Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/3138392e38392e3233352e302f32342d3332203d3e20323734363933.roa
File:                     3138392e38392e3233352e302f32342d3332203d3e20323734363933.roa (raw, json)
Hash identifier:          7kKWF5SF1gpPiZJmYuvUgA9B4QUsPBeVSmYRHqPxWKY=
Subject key identifier:   73:87:8C:47:FF:D1:EB:14:55:5B:DE:57:B1:4D:B6:4F:7A:E4:CA:A9
Certificate issuer:       /CN=4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4
Certificate serial:       6AAA6CA6D385A691DC9C5D8149470E44495A706C
Authority key identifier: 4C:E9:E7:F7:AC:19:70:7A:6A:10:B2:51:C6:CD:06:F8:39:82:EB:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/3138392e38392e3233352e302f32342d3332203d3e20323734363933.roa
Signing time:             Sat 18 Jul 2026 00:36:19 +0000
ROA not before:           Sat 18 Jul 2026 00:31:19 +0000
ROA not after:            Sat 17 Jul 2027 00:36:19 +0000
asID:                     274693
IP address blocks:        189.89.235.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:aa:6c:a6:d3:85:a6:91:dc:9c:5d:81:49:47:0e:44:49:5a:70:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4
        Validity
            Not Before: Jul 18 00:31:19 2026 GMT
            Not After : Jul 17 00:36:19 2027 GMT
        Subject: CN=73878C47FFD1EB14555BDE57B14DB64F7AE4CAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:70:b1:16:f2:9c:42:2e:ac:3e:48:31:d2:
                    ef:25:4d:03:7f:51:46:8c:5f:55:78:4c:1f:50:3e:
                    c5:42:fb:22:9e:b9:a6:3c:0c:73:3b:b8:9e:49:67:
                    6c:8c:79:e0:6f:24:b1:d2:cb:ad:f6:f5:a9:97:99:
                    1c:4b:2b:07:3c:c5:fa:99:8d:7e:74:10:91:f6:a5:
                    b7:19:05:f3:b9:1a:44:d8:e1:44:7b:77:8a:a6:71:
                    9f:50:d1:a3:80:e4:16:0a:31:fc:4e:20:c3:95:4f:
                    6e:65:a4:8b:0e:9a:56:d8:ff:44:77:71:c8:75:3a:
                    72:47:61:f0:88:b2:44:ae:c8:6e:f6:ed:be:96:e4:
                    80:c4:5d:05:15:4b:d9:4d:c1:1b:85:31:10:7e:42:
                    72:62:27:93:4c:2d:1a:47:23:cd:8c:8e:fd:4f:ca:
                    7c:e5:4f:0e:ad:e8:a3:4e:b2:6a:a8:a2:00:19:18:
                    1d:1b:d9:e8:22:31:a1:9a:b3:54:ce:b9:2c:cf:ff:
                    5f:ff:b5:24:f6:da:4d:a0:b6:ce:e8:20:d7:fd:04:
                    e7:54:f3:57:c1:8d:da:66:b3:91:d0:ef:de:c6:31:
                    41:e0:73:78:5d:08:92:2b:1a:a3:35:32:73:33:80:
                    42:85:9c:5f:1a:3e:4d:53:30:be:41:ae:2e:a7:4a:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:8C:47:FF:D1:EB:14:55:5B:DE:57:B1:4D:B6:4F:7A:E4:CA:A9
            X509v3 Authority Key Identifier:
                keyid:4C:E9:E7:F7:AC:19:70:7A:6A:10:B2:51:C6:CD:06:F8:39:82:EB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE9E7F7AC19707A6A10B251C6CD06F83982EBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/3138392e38392e3233352e302f32342d3332203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:08:fd:06:72:e6:48:e4:91:bb:c7:d4:be:18:54:84:33:96:
         d3:7e:c7:62:3f:18:4e:88:82:9d:8c:53:17:db:fe:bf:44:37:
         2d:dd:da:91:7c:14:bf:15:4a:3f:84:ec:1b:82:5c:73:f1:99:
         d2:5c:ad:e0:6a:9a:36:4f:81:28:7f:a2:0b:5c:82:a6:d3:6e:
         c3:54:94:d6:e5:40:e1:fd:cd:6b:49:c1:68:ef:2a:ab:75:a6:
         d7:b1:3b:1c:70:6e:b5:e4:dc:c9:b8:18:25:eb:99:1c:0b:34:
         ee:5e:9b:aa:14:05:e5:a3:2e:6b:3b:44:5b:9b:ef:cb:c3:60:
         1f:0a:25:34:f7:f4:7c:34:59:35:3e:cb:46:d5:a3:8b:46:e1:
         f9:ce:df:43:25:1a:91:d9:f7:9c:1b:4b:c1:9f:85:fb:90:53:
         3a:4c:31:b2:66:d9:57:28:eb:fd:96:f1:2a:ef:74:bf:1b:37:
         e2:10:ea:3d:82:e4:04:72:28:8b:6a:00:3c:ec:45:fc:f4:a3:
         3d:02:dd:8c:1a:69:68:a8:49:de:c9:63:fe:d6:e9:7f:0a:6a:
         44:4b:0b:d4:54:08:7d:b4:9d:02:73:63:fb:d8:72:d9:20:d2:
         17:d2:b8:47:82:8e:01:8e:2a:2b:2a:be:f0:ba:fe:2b:85:36:
         9e:9c:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:16 2026 by rpki-client