Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa
File:                     3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa (raw, json)
Hash identifier:          0gAVjyoHdXoeZzbdhShygce+3deNhb72kcjHsYyQQ7U=
Subject key identifier:   94:44:9D:6B:3A:AA:76:9A:81:B4:11:C2:FD:96:1A:3A:60:24:7F:59
Certificate issuer:       /CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
Certificate serial:       6D094129841747C1E802544DDDA7425E03D8B687
Authority key identifier: 8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa
Signing time:             Sat 27 Jun 2026 03:00:02 +0000
ROA not before:           Sat 27 Jun 2026 02:55:02 +0000
ROA not after:            Sat 26 Jun 2027 03:00:02 +0000
asID:                     270333
IP address blocks:        189.113.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl
                          rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:09:41:29:84:17:47:c1:e8:02:54:4d:dd:a7:42:5e:03:d8:b6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036
        Validity
            Not Before: Jun 27 02:55:02 2026 GMT
            Not After : Jun 26 03:00:02 2027 GMT
        Subject: CN=94449D6B3AAA769A81B411C2FD961A3A60247F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:4a:01:aa:3b:05:5d:32:46:6b:51:7f:21:
                    35:01:9d:3b:63:84:09:4f:83:dc:f6:54:95:ce:32:
                    24:c8:6e:b8:ae:b9:57:9a:bc:42:39:bc:f7:bc:70:
                    5a:14:81:32:85:5b:80:34:eb:c2:bc:4e:f4:b0:17:
                    2c:c1:e7:1a:36:ea:77:d6:7d:a4:93:0b:ba:63:31:
                    f2:05:96:e3:ad:3a:b3:d9:b0:d8:5b:f1:65:7b:84:
                    64:5e:b9:22:8e:d7:5e:b8:93:0d:ff:c9:55:2d:a4:
                    4b:b6:5a:8e:6d:0b:42:b8:6d:ba:86:32:1b:21:eb:
                    30:cc:0f:84:fc:81:d2:e1:70:81:b7:ce:cc:6a:b5:
                    a3:b8:a1:f9:75:57:dd:22:23:aa:47:8d:22:e7:a3:
                    30:39:53:cc:cc:61:3f:8a:f0:5c:3b:dd:2f:12:06:
                    8f:8e:34:6a:9f:cb:9d:69:13:11:d7:94:ff:8d:ea:
                    40:70:cf:37:a1:6c:32:9d:a2:00:a9:5d:b2:59:57:
                    6b:fa:a3:7e:04:05:1d:b5:bd:a5:f7:f9:a1:77:73:
                    2b:6e:28:cd:82:03:30:3a:6f:cd:a6:17:55:12:a8:
                    3b:bb:aa:5d:e9:e9:7d:f1:4d:d6:51:3a:65:42:5c:
                    82:e1:bc:6b:c8:09:c2:77:6a:32:eb:d6:6c:cc:6f:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:9D:6B:3A:AA:76:9A:81:B4:11:C2:FD:96:1A:3A:60:24:7F:59
            X509v3 Authority Key Identifier:
                keyid:8E:42:BB:11:AC:6A:73:0E:A1:2F:BD:1A:B0:5B:B6:7B:0C:4F:20:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E42BB11AC6A730EA12FBD1AB05BB67B0C4F2036.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G7TSRizDSzn3UiNP6vTB5FLU4PV7ZArZtR9wWpo4GMjX/0/3138392e3131332e3137362e302f32322d3332203d3e20323730333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:63:74:4f:f7:cb:5d:a4:82:07:d5:44:15:97:a0:1f:f6:7c:
         bb:bd:a9:ee:fd:dd:25:f8:18:c1:25:ac:7c:15:65:46:a2:8c:
         ca:8a:15:c3:82:16:00:4d:ad:85:42:35:0e:3d:0d:a7:53:59:
         1d:92:db:bd:97:67:65:2e:b2:cf:64:e5:62:11:05:00:4a:c7:
         98:21:6c:e3:75:aa:86:5f:95:43:07:f9:b1:d5:11:6b:48:b6:
         db:8f:74:d9:0e:00:fb:c3:29:12:33:8f:e6:78:fe:1d:11:a1:
         94:60:09:51:5d:9b:94:37:2b:e3:e5:cc:0c:a8:e2:91:80:fa:
         4a:f5:18:51:87:f6:a4:86:07:ec:4b:56:9a:10:d7:16:00:fd:
         f2:9b:d3:c1:03:e1:fb:a8:45:08:34:46:4e:40:11:b1:39:15:
         28:f3:88:04:b4:42:eb:a7:d8:85:6f:95:0d:b8:e6:09:6b:45:
         16:92:5e:76:a4:eb:58:33:d1:5f:f7:17:9a:95:5d:03:ce:4b:
         78:b4:75:fc:24:e5:49:b6:94:a3:d7:83:79:3d:ae:16:5b:bf:
         f4:49:89:51:2c:71:cb:a3:f7:dc:75:0a:ae:f7:dc:1b:e0:9d:
         38:8a:2f:2a:91:d4:d3:64:69:f8:ac:d2:9a:1d:2c:2c:e1:78:
         76:4c:a6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:49:28 2026 by rpki-client