Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138392e39302e3233362e302f32322d3332203d3e20313938393439.roa
File:                     3138392e39302e3233362e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          fg9+LXvfA/EJk7JI02ij/rRRjdjfmMcAS/yEkiShDT8=
Subject key identifier:   87:30:03:C2:ED:7F:99:34:6D:41:22:A2:C7:BC:D1:61:F6:D4:AE:E2
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       047D134CBEAC90BF76D290F70E4537E3D9DEA350
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138392e39302e3233362e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 24 Jul 2026 15:48:38 +0000
ROA not before:           Fri 24 Jul 2026 15:43:38 +0000
ROA not after:            Fri 23 Jul 2027 15:48:38 +0000
asID:                     198949
IP address blocks:        189.90.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:13:4c:be:ac:90:bf:76:d2:90:f7:0e:45:37:e3:d9:de:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 24 15:43:38 2026 GMT
            Not After : Jul 23 15:48:38 2027 GMT
        Subject: CN=873003C2ED7F99346D4122A2C7BCD161F6D4AEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:b7:2e:7a:f9:31:af:30:55:d6:99:e5:7c:
                    0e:ad:fd:63:93:c6:3f:db:dc:68:38:01:83:44:9c:
                    ed:0b:89:27:dc:c2:26:61:49:ec:7d:08:30:a8:ad:
                    5a:83:51:45:df:41:3f:bc:8e:ec:6c:b1:77:6b:5f:
                    0f:97:03:aa:96:e4:c1:37:97:bf:48:f8:a5:70:75:
                    e6:ef:f0:20:c6:7d:5e:fc:16:6b:df:6f:9f:43:f4:
                    dc:dc:3e:9f:7f:c6:5c:90:a5:6f:b0:89:65:15:16:
                    3d:27:93:bc:3f:36:26:e5:e3:4e:5b:9b:cf:c5:fa:
                    f0:b4:cf:19:1e:b4:da:f8:1d:1e:e8:00:f0:aa:c8:
                    c5:d3:78:fe:ed:35:6d:04:29:5e:27:01:40:68:41:
                    7b:c9:21:c1:07:f6:72:c6:5c:56:99:41:31:ba:7f:
                    be:c9:08:3b:2b:fc:fc:6b:07:fe:7f:fe:83:92:90:
                    de:9a:50:fd:01:98:52:83:c0:c7:fe:95:9a:e0:b2:
                    1f:f7:03:13:5a:69:5e:2e:fa:fd:72:c8:5c:dc:17:
                    d9:fe:e9:a7:80:a7:1f:6f:7a:86:66:da:b6:77:65:
                    7a:88:bd:ad:f3:47:c9:4c:8a:8f:64:0d:03:36:fd:
                    26:43:5f:c0:64:a3:45:54:d8:8a:81:20:cc:59:41:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:30:03:C2:ED:7F:99:34:6D:41:22:A2:C7:BC:D1:61:F6:D4:AE:E2
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138392e39302e3233362e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:f3:c0:8f:83:fa:84:7d:d6:81:5b:fa:7a:84:6a:0c:4f:ef:
         13:68:81:40:d3:ea:88:1d:4c:85:71:b8:86:ea:62:e1:65:42:
         e2:d1:a2:53:f3:24:35:e4:54:b6:e3:16:10:74:61:76:51:c1:
         50:a6:13:61:4a:77:0b:80:7e:29:e7:42:2b:2a:3b:d8:85:33:
         bc:27:ad:52:45:a5:bd:b7:86:e3:4c:08:86:74:33:85:a2:29:
         ca:82:ab:20:fb:7b:10:4d:5d:29:c0:71:9f:7f:05:09:35:e1:
         0c:66:43:a7:93:b9:b6:56:23:8a:9e:57:df:24:75:a1:dc:49:
         43:37:3c:14:30:78:ab:5e:ae:08:a7:a5:5c:01:d7:9b:11:97:
         dd:dc:87:c8:fb:06:8f:6f:ef:1f:79:f1:7e:77:17:77:d3:6c:
         a2:47:79:9f:1b:32:db:a2:d7:c0:2a:7b:53:07:9a:7a:90:70:
         37:c8:4c:ac:f4:b9:c9:14:bb:e5:86:d6:44:0a:28:5d:5a:71:
         f0:5c:5d:47:cf:64:01:fb:ad:e6:12:74:0e:fc:13:27:4c:98:
         82:e8:81:b8:7d:e7:b5:f0:c7:28:64:ec:42:98:cb:30:2d:b3:
         b4:d2:e1:ee:c1:d1:d3:0e:bb:da:2b:c3:12:0a:9a:53:2e:7d:
         44:7c:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:24:33 2026 by rpki-client