier:   BC:C6:A6:F1:4E:F9:7D:3B:C6:5E:A7:DF:8E:B3:01:68:F1:59:13:A3
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       7BEE15B921BAF6804CFF4EFBC5E0F0FAB7D5DFC7
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:56 +0000
ROA not before:           Mon 15 Jun 2026 11:17:56 +0000
ROA not after:            Mon 14 Jun 2027 11:22:56 +0000
asID:                     28191
IP address blocks:        189.90.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ee:15:b9:21:ba:f6:80:4c:ff:4e:fb:c5:e0:f0:fa:b7:d5:df:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:56 2026 GMT
            Not After : Jun 14 11:22:56 2027 GMT
        Subject: CN=BCC6A6F14EF97D3BC65EA7DF8EB30168F15913A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:17:07:f0:11:5d:d9:b4:9e:e3:43:44:6e:72:
                    1e:f8:76:27:69:ed:3a:db:c0:59:d3:64:ad:c2:7f:
                    d9:da:50:7f:bd:d1:44:38:0d:bc:81:d3:9f:eb:1e:
                    2d:75:b0:fb:2c:62:35:4f:cf:2f:06:6c:c7:58:78:
                    88:94:96:0a:38:38:cf:12:9e:9f:cc:23:97:d9:b5:
                    e2:8e:4a:9b:f0:45:66:cc:f0:22:af:cd:a7:33:8d:
                    7d:3e:f9:d6:01:58:fa:ca:a9:ff:93:79:22:8e:c0:
                    da:40:58:fe:ea:84:6f:65:5b:ce:25:65:e1:3c:2c:
                    5f:17:59:f5:8d:33:81:6a:66:cc:42:65:1c:e9:f9:
                    73:3e:46:1a:ea:03:b9:3e:cf:e2:b8:d8:6b:61:32:
                    cd:01:40:b0:b6:be:7d:4c:54:34:fb:a5:8c:28:57:
                    5b:d4:28:ab:13:5a:62:6a:89:c6:67:58:8b:cd:e2:
                    60:85:d8:22:d4:34:cc:e3:f9:ae:3b:24:d8:ff:3d:
                    ca:35:b7:3b:b3:e8:b3:4f:df:5a:3f:0e:7d:3c:b1:
                    e5:0f:47:47:54:3b:4b:b7:13:e1:0e:4c:6c:03:7a:
                    de:f6:ab:eb:83:b1:3e:eb:7d:e8:d8:6d:c1:f5:94:
                    65:3d:2e:26:57:22:55:8c:2a:1a:03:dc:f5:07:bb:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:A6:F1:4E:F9:7D:3B:C6:5E:A7:DF:8E:B3:01:68:F1:59:13:A3
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33322e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:22:a5:12:90:c5:96:54:f0:2d:66:58:06:f5:f5:bb:f2:fe:
         35:36:1a:ca:eb:9d:7e:d7:8f:82:22:59:a1:6a:da:7d:db:72:
         0c:2d:a6:f8:7e:d8:82:ec:e8:98:2a:67:b7:e4:0d:84:ba:75:
         ba:ce:33:a6:14:df:79:3e:b0:c3:12:75:37:c9:b6:81:e9:f4:
         ac:46:f4:83:3a:5e:92:25:82:0f:99:f1:e6:dd:6b:2e:64:5e:
         39:bb:f2:95:e5:a1:0c:f7:22:35:ca:35:a5:09:25:9f:05:5d:
         bb:da:d9:41:03:2a:f8:66:cc:17:38:f5:ba:90:47:44:6a:4b:
         25:0b:2c:8f:f7:66:6b:23:6d:ba:b6:4d:a6:3a:7d:d0:01:a1:
         88:51:a8:47:30:7d:d1:9e:72:c7:bb:7a:cb:ac:be:61:3d:6f:
         1d:1b:1b:05:36:c9:63:89:ca:8f:fc:0b:fe:25:7e:a4:3b:a7:
         83:f9:67:8c:a0:6e:82:c8:29:d4:cc:0d:80:6d:fa:46:50:f8:
         20:f3:c0:92:e9:2b:13:1e:9f:d9:a2:b6:03:68:41:ed:7e:36:
         b4:db:bd:af:63:59:f9:02:24:57:89:db:78:8e:44:e5:2a:87:
         2b:a6:53:b8:6b:e5:e8:03:20:69:c8:85:bc:a8:7f:de:58:5b:
         a2:17:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:50 2026 by rpki-client