Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          KbvlG1KF9FJG7yIjkXHP+L7r2+yy3wIshUJKM474Csk=
Subject key identifier:   FD:EF:88:37:C2:08:C5:92:D8:78:80:A3:BA:55:A1:C2:F1:9D:E9:B6
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       47E25334F791F845682CB9DC525A35864A1D0A16
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa
Signing time:             Thu 02 Jul 2026 15:40:23 +0000
ROA not before:           Thu 02 Jul 2026 15:35:23 +0000
ROA not after:            Thu 01 Jul 2027 15:40:23 +0000
asID:                     270711
IP address blocks:        189.127.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e2:53:34:f7:91:f8:45:68:2c:b9:dc:52:5a:35:86:4a:1d:0a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul  2 15:35:23 2026 GMT
            Not After : Jul  1 15:40:23 2027 GMT
        Subject: CN=FDEF8837C208C592D87880A3BA55A1C2F19DE9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:e3:7d:3b:f1:16:01:a0:b7:5d:de:5b:75:
                    ce:16:e3:3e:51:90:60:ab:80:54:79:05:f7:52:67:
                    2c:d4:1e:d0:52:50:e4:6f:82:60:41:77:19:1e:fd:
                    9e:46:5d:1e:97:be:72:50:28:5e:44:c1:d7:85:54:
                    12:e1:46:d2:3d:9c:f3:3c:56:2c:f4:c1:a0:82:1f:
                    5e:b4:e8:7d:f2:54:9a:75:1e:43:99:cd:52:d8:83:
                    49:91:95:3f:a3:b1:43:36:c3:13:56:f8:1d:34:78:
                    bb:6d:93:0d:97:ab:97:8b:c7:5e:c6:64:23:f7:2f:
                    19:48:17:31:50:27:ef:3c:a2:f2:ef:f6:ff:9f:75:
                    21:46:6a:54:cd:b6:fc:17:2c:0c:43:f9:7d:3b:30:
                    b6:bd:65:ce:bc:ca:6f:38:8f:33:31:39:ce:e4:b9:
                    ca:3e:71:ac:b3:be:52:e4:42:2f:48:cd:72:0f:13:
                    9f:29:75:bb:82:7b:5f:05:84:30:03:80:04:af:53:
                    c9:c4:04:bf:0b:3c:1f:0b:35:4c:3d:0a:8e:9e:e4:
                    77:9c:d7:b6:45:68:0c:0c:7f:05:2e:03:a2:77:b6:
                    53:f4:8e:df:2f:20:40:bd:a7:bd:32:94:1a:46:e6:
                    ba:a1:b7:8d:27:ff:0b:3d:68:cb:d6:49:40:74:83:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:88:37:C2:08:C5:92:D8:78:80:A3:BA:55:A1:C2:F1:9D:E9:B6
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132382e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:36:31:e0:e0:4f:26:a9:0a:42:85:96:6e:1d:15:27:8e:cc:
         99:70:9b:64:e5:51:25:4b:39:05:b4:85:98:8f:3e:7a:2a:f0:
         ac:22:6f:04:eb:38:40:16:34:9e:10:88:27:fd:cd:42:63:7d:
         88:3d:70:d1:b1:a5:7c:62:b8:a8:8c:c1:45:18:e3:b5:d8:08:
         0b:41:81:a6:af:d4:ab:45:51:82:32:f7:58:64:9c:a7:97:b6:
         a4:ed:c9:51:06:f0:32:be:23:94:23:be:0e:93:3b:c0:8a:9f:
         de:f4:89:4e:39:2a:2d:98:a9:db:0b:e7:5e:7f:c2:e7:59:4d:
         e8:d6:1b:00:fe:9f:46:e5:a7:09:83:b6:f3:ff:68:27:f9:30:
         b5:ee:fc:ec:22:49:da:aa:f9:72:0b:9c:8c:70:01:69:56:78:
         be:45:f6:cd:bf:3c:3b:c0:9f:3e:b9:c5:9a:45:39:ce:ec:93:
         2a:d7:5c:d2:4d:2e:d6:1e:f8:2d:1a:83:e6:86:f5:28:93:7c:
         85:83:a1:2c:81:ac:68:c3:3e:28:6c:dd:bf:02:0e:80:48:a9:
         00:f0:c2:15:3b:53:65:70:29:50:60:76:73:45:db:39:bf:6b:
         33:0b:c9:5d:95:03:f7:3a:45:ff:c8:01:83:2f:db:fd:8b:9f:
         1a:72:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:43 2026 by rpki-client