Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e34302e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          BcNX64zvOkjEKPIR9UEOcG6yV8K909ytg7PtDpcTyc4=
Subject key identifier:   71:64:63:13:7C:FB:5F:43:53:CD:82:32:CE:19:11:43:89:7A:5D:FE
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       5F47B549649025A5144098F4961F4992F4AA5B1B
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:21 +0000
ROA not before:           Mon 15 Jun 2026 11:17:21 +0000
ROA not after:            Mon 14 Jun 2027 11:22:21 +0000
asID:                     28191
IP address blocks:        189.90.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:b5:49:64:90:25:a5:14:40:98:f4:96:1f:49:92:f4:aa:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:21 2026 GMT
            Not After : Jun 14 11:22:21 2027 GMT
        Subject: CN=716463137CFB5F4353CD8232CE191143897A5DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:ad:e3:46:7b:3a:c1:a0:58:e7:d1:54:bf:
                    f5:6a:df:53:10:f0:c7:4a:33:cf:8e:41:62:c7:11:
                    82:22:f2:43:b3:49:78:a4:6b:eb:a9:19:a9:f7:8b:
                    53:ce:0a:48:37:09:04:34:94:81:44:f8:61:ea:f6:
                    b3:39:37:76:5f:1d:13:f6:fd:31:4d:2d:c1:86:f3:
                    fd:c0:23:c7:a7:0a:ae:01:e3:1c:b7:d0:8f:48:7a:
                    d8:f2:a9:98:b5:6a:a5:85:d0:25:b8:e6:05:1d:8d:
                    4b:64:6c:8f:18:15:2e:61:1e:29:f4:db:ed:90:ad:
                    89:f7:0d:4b:d9:a0:97:4c:96:3f:c8:14:cf:92:02:
                    12:c6:3d:e5:2e:db:c5:c6:9e:c8:46:47:25:1e:0d:
                    d2:7a:05:1c:79:8e:37:0c:44:1b:f5:2f:f6:bd:3d:
                    3e:89:7b:bc:b4:0e:4d:e6:78:61:c5:4d:44:87:ff:
                    85:ee:4b:74:3a:28:ee:e2:69:28:be:1d:2a:2a:bf:
                    49:48:99:44:08:c9:c5:09:b8:3d:53:c6:ab:55:02:
                    21:a8:08:3c:98:f8:e9:19:59:c5:91:b4:ca:b5:60:
                    83:b9:d6:a9:7a:71:cd:b3:36:8f:3b:30:fe:3e:df:
                    ae:1a:78:20:7e:ce:29:c2:e3:a2:71:fc:50:2c:00:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:63:13:7C:FB:5F:43:53:CD:82:32:CE:19:11:43:89:7A:5D:FE
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:38:ce:f9:70:ac:1b:33:ec:d4:e8:74:0f:db:65:82:db:e4:
         c6:cf:2c:5a:85:7e:b2:e3:46:14:c9:b8:11:60:d3:11:97:83:
         d6:3b:8f:cc:11:24:ac:a4:40:10:e7:37:a4:09:78:8e:3c:07:
         74:14:84:20:05:18:a4:13:96:ed:9c:2b:77:a5:89:5a:92:e0:
         e6:ef:52:81:79:16:05:47:47:63:5e:e2:a8:6d:d5:f3:d6:f8:
         33:f2:65:86:cc:d3:24:61:89:10:fc:b3:88:bd:7d:50:03:37:
         94:0e:8a:14:ee:7b:51:ea:aa:da:b7:d1:d3:3a:52:41:b2:a0:
         9c:d8:a9:93:38:ed:d1:e0:04:b0:bd:9c:dd:a7:18:c6:84:a8:
         ed:8b:56:21:02:e5:a9:bd:34:78:71:52:13:49:05:96:3d:ef:
         82:7a:96:cd:0a:11:6c:e2:1e:ba:33:c0:ff:0b:06:2b:5c:e9:
         19:07:73:7d:7f:9d:fb:50:30:1d:3d:f0:ec:04:8e:57:96:b0:
         bd:c7:89:de:02:ea:4e:e3:1b:0c:e8:b8:93:34:41:db:14:29:
         40:df:68:c3:ce:02:fa:d4:a7:75:39:cc:b3:68:f2:10:eb:f7:
         2f:7c:0e:3c:f0:16:c5:73:78:f5:11:6e:c0:54:07:64:f6:a8:
         ff:6c:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:36:54 2026 by rpki-client