Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3138372e3130392e38302e302f32302d3330203d3e203533313339.roa
File:                     3138372e3130392e38302e302f32302d3330203d3e203533313339.roa (raw, json)
Hash identifier:          LpgsxtbPcwKmi56Cg4XsJhCYpU/f5rl4o501LSjO2O8=
Subject key identifier:   7F:6E:22:B1:BF:FB:2C:2B:B4:8A:88:01:77:45:36:C5:FD:73:44:FE
Certificate issuer:       /CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02
Certificate serial:       458CD41F211CFA03D2B3454A80C9A3A1A47A01DE
Authority key identifier: FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3138372e3130392e38302e302f32302d3330203d3e203533313339.roa
Signing time:             Mon 20 Jul 2026 12:20:35 +0000
ROA not before:           Mon 20 Jul 2026 12:15:35 +0000
ROA not after:            Mon 19 Jul 2027 12:20:35 +0000
asID:                     53139
IP address blocks:        187.109.80.0/20 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl
                          rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8c:d4:1f:21:1c:fa:03:d2:b3:45:4a:80:c9:a3:a1:a4:7a:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED6A961782D101F9B7A4CC4F0DD334716AEDD02
        Validity
            Not Before: Jul 20 12:15:35 2026 GMT
            Not After : Jul 19 12:20:35 2027 GMT
        Subject: CN=7F6E22B1BFFB2C2BB48A8801774536C5FD7344FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:5a:e3:e7:7a:0f:df:7f:48:f8:03:ce:01:
                    ca:ae:52:84:25:a1:47:8c:0c:00:8d:21:37:b7:82:
                    e2:69:8f:55:ab:25:8f:2a:aa:09:be:4d:7b:0d:93:
                    31:46:ae:23:af:09:fb:43:5b:b3:94:ca:58:3d:af:
                    8b:2d:81:df:e4:3d:3d:15:bb:d3:8e:90:8c:ca:b3:
                    7c:5b:5a:f2:fb:64:0c:d0:63:a5:e6:61:3c:3b:5b:
                    a8:8e:5f:82:e6:c8:2b:d6:47:02:ac:40:ce:c1:6c:
                    13:61:ea:2b:a8:e5:c2:c9:86:9b:ce:08:59:04:c2:
                    8b:56:da:9a:d0:56:e1:5c:93:71:fc:b3:fb:1f:b8:
                    e3:cd:78:0e:cf:3b:98:4b:74:f2:58:60:28:48:a4:
                    1e:01:3f:96:b2:1f:0c:f3:17:49:a2:cd:02:bf:35:
                    a6:16:54:17:f2:64:6f:96:ea:8f:c2:80:52:a9:2a:
                    07:5d:cd:eb:25:b9:a2:66:ce:69:d6:e5:65:80:33:
                    f5:e4:60:95:7f:79:3f:b4:87:a0:cf:0b:fa:46:28:
                    20:df:a4:9e:da:59:0e:58:ba:a1:33:cd:00:53:43:
                    09:f7:da:4c:e3:52:39:15:8a:f2:40:85:f7:03:70:
                    e2:2e:96:06:88:15:a3:20:84:37:23:00:c4:00:e3:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:22:B1:BF:FB:2C:2B:B4:8A:88:01:77:45:36:C5:FD:73:44:FE
            X509v3 Authority Key Identifier:
                keyid:FE:D6:A9:61:78:2D:10:1F:9B:7A:4C:C4:F0:DD:33:47:16:AE:DD:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED6A961782D101F9B7A4CC4F0DD334716AEDD02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/0/3138372e3130392e38302e302f32302d3330203d3e203533313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:49:33:1d:1c:9d:c5:f5:0b:12:fe:c9:31:21:d5:35:6f:ed:
         22:16:80:d3:26:e6:00:d2:f7:de:d7:f4:12:2d:e9:05:17:57:
         33:ce:cd:0c:01:4d:69:a3:09:6e:a2:9e:35:a5:7d:b6:be:72:
         05:34:ec:13:a8:ef:8d:10:8c:fa:d7:cf:74:0d:0a:86:b6:21:
         00:49:5d:e6:6c:ea:80:a0:b5:a7:15:ba:e2:73:d7:8f:b6:05:
         85:4a:cb:4c:1b:4d:9c:3f:76:47:9d:b1:7f:e9:bc:31:8b:29:
         ff:c4:cc:ff:ad:8f:d6:8a:e2:17:35:05:cb:2a:d1:cb:c4:c8:
         4e:6f:07:8f:fb:05:06:7e:2b:a1:c9:3d:84:c6:a2:56:c5:ac:
         22:3f:44:fd:83:8c:f6:80:3c:95:a9:41:c1:fb:33:73:55:e4:
         af:b3:19:70:05:c6:42:fe:be:12:44:36:d5:e1:51:9b:66:24:
         2f:07:63:8a:a4:c6:2c:45:74:38:52:4d:dc:dd:23:89:53:34:
         a1:c0:55:6e:35:9e:0a:f8:eb:cf:01:fa:95:9a:52:ec:9b:e0:
         3a:d9:f2:d7:84:5b:cc:9e:c6:32:d1:4b:9b:37:d5:a6:04:fe:
         a1:eb:17:26:b8:d6:f8:95:0f:fc:0c:62:75:1f:76:4f:ea:fe:
         2f:91:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:07 2026 by rpki-client