Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e342e302f32322d3232203d3e20323635333034.roa
File:                     3136382e3132312e342e302f32322d3232203d3e20323635333034.roa (raw, json)
Hash identifier:          ytYRJtvaeWJb1YJVRPuwbM3Cl2O93buKEX7b6v01//g=
Subject key identifier:   4B:72:F8:89:DB:F7:A3:98:0A:69:30:B5:C6:D9:4F:62:4D:B7:E3:BC
Certificate issuer:       /CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
Certificate serial:       6149153A028363BC92CEF4C8327E83EB0F1591F9
Authority key identifier: E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e342e302f32322d3232203d3e20323635333034.roa
Signing time:             Sat 25 Apr 2026 13:43:08 +0000
ROA not before:           Sat 25 Apr 2026 13:38:08 +0000
ROA not after:            Sat 24 Apr 2027 13:43:08 +0000
asID:                     265304
IP address blocks:        168.121.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl
                          rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:49:15:3a:02:83:63:bc:92:ce:f4:c8:32:7e:83:eb:0f:15:91:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
        Validity
            Not Before: Apr 25 13:38:08 2026 GMT
            Not After : Apr 24 13:43:08 2027 GMT
        Subject: CN=4B72F889DBF7A3980A6930B5C6D94F624DB7E3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:7f:5c:5e:30:23:da:ec:1d:b3:90:78:4d:
                    5c:4d:09:2a:e1:c4:53:d1:ff:13:f8:d7:d3:7e:59:
                    ff:de:b8:88:8e:79:98:08:e7:5a:ec:6d:03:d0:c4:
                    6c:c0:8f:03:8f:b7:82:12:ec:3e:80:3b:ea:f5:31:
                    9b:67:df:a0:13:01:2c:db:af:2b:42:c9:6c:6d:4c:
                    81:9f:d3:34:3c:14:52:e5:3b:3f:7a:f2:0a:fd:ba:
                    30:7d:35:1e:9a:27:00:05:69:ca:56:1a:ec:03:6f:
                    50:b5:58:c4:4d:2d:1a:8e:50:61:9d:90:ae:33:a1:
                    d3:72:b2:9c:2a:04:ba:1c:ef:b8:31:44:0a:8f:e6:
                    02:04:58:49:d8:fc:c2:68:ee:6f:60:10:12:a7:61:
                    cb:18:ba:41:03:24:22:af:95:3b:d7:fd:68:95:6a:
                    79:b1:53:9a:79:3c:cc:6a:fc:1b:eb:fc:7e:8d:f0:
                    53:2a:c5:50:e6:4c:03:e5:97:4f:d6:e9:4c:a5:b3:
                    11:a9:84:f1:6d:f8:b4:19:eb:1b:c3:6b:f0:5f:a5:
                    26:99:f4:4c:6b:e7:4a:4c:72:45:53:14:a1:03:4b:
                    51:a3:2a:17:13:24:3d:2d:8f:5e:b7:71:fc:3c:75:
                    0b:00:7e:d6:09:fd:a3:50:82:0a:ca:b8:9f:39:ac:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:72:F8:89:DB:F7:A3:98:0A:69:30:B5:C6:D9:4F:62:4D:B7:E3:BC
            X509v3 Authority Key Identifier:
                keyid:E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e342e302f32322d3232203d3e20323635333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:9e:c6:76:06:de:62:5f:49:9c:86:00:a9:e0:3c:30:cb:
         23:16:a4:ec:92:e5:99:db:4d:59:9b:6f:bd:9b:7c:c9:44:9d:
         0e:95:db:c8:14:d6:00:b4:14:12:29:e9:f1:7c:e8:a0:68:f7:
         7d:26:08:fa:4d:4f:9a:60:1d:2e:96:03:3e:36:aa:ae:f8:5d:
         a8:b3:8f:f3:eb:81:19:d9:43:48:54:6e:9b:79:ab:6f:ec:bf:
         ac:5c:64:ce:2d:06:98:d6:4f:e1:03:69:e4:90:73:51:c2:96:
         f8:9d:fb:fd:42:e4:d7:60:7d:71:b5:92:df:2d:0a:b0:ee:93:
         c4:0f:a0:29:26:f8:a5:03:44:cc:6f:bf:18:09:1d:56:21:f0:
         02:9e:26:34:cd:c9:ed:6b:64:87:50:70:c3:27:79:15:01:13:
         e6:9e:e4:f6:04:8d:10:fd:f2:cc:a8:23:3b:9c:a9:10:4a:70:
         4b:4d:98:ac:b5:1b:e3:c7:3c:c5:46:6c:43:95:d2:a8:9e:c1:
         a9:a0:e6:07:58:51:8d:3a:d5:2e:70:92:d2:78:40:91:f5:fd:
         d0:19:ea:46:6a:92:91:17:40:71:3e:ca:f5:39:f6:65:83:1f:
         45:bb:95:a8:dc:7d:64:22:dd:50:ee:78:08:c2:07:19:fd:59:
         ca:75:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:42:51 2026 by rpki-client