Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
File:                     3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa (raw, json)
Hash identifier:          /UajwF0hY5sc9QRqWjRWwDRDfV7szBc5VxagGNugeEo=
Subject key identifier:   30:E8:60:43:78:21:69:95:35:7D:AF:F3:A5:5B:84:CC:09:47:D6:A7
Certificate issuer:       /CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02
Certificate serial:       1AAD7944957EBA3B2BF0A70BF5981220CD31E2A4
Authority key identifier: FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa
Signing time:             Fri 10 Jul 2026 11:57:20 +0000
ROA not before:           Fri 10 Jul 2026 11:52:20 +0000
ROA not after:            Fri 09 Jul 2027 11:57:20 +0000
asID:                     53139
IP address blocks:        168.197.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:79:44:95:7e:ba:3b:2b:f0:a7:0b:f5:98:12:20:cd:31:e2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02
        Validity
            Not Before: Jul 10 11:52:20 2026 GMT
            Not After : Jul  9 11:57:20 2027 GMT
        Subject: CN=30E8604378216995357DAFF3A55B84CC0947D6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:ed:d6:bd:1b:34:5d:90:3f:62:22:08:92:
                    ab:df:cb:b6:da:f2:bd:e0:7f:4b:48:c1:24:cb:e8:
                    96:b2:f6:06:d0:00:56:96:19:fd:60:69:41:53:a0:
                    4c:01:e1:8f:c0:21:3b:4d:8b:bb:86:77:a8:10:d5:
                    0a:fe:99:d2:46:41:a6:52:2b:44:af:11:75:e4:fa:
                    6c:38:6f:69:b0:72:33:0b:0b:d4:16:05:9a:c0:23:
                    2c:52:7a:fd:47:99:50:d0:48:41:2a:f0:1d:bb:4d:
                    f5:8d:ae:22:fc:9d:7b:1d:df:9c:dd:e0:f8:b8:3a:
                    d2:4a:cf:9b:62:20:4c:e6:ea:18:38:01:94:b9:8a:
                    b3:7e:da:ba:67:f1:7b:00:85:a2:35:c4:aa:11:1d:
                    60:42:cb:e9:3f:7a:2b:7d:ff:3a:00:8c:62:87:48:
                    c4:c4:01:00:a1:05:52:11:00:4d:b6:c0:bb:a3:19:
                    d8:2f:03:20:e6:c2:1b:2c:c8:14:3e:0b:36:3d:cb:
                    d3:56:68:04:9f:3f:28:ea:5a:11:db:7a:d1:76:27:
                    09:d4:4a:fc:3e:58:b3:c3:3b:c7:1a:83:b6:f6:b9:
                    69:b9:b9:45:c7:ff:39:47:f8:17:14:ab:70:46:de:
                    ff:ae:26:e7:19:99:cc:d1:03:fd:5a:04:aa:cc:25:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:60:43:78:21:69:95:35:7D:AF:F3:A5:5B:84:CC:09:47:D6:A7
            X509v3 Authority Key Identifier:
                keyid:FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3136382e3139372e3230342e302f32322d3234203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:cc:06:89:f5:3e:49:f0:d2:aa:29:f2:d8:90:56:ee:c7:
         80:3e:0b:7e:99:e1:7a:0e:5b:b8:39:c9:fb:54:6e:64:f8:43:
         b7:d1:e8:a5:0b:e7:df:98:36:11:85:1f:a8:4c:e1:c7:4f:99:
         8d:3f:0d:27:30:e1:30:64:ff:ff:ed:5b:90:42:ab:67:64:91:
         f1:77:9b:81:8c:90:e0:54:c7:14:0a:20:a8:7c:01:04:f9:f8:
         c7:23:14:36:b3:35:27:48:18:ef:06:4e:72:7b:b4:0c:38:01:
         c6:53:9b:e7:2d:8b:61:ea:91:6b:71:c2:03:9a:cf:f7:6a:83:
         a8:b2:cd:64:e3:43:3d:e8:b6:d1:7f:70:96:87:b5:75:fb:1b:
         1b:35:05:49:76:52:97:54:fc:b3:23:5f:ba:83:d0:f4:5b:34:
         10:91:ba:40:d8:08:e2:51:f8:a5:d3:60:db:83:e8:56:03:65:
         ca:cf:23:01:f4:16:f6:48:d5:b0:15:17:4f:e6:ea:f9:e3:15:
         6f:a9:63:b4:09:f9:df:51:8f:df:6d:cb:08:cf:1c:e6:97:43:
         f8:8d:39:a0:49:b7:58:10:da:de:88:e2:5d:e9:e6:2c:0a:65:
         07:2a:df:55:72:6e:e1:98:b7:bb:41:05:39:08:c1:d9:cf:42:
         28:27:12:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:45:22 2026 by rpki-client