Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa
File:                     3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa (raw, json)
Hash identifier:          L4jV1Jbe4Pc9u9JZyk4qu8UiCgPJjWSmsQyeFcBJlA8=
Subject key identifier:   1C:38:7D:C0:D4:7F:D9:60:2D:2C:C4:3C:D2:54:AA:80:67:31:2C:54
Certificate issuer:       /CN=746269F309EFAEA184F1F06673C4E37E5C0003FB
Certificate serial:       6B6177CA8E3FBF5BA7A018FBCA8B0FF0157A80C0
Authority key identifier: 74:62:69:F3:09:EF:AE:A1:84:F1:F0:66:73:C4:E3:7E:5C:00:03:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746269F309EFAEA184F1F06673C4E37E5C0003FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa
Signing time:             Fri 26 Jun 2026 13:42:18 +0000
ROA not before:           Fri 26 Jun 2026 13:37:18 +0000
ROA not after:            Fri 25 Jun 2027 13:42:18 +0000
asID:                     265205
IP address blocks:        167.250.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/746269F309EFAEA184F1F06673C4E37E5C0003FB.crl
                          rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/746269F309EFAEA184F1F06673C4E37E5C0003FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746269F309EFAEA184F1F06673C4E37E5C0003FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:61:77:ca:8e:3f:bf:5b:a7:a0:18:fb:ca:8b:0f:f0:15:7a:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746269F309EFAEA184F1F06673C4E37E5C0003FB
        Validity
            Not Before: Jun 26 13:37:18 2026 GMT
            Not After : Jun 25 13:42:18 2027 GMT
        Subject: CN=1C387DC0D47FD9602D2CC43CD254AA8067312C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:ea:9f:09:77:49:2a:10:be:a3:0d:b6:6e:
                    54:14:d9:a4:3b:1c:70:85:7b:17:0e:a5:e0:38:39:
                    bf:3e:f3:c7:e6:77:43:bd:e5:c9:0f:31:2b:e5:af:
                    ae:2e:9c:6a:5b:ee:0a:b0:e4:5e:71:dc:76:5a:5d:
                    4a:8f:b9:75:a7:96:dc:8f:2c:9e:b2:e7:b0:bb:fe:
                    af:91:14:ba:6f:74:14:65:d1:27:58:f2:8d:93:60:
                    64:80:35:d9:c2:0e:c2:1e:c5:70:06:1e:46:34:fd:
                    92:0b:57:49:64:4b:e0:87:85:4b:63:15:2b:cf:18:
                    1c:3f:ab:57:90:09:63:11:09:8a:d2:9b:62:92:cb:
                    6b:be:59:22:4a:bb:26:db:2a:91:a9:6a:84:ab:42:
                    b7:78:30:93:b7:03:20:2c:48:ef:74:65:eb:07:0d:
                    59:cc:82:b5:14:6d:78:29:1f:1a:3b:e0:b7:bd:07:
                    f6:dc:f2:7c:9f:8e:e0:82:34:00:9e:55:f6:b2:28:
                    a5:46:67:96:80:8f:89:da:99:aa:85:a0:33:08:74:
                    0e:10:77:20:b2:35:1c:19:7c:43:b1:0b:f6:76:4d:
                    91:9d:c9:c2:bc:f9:c3:bf:df:01:e8:94:41:93:ff:
                    78:90:e5:d6:cc:ef:d9:49:7e:a4:18:9b:9b:78:d2:
                    4c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:7D:C0:D4:7F:D9:60:2D:2C:C4:3C:D2:54:AA:80:67:31:2C:54
            X509v3 Authority Key Identifier:
                keyid:74:62:69:F3:09:EF:AE:A1:84:F1:F0:66:73:C4:E3:7E:5C:00:03:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/746269F309EFAEA184F1F06673C4E37E5C0003FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/746269F309EFAEA184F1F06673C4E37E5C0003FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BS21UxSGv7KLBmmXWi9pdJkroZVQzaLrzYXtBJzJMrAg/2/3136372e3235302e36382e302f32322d3234203d3e20323635323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:65:41:16:d2:3b:9c:69:8d:00:e1:43:3b:e0:04:ba:4e:73:
         cc:e5:f2:77:9e:25:eb:14:f5:ea:9e:97:46:39:b1:d1:bb:7b:
         e2:09:19:46:d5:5d:cd:fa:63:83:b0:b5:56:ae:f7:7b:3a:21:
         7b:28:9a:3f:c2:23:bc:27:e9:02:2e:87:cf:7b:d3:05:fc:18:
         76:0a:69:6c:07:de:80:ba:56:91:4d:d6:5c:4e:be:5f:8e:ed:
         a9:f6:91:97:71:20:8b:a1:2e:bc:2f:68:b4:b3:4a:c2:68:09:
         d7:f0:a3:ff:63:f6:07:b6:c1:69:e8:af:37:55:82:ef:94:c6:
         36:1e:0f:ad:56:cf:09:34:2a:89:31:cc:80:fc:3b:eb:72:c2:
         71:af:df:9f:cd:90:e9:c9:97:ce:d6:a6:fd:c6:d5:1f:e6:c7:
         af:a4:3b:0c:81:c1:06:9b:cc:55:64:b9:8b:9a:48:b0:48:82:
         7d:08:5d:e6:f6:74:fe:5a:99:dd:86:ea:30:00:da:e1:42:9f:
         11:a4:7d:fc:c0:0a:d4:8a:4b:7c:26:5d:cd:b8:fa:2c:ec:a4:
         5f:5a:2c:b8:e9:f6:dc:2a:b6:11:57:ed:20:d4:fc:6b:b8:7f:
         14:49:2d:63:68:c4:39:41:db:22:5d:c1:e0:ce:2f:0d:43:5e:
         ad:81:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:08:53 2026 by rpki-client