Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130302e302f32332d3233203d3e20323633333537.roa
File:                     3139312e33372e3130302e302f32332d3233203d3e20323633333537.roa (raw, json)
Hash identifier:          UlEcDgK7JDrA7O2qWEbHsJ0aVr9JGByiamChgO7MMMU=
Subject key identifier:   6B:4F:B5:90:BE:30:6D:0B:9E:E7:6E:B1:AE:F1:6D:72:7C:03:54:08
Certificate issuer:       /CN=666C4396BE3D615556D2074B0E613EAF065B2878
Certificate serial:       343CB6CDAED0B2774C4F63A0BF2BB762357529C1
Authority key identifier: 66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130302e302f32332d3233203d3e20323633333537.roa
Signing time:             Thu 01 Oct 2026 12:16:41 +0000
ROA not before:           Thu 01 Oct 2026 12:11:41 +0000
ROA not after:            Thu 30 Sep 2027 12:16:41 +0000
asID:                     263357
IP address blocks:        191.37.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl
                          rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 14:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3c:b6:cd:ae:d0:b2:77:4c:4f:63:a0:bf:2b:b7:62:35:75:29:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=666C4396BE3D615556D2074B0E613EAF065B2878
        Validity
            Not Before: Oct  1 12:11:41 2026 GMT
            Not After : Sep 30 12:16:41 2027 GMT
        Subject: CN=6B4FB590BE306D0B9EE76EB1AEF16D727C035408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:12:c1:a1:9b:c9:2c:8c:28:ab:df:1b:43:
                    ac:bc:3a:17:b7:73:1c:4e:4f:2e:48:40:42:d3:a9:
                    ea:3b:ba:38:96:a1:76:e0:ba:a5:6a:d6:9b:45:a2:
                    96:a2:e8:33:21:2c:1b:6e:4d:66:d9:91:b2:dc:a9:
                    ce:76:fa:83:e9:4f:b4:24:12:51:dd:b1:ae:67:c9:
                    26:ca:11:22:66:45:8b:2f:b2:77:36:92:bf:92:cf:
                    90:c7:73:7a:93:c2:86:cd:79:d1:66:4a:dc:06:7b:
                    43:3d:0f:96:b2:5d:46:87:8d:be:11:c0:82:c6:0c:
                    d1:df:ed:3c:31:66:cd:6a:12:9e:64:42:70:1b:93:
                    d1:2a:fa:95:0d:67:b3:26:d4:72:b2:a8:1d:e0:8d:
                    22:22:50:76:ba:a3:a6:f0:6a:b7:77:9e:87:77:1b:
                    14:cf:04:42:14:96:76:87:44:c0:9b:99:83:9a:4b:
                    b9:76:45:8d:86:e9:0d:73:ee:70:67:ff:16:3a:58:
                    95:bb:e2:20:1c:ff:42:43:71:7e:0b:74:28:16:02:
                    f4:53:7b:db:ec:25:1a:71:cf:8a:cc:10:b5:3c:55:
                    c0:2c:97:83:65:4c:34:2a:46:1e:f5:f8:93:1f:f6:
                    69:82:bb:d5:03:9e:85:31:63:ef:86:b3:2a:7a:40:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:B5:90:BE:30:6D:0B:9E:E7:6E:B1:AE:F1:6D:72:7C:03:54:08
            X509v3 Authority Key Identifier:
                keyid:66:6C:43:96:BE:3D:61:55:56:D2:07:4B:0E:61:3E:AF:06:5B:28:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/666C4396BE3D615556D2074B0E613EAF065B2878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/666C4396BE3D615556D2074B0E613EAF065B2878.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FZQc4cmkwZ4n1kpkeiUCjoST7xVXz5wFDhVTnFzJPVFi/0/3139312e33372e3130302e302f32332d3233203d3e20323633333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:2a:b3:82:ae:b9:df:90:88:03:54:54:01:35:d5:a4:1d:21:
         e6:53:68:47:9a:b5:22:e5:23:e0:dd:77:45:96:b5:d6:26:69:
         65:b7:0d:87:51:73:2b:c6:ab:bd:29:e4:82:01:50:db:5b:19:
         8d:6b:d8:9b:ad:cd:ab:7b:97:63:c7:37:cb:35:4e:95:89:48:
         e7:79:fd:a6:64:82:86:c9:9e:6c:35:2d:bc:cd:7d:76:7f:f0:
         6b:8e:bc:11:eb:08:fa:9b:81:17:82:a4:57:52:c9:4d:57:1c:
         cd:6e:32:0d:f4:27:c9:ca:71:49:b4:51:4f:bc:bd:51:6b:f1:
         0a:7f:b2:71:0d:7d:25:ee:ed:69:41:22:21:8c:f3:04:d7:57:
         85:b1:98:2f:6f:31:a7:c8:80:0c:14:f0:38:7e:c0:9b:d0:98:
         c5:6c:8b:c2:53:ec:fa:f2:52:f9:5b:39:14:eb:99:5a:36:ff:
         31:05:30:16:2d:73:98:1d:19:11:48:ad:70:cb:29:83:96:62:
         86:91:ea:80:9e:49:40:03:e8:a0:1d:31:7d:18:ae:e2:7d:32:
         4c:05:ce:d4:2b:c9:26:ec:66:49:06:21:12:6c:f8:2f:a0:fb:
         fa:eb:c1:f6:1b:ad:1d:cb:69:9c:52:24:37:a0:f6:cb:2f:23:
         6a:57:d9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 01:53:01 2026 by rpki-client