Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          MUPocZt6ext7LLQewqpM+2UP1PcgChigazayCzf1YP4=
Subject key identifier:   F4:A4:FF:0C:89:34:AE:91:F5:7E:BB:14:47:58:82:D6:F4:72:99:B3
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       3A7297DBB83F7D38382D0F7EB6EBB25D0260CFDC
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:47 +0000
ROA not before:           Mon 15 Jun 2026 11:17:47 +0000
ROA not after:            Mon 14 Jun 2027 11:22:47 +0000
asID:                     28191
IP address blocks:        189.90.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:72:97:db:b8:3f:7d:38:38:2d:0f:7e:b6:eb:b2:5d:02:60:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:47 2026 GMT
            Not After : Jun 14 11:22:47 2027 GMT
        Subject: CN=F4A4FF0C8934AE91F57EBB14475882D6F47299B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:39:57:9b:97:af:f7:7b:ef:04:32:68:1a:
                    46:c8:4a:cf:74:7e:8a:4d:4b:5d:a9:7d:15:c3:5f:
                    fa:0e:a3:18:f1:53:b5:61:ae:e1:88:c2:0d:57:88:
                    85:58:13:ea:23:98:ba:ab:2d:86:63:9d:96:92:5d:
                    66:40:d3:7c:05:aa:b1:8d:cf:b8:ca:37:72:0c:c4:
                    88:94:54:80:dc:bf:e6:2b:d6:2c:53:90:6a:82:28:
                    8b:2e:ba:d0:5d:b6:05:7f:38:f2:9d:2e:a5:4c:5e:
                    ec:f8:c9:aa:e4:70:ad:68:75:d6:6d:6b:aa:82:96:
                    d8:00:7f:fc:86:24:5f:00:4c:3a:90:f0:5c:d3:d7:
                    5e:15:07:bc:6d:c2:34:7c:73:d1:a1:c8:35:26:1c:
                    ac:8e:df:47:ee:df:65:0b:94:b5:50:21:91:72:a5:
                    b8:90:c6:d8:3d:38:81:c0:25:a5:be:6e:e9:5e:57:
                    af:fd:e2:0e:cc:d8:60:88:8c:d4:bd:ab:58:b6:ec:
                    07:78:cf:50:dc:a6:b7:04:5c:47:6a:09:b6:c2:bb:
                    32:69:dd:0c:7e:19:22:d6:0d:3f:53:ca:6f:01:9e:
                    87:74:87:9f:12:a0:b9:9d:ee:94:bf:0a:26:20:ce:
                    f8:2c:25:cd:c0:30:76:59:e4:0e:92:d9:91:a2:c3:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:FF:0C:89:34:AE:91:F5:7E:BB:14:47:58:82:D6:F4:72:99:B3
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e33342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:d3:ba:08:31:a6:df:29:1a:5c:43:3f:1f:75:34:8b:97:
         7d:18:54:7a:05:f1:48:76:27:d5:c9:ce:68:96:38:4e:d5:86:
         6a:be:87:04:9b:c6:0f:26:9d:1a:6e:9b:db:e5:bb:cb:5b:8f:
         9b:5e:40:09:62:40:8d:8d:90:77:5e:89:39:19:4a:c7:45:6f:
         25:61:0c:cd:45:40:d2:54:e4:81:2c:c3:e5:a8:43:53:21:83:
         c8:28:91:7e:a8:ff:5d:83:b0:97:13:aa:e7:d8:90:e5:5c:b8:
         66:06:99:2e:87:c2:9c:e5:b7:88:67:10:7a:d8:02:56:52:a7:
         21:82:ac:88:08:e9:e8:db:c1:e2:d1:5e:d8:eb:78:14:ac:70:
         44:92:24:f1:ce:ae:4e:97:e5:ca:58:21:a3:34:61:ea:bb:81:
         4c:3a:f6:38:f0:19:c8:3f:af:38:f6:69:1f:8c:4e:76:52:9f:
         03:8b:50:87:3e:41:93:81:86:0e:e3:f1:99:37:3b:ea:98:8b:
         f6:85:b5:f9:3a:90:32:27:19:4e:74:72:52:81:da:14:a1:6f:
         3a:9d:9c:09:6c:a2:1f:e1:d9:d3:10:69:ac:15:4e:22:02:c1:
         fe:b6:61:68:db:b6:cd:bb:fc:e3:99:80:bf:1f:bf:9b:bb:5f:
         1d:bc:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:36:56 2026 by rpki-client