Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3138372e3132312e3233322e302f32322d3332203d3e20323634313139.roa
File:                     3138372e3132312e3233322e302f32322d3332203d3e20323634313139.roa (raw, json)
Hash identifier:          YQDhuz4l06LZjYO6Ehwgz+5JuVyHgIcUO816vWXGlDE=
Subject key identifier:   2B:F3:E1:9C:CC:B0:30:A2:2E:66:74:8C:BB:12:89:C8:5B:86:AE:9A
Certificate issuer:       /CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1
Certificate serial:       4C145553326D8A70073E329157F27E46B4142F51
Authority key identifier: FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3138372e3132312e3233322e302f32322d3332203d3e20323634313139.roa
Signing time:             Thu 16 Jul 2026 18:03:44 +0000
ROA not before:           Thu 16 Jul 2026 17:58:44 +0000
ROA not after:            Thu 15 Jul 2027 18:03:44 +0000
asID:                     264119
IP address blocks:        187.121.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:14:55:53:32:6d:8a:70:07:3e:32:91:57:f2:7e:46:b4:14:2f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF491384C83663A7F928ABDCFC348DF90A2CEFE1
        Validity
            Not Before: Jul 16 17:58:44 2026 GMT
            Not After : Jul 15 18:03:44 2027 GMT
        Subject: CN=2BF3E19CCCB030A22E66748CBB1289C85B86AE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:12:81:cc:60:5c:81:7f:5d:06:8b:4c:da:
                    a7:33:80:96:e2:a2:8d:58:84:f1:60:53:62:e3:e0:
                    f0:14:24:d0:83:d6:cb:3b:d7:0a:82:aa:68:87:77:
                    35:3d:69:a9:b4:ee:8b:34:b7:9a:e4:62:a7:0c:6d:
                    0c:6f:4d:80:f5:30:bd:bf:ba:df:1c:38:c7:df:e5:
                    4b:18:7c:1a:51:5d:6d:60:53:a0:91:86:7e:fe:1a:
                    b4:e5:c3:eb:2a:49:18:eb:0b:38:59:ba:fd:04:47:
                    84:f4:ab:e9:7e:66:23:e6:a2:4d:97:b1:1e:e5:60:
                    5a:3f:80:ce:5f:89:24:be:8a:1f:31:e5:1b:3a:1b:
                    6b:cf:34:47:48:d1:7f:d4:f0:7a:b0:f2:97:93:12:
                    2c:bc:5c:d8:b9:83:57:c5:f9:50:91:5b:dc:fc:aa:
                    6d:ac:9f:bc:a3:7b:79:0c:bb:e6:24:2d:6f:e0:5a:
                    80:58:7e:e8:99:a3:93:af:fb:d6:a6:82:c6:39:b9:
                    29:f7:66:82:bd:53:6e:25:fe:57:98:53:15:17:6c:
                    3f:ce:1a:d3:3b:41:19:e5:dd:4a:07:86:8e:2a:89:
                    2e:12:4f:c1:0a:b7:74:11:92:16:fb:b9:12:2e:e8:
                    12:aa:51:46:75:a1:38:8c:8c:b7:5b:3c:d7:d4:49:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:E1:9C:CC:B0:30:A2:2E:66:74:8C:BB:12:89:C8:5B:86:AE:9A
            X509v3 Authority Key Identifier:
                keyid:FF:49:13:84:C8:36:63:A7:F9:28:AB:DC:FC:34:8D:F9:0A:2C:EF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF491384C83663A7F928ABDCFC348DF90A2CEFE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3138372e3132312e3233322e302f32322d3332203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:ac:31:e2:9b:4e:a0:7c:50:d9:3a:05:b5:cb:f9:d8:04:
         42:84:ea:65:c3:29:9c:f7:81:60:0f:9d:62:9a:9a:b0:ef:ef:
         1c:ad:ed:f4:31:50:61:e3:6e:00:d6:94:3b:ee:92:88:fa:7a:
         a4:5d:13:4d:19:4c:b9:62:26:1f:66:f7:66:10:ca:f0:6c:af:
         a3:4e:51:7a:4a:85:ee:90:ad:33:d9:b8:b8:01:9f:c9:5f:0d:
         b6:77:c9:4d:dd:62:05:e6:13:71:92:c6:1a:1f:37:b8:a7:a1:
         53:19:af:8a:8e:65:41:3a:f2:7b:0b:68:38:dd:5c:42:6f:db:
         c1:47:af:d1:9c:26:e7:8e:cf:65:23:ca:8d:14:4f:2a:ea:e8:
         72:39:43:3b:57:af:18:b4:4f:ff:7e:c7:38:ed:b1:e9:1a:40:
         69:cf:50:c1:b0:37:68:b9:19:f5:b8:55:b4:1a:ed:bf:8f:e8:
         ca:f4:11:94:e3:a8:56:90:b7:75:9d:dd:d9:31:46:c4:40:fc:
         55:1b:24:bf:a6:ee:81:01:ec:cf:72:21:f6:0e:cf:10:2f:35:
         57:40:df:91:ad:e2:31:0d:a0:ab:18:27:d3:6f:2a:1b:c6:d0:
         f6:ae:2b:20:de:9c:92:44:44:2d:c8:82:ac:ff:a0:ba:c8:f1:
         94:55:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:09:51 2026 by rpki-client