Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
File:                     3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa (raw, json)
Hash identifier:          hy3BUlZhC276KkNh6bqoOoSS5osuIU3Ef3ZG8xnhDnM=
Subject key identifier:   6F:95:32:D1:96:28:84:3E:D1:89:40:6D:8B:D0:A3:7B:32:5A:F7:BF
Certificate issuer:       /CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
Certificate serial:       3EF0A33DF7FAC58A6FC10BEDD4EC842E1A63015E
Authority key identifier: 71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa
Signing time:             Wed 22 Jul 2026 12:38:31 +0000
ROA not before:           Wed 22 Jul 2026 12:33:31 +0000
ROA not after:            Wed 21 Jul 2027 12:38:31 +0000
asID:                     265447
IP address blocks:        168.196.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:a3:3d:f7:fa:c5:8a:6f:c1:0b:ed:d4:ec:84:2e:1a:63:01:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D1103F44C00016AA1BE641CD9DD99010DC14CC
        Validity
            Not Before: Jul 22 12:33:31 2026 GMT
            Not After : Jul 21 12:38:31 2027 GMT
        Subject: CN=6F9532D19628843ED189406D8BD0A37B325AF7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:c2:b7:12:4d:dd:87:83:c3:dd:7c:87:95:
                    c6:9c:3d:56:3c:c8:ac:e5:42:b4:41:f5:75:26:6d:
                    5a:2e:90:12:27:6c:2d:7a:92:5c:69:c0:4a:82:1d:
                    f6:dd:e3:3f:d3:0d:33:21:d8:8e:47:cd:a2:4b:af:
                    a9:19:d1:7a:fb:03:fb:de:3a:4b:16:af:5c:07:92:
                    3f:83:4f:db:ad:0b:1f:7b:9f:67:e1:1c:4c:f3:e2:
                    66:06:b7:de:10:47:cb:73:d3:62:d5:33:6f:e4:ba:
                    3c:7f:e3:64:68:32:ce:1e:ac:ed:e6:8f:d2:9b:61:
                    1a:d9:f8:fe:a6:48:ab:0b:d1:4f:4e:61:07:ca:4f:
                    f3:aa:0b:e1:44:1d:c6:e5:a4:73:06:6f:e9:e8:0c:
                    78:d4:40:b7:b6:56:77:7e:4a:ab:02:52:20:b4:10:
                    7b:b4:7e:6c:a3:f2:43:7f:29:d9:b5:5f:3d:da:2e:
                    d8:56:e4:f8:1d:95:72:b3:6a:2a:7f:08:df:f6:f2:
                    70:f5:8b:b3:ef:df:69:65:92:7d:4a:bf:dd:aa:7b:
                    57:6f:5b:8c:ea:3c:e9:7c:6c:d2:f3:ce:62:91:62:
                    f5:0f:9b:bb:3d:65:f4:a6:2b:ba:95:fc:94:d1:30:
                    1f:05:8a:ba:bb:8c:b5:0d:39:32:62:52:e4:fe:40:
                    42:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:95:32:D1:96:28:84:3E:D1:89:40:6D:8B:D0:A3:7B:32:5A:F7:BF
            X509v3 Authority Key Identifier:
                keyid:71:D1:10:3F:44:C0:00:16:AA:1B:E6:41:CD:9D:D9:90:10:DC:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/71D1103F44C00016AA1BE641CD9DD99010DC14CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D1103F44C00016AA1BE641CD9DD99010DC14CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3136382e3139362e38342e302f32322d3332203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:43:ec:bf:56:bb:04:14:c3:25:c0:cc:78:40:7e:df:8f:
         78:35:9e:d1:dd:24:c5:47:12:0b:7a:bb:26:85:d7:7d:c4:6e:
         a6:4b:85:89:f6:88:02:99:c1:6c:2b:cd:ee:51:ef:ef:1a:9b:
         73:d0:43:76:fa:bb:e7:99:14:79:5f:13:fe:da:92:6b:95:ae:
         6a:f9:09:fe:06:9e:19:3c:5a:8a:05:b4:d6:10:b2:39:2c:01:
         fc:75:6e:98:65:39:59:a0:ef:b1:bb:f9:0b:62:52:38:c2:e3:
         4b:52:ff:e5:26:2a:17:88:74:36:e3:68:de:1d:05:d0:8b:fa:
         ce:d8:79:d9:15:7b:93:b1:e5:2e:7e:33:3d:48:00:f5:ea:62:
         9a:ab:f7:0f:a4:46:fd:fb:4f:bb:58:7c:eb:aa:90:3e:03:80:
         00:85:80:54:25:ec:8d:1e:1d:a8:45:f4:87:5a:38:1e:16:7f:
         0b:bc:8b:27:cd:c9:11:da:04:1e:63:f8:68:07:83:19:01:4f:
         19:44:e6:0c:3c:31:62:46:97:40:18:83:b3:c7:dd:aa:ec:c6:
         05:0d:1f:fb:93:e6:72:9f:2d:54:dc:af:cc:60:ff:ff:fb:5c:
         dc:54:07:2a:fe:9d:f8:cf:67:82:c7:f7:75:51:a3:10:5a:b0:
         d8:f6:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:46 2026 by rpki-client