Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e372e302f32342d3234203d3e20323635333034.roa
File:                     3136382e3132312e372e302f32342d3234203d3e20323635333034.roa (raw, json)
Hash identifier:          rmEhgbAxGkQSN6jY3MqYV5FquPD1XmRG7BjlFnEa7JA=
Subject key identifier:   2C:47:CE:5E:37:A8:98:F1:E0:5B:52:1C:C9:C8:56:77:28:CD:84:F4
Certificate issuer:       /CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
Certificate serial:       02574805A59C1B62EDCE3DA474F564225EE40A91
Authority key identifier: E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e372e302f32342d3234203d3e20323635333034.roa
Signing time:             Sat 25 Apr 2026 13:43:36 +0000
ROA not before:           Sat 25 Apr 2026 13:38:36 +0000
ROA not after:            Sat 24 Apr 2027 13:43:36 +0000
asID:                     265304
IP address blocks:        168.121.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl
                          rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:57:48:05:a5:9c:1b:62:ed:ce:3d:a4:74:f5:64:22:5e:e4:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EA9F2D03316C3CC2047A1B526CEB471AA3827E
        Validity
            Not Before: Apr 25 13:38:36 2026 GMT
            Not After : Apr 24 13:43:36 2027 GMT
        Subject: CN=2C47CE5E37A898F1E05B521CC9C8567728CD84F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:0b:25:0f:13:98:db:23:c4:4f:1d:42:df:
                    02:ad:b6:9d:7e:88:65:ee:84:de:f2:71:0e:f7:12:
                    24:2e:03:9a:ea:60:43:90:6b:e7:15:2a:2c:f0:0a:
                    13:bf:a9:6f:18:39:ea:c4:ce:dd:1c:69:8b:34:f3:
                    ea:d4:32:53:8a:d7:4c:3e:3a:1c:da:b1:0c:ac:3a:
                    4c:2d:7c:16:e8:8d:95:3a:cd:34:03:b7:38:63:76:
                    cb:b3:d8:2a:0b:34:c9:a6:4a:35:08:c7:ca:c3:38:
                    bd:d6:23:d0:e1:21:79:fd:d2:3b:92:4f:96:63:5d:
                    1f:c0:02:38:69:8a:4a:b4:0b:09:20:81:7e:93:11:
                    32:f9:b0:59:a6:cf:7f:dc:17:c4:d9:b0:dc:d9:5b:
                    24:1c:05:da:6d:c2:2b:5f:76:35:f6:64:ec:d7:e0:
                    d2:7a:f0:15:05:34:78:72:82:a2:36:12:56:1b:ad:
                    c1:52:f1:77:f2:44:c3:dd:c3:2e:00:31:a1:b3:ac:
                    95:eb:05:38:85:b8:fa:3d:df:dd:a5:14:b2:ed:4d:
                    c1:0f:5c:01:4b:be:53:f6:e4:3b:1c:6e:bb:e8:5f:
                    90:94:63:20:df:4a:95:99:55:65:e0:b7:62:d3:e1:
                    3c:81:c3:ea:d2:48:e0:7d:05:1e:91:2e:33:33:60:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:CE:5E:37:A8:98:F1:E0:5B:52:1C:C9:C8:56:77:28:CD:84:F4
            X509v3 Authority Key Identifier:
                keyid:E6:EA:9F:2D:03:31:6C:3C:C2:04:7A:1B:52:6C:EB:47:1A:A3:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6EA9F2D03316C3CC2047A1B526CEB471AA3827E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6u9ae7KqLENSrmLxuk8fFdptnu3BQaxz5SbvPphp7knk/0/3136382e3132312e372e302f32342d3234203d3e20323635333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:7f:2e:0b:ed:bc:ed:38:1f:78:1a:a4:8b:e1:6b:9b:40:
         45:90:77:e3:a7:9c:1a:4b:a6:f8:c9:8e:64:fd:5c:cf:91:53:
         27:db:a8:2f:90:6a:fb:f4:de:a7:9b:e7:5e:5d:06:8d:79:9f:
         ca:5c:d3:4e:ae:4f:8c:86:15:a1:34:02:c9:40:b2:5a:f2:6b:
         29:6a:22:ce:12:b0:f8:62:f2:e9:b7:76:a6:6d:30:87:83:04:
         c3:c7:39:5c:47:5e:77:b2:7d:7c:04:9c:3d:93:02:6c:02:07:
         a2:88:32:a8:aa:a5:b7:da:16:86:bd:26:41:c2:70:85:d1:af:
         73:f5:70:b3:63:e3:0b:cd:e6:7f:0c:0f:40:cb:d9:24:96:38:
         54:64:35:b7:29:37:18:71:57:c3:53:ea:48:2c:41:c2:cd:67:
         78:5d:b3:91:83:90:31:8a:6e:22:c4:1c:22:fe:31:74:17:ea:
         9d:a5:46:41:73:ab:fe:71:0d:07:72:1d:60:1f:fb:22:2b:0c:
         02:c8:9a:bb:3a:76:76:88:98:23:2c:04:0a:7e:42:91:d5:92:
         32:0b:0b:c3:68:ff:8f:30:2d:0d:6d:8e:b8:82:bb:a0:91:53:
         af:ea:77:59:88:a5:89:5e:a3:02:5b:5b:40:be:d5:0e:61:21:
         54:f6:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:42:50 2026 by rpki-client