Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
File:                     3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa (raw, json)
Hash identifier:          /kRD+rKAnLgEaHrFMUsNefMwHigkjGp66ZnOn/cYauM=
Subject key identifier:   FB:60:34:85:62:2D:A5:DC:EE:24:1C:59:FB:B2:58:AE:EF:68:1B:C3
Certificate issuer:       /CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
Certificate serial:       106047343DF51E54C90E439CAEDAA40E4E478A4C
Authority key identifier: 6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa
Signing time:             Tue 24 Mar 2026 12:34:35 +0000
ROA not before:           Tue 24 Mar 2026 12:29:35 +0000
ROA not after:            Tue 23 Mar 2027 12:34:35 +0000
asID:                     262407
IP address blocks:        189.76.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl
                          rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 02:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:47:34:3d:f5:1e:54:c9:0e:43:9c:ae:da:a4:0e:4e:47:8a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31497D50F2E7BCADD55F9BBCC79046B5989FD9
        Validity
            Not Before: Mar 24 12:29:35 2026 GMT
            Not After : Mar 23 12:34:35 2027 GMT
        Subject: CN=FB603485622DA5DCEE241C59FBB258AEEF681BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:ef:5d:58:fb:6e:7f:38:0e:4f:82:cc:21:
                    98:89:4a:28:3d:8b:63:be:4d:9f:86:eb:5a:f0:56:
                    e6:5b:46:f0:21:d6:7a:41:ce:4e:db:57:24:9d:2a:
                    a6:27:01:48:2c:a5:10:0e:b1:bc:66:72:80:e2:86:
                    6b:01:65:a1:99:50:db:74:c7:4d:03:81:5e:8c:df:
                    24:14:a9:31:81:70:69:20:c7:10:11:3f:95:83:10:
                    1c:87:a2:3d:d3:7f:ee:9c:7b:97:8b:91:61:50:06:
                    82:b7:06:4e:eb:68:84:f4:6a:93:07:77:db:84:28:
                    bb:a8:14:65:80:7e:7e:7c:8c:8a:a1:07:b1:5c:e4:
                    14:da:a8:00:93:ca:f1:96:89:e7:d8:20:ce:20:e5:
                    bf:40:ae:31:51:8c:96:ee:b7:c6:80:e1:f8:a7:5b:
                    25:00:2a:df:36:43:46:d9:4c:bf:e3:bd:c0:6b:94:
                    3e:8c:97:14:0c:84:4d:e5:66:b7:0a:ec:81:57:23:
                    41:ea:bd:38:4d:ef:d9:a4:a8:64:03:79:be:25:71:
                    90:89:79:c6:f1:7e:df:0d:05:77:54:cc:fd:37:94:
                    e7:63:b5:ae:8c:4c:e6:37:0d:ca:e5:fa:fe:21:ef:
                    d8:a1:56:2d:f8:7f:52:90:35:2d:ea:46:c0:7c:78:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:34:85:62:2D:A5:DC:EE:24:1C:59:FB:B2:58:AE:EF:68:1B:C3
            X509v3 Authority Key Identifier:
                keyid:6D:31:49:7D:50:F2:E7:BC:AD:D5:5F:9B:BC:C7:90:46:B5:98:9F:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D31497D50F2E7BCADD55F9BBCC79046B5989FD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Baxt9ie6YDp81igrdco5XGedmxsgYtuHa2P1WdbTZXHE/0/3138392e37362e3234302e302f32302d3234203d3e20323632343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:b9:b0:70:f6:fa:09:4f:89:5f:5d:4d:35:7f:57:09:42:4e:
         e6:26:23:fe:0d:3d:07:0e:f3:8a:6c:45:b8:39:f8:b3:21:8c:
         fc:ad:97:ce:8f:f4:10:87:00:5c:ba:f9:96:48:f8:84:6f:a5:
         4a:9a:81:fa:9d:86:6d:4e:5d:50:57:01:4b:07:2b:94:17:07:
         70:b0:5b:0d:4b:19:ae:a9:3a:6b:a6:d1:64:04:db:d0:ba:52:
         5e:31:c6:c7:35:27:ab:4e:10:b9:0c:cd:67:45:fe:13:f6:11:
         0a:e8:e1:e1:38:69:d4:64:68:cb:69:4e:73:51:b1:ad:97:77:
         c8:64:6f:ac:ff:4c:7b:ea:81:57:72:f4:72:b7:61:b6:30:72:
         b5:45:5b:c8:74:3d:6d:fa:a3:f1:06:42:b3:bc:e3:19:a2:d2:
         39:6a:cf:01:56:b7:57:d2:d6:70:5e:4f:dd:af:d4:05:d3:4b:
         09:c1:ad:20:fe:74:54:98:a0:44:cd:e1:5d:08:ea:a1:33:d8:
         c4:e3:7c:8a:7d:1e:8a:7c:5e:03:63:4a:52:8f:a1:ce:30:9a:
         07:40:1c:ef:3d:43:e1:d3:27:6b:02:5a:61:6f:cb:fd:a6:e8:
         ee:2f:e1:6e:27:ae:26:7e:97:ea:c5:78:f7:40:32:87:ae:44:
         31:5a:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:08 2026 by rpki-client