Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
File:                     3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          2Q/g06JOTRi/BVEDB1+9BVi2gUl7w2kqOBlYCZ6GTp4=
Subject key identifier:   61:28:C5:DF:F4:30:B2:D6:18:E6:B3:C1:FA:46:E4:13:4B:63:B7:B1
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       654A5934D60714DD7BA61D62B879E9575BD90C9F
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:21:39 +0000
ROA not before:           Tue 30 Jun 2026 14:16:39 +0000
ROA not after:            Tue 29 Jun 2027 14:21:39 +0000
asID:                     262417
IP address blocks:        168.90.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4a:59:34:d6:07:14:dd:7b:a6:1d:62:b8:79:e9:57:5b:d9:0c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:16:39 2026 GMT
            Not After : Jun 29 14:21:39 2027 GMT
        Subject: CN=6128C5DFF430B2D618E6B3C1FA46E4134B63B7B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:c7:6d:79:8d:c9:d4:21:42:69:a4:d5:a9:
                    34:15:fd:63:93:e9:0e:f6:af:ee:c3:1a:75:a4:b8:
                    e7:8f:c7:04:7b:39:40:bc:1a:d8:b4:d1:a5:53:9a:
                    fa:17:74:ad:a5:01:f6:ef:ac:ec:81:df:7e:5c:02:
                    8c:e6:50:8a:fc:91:d6:8b:4d:9a:22:81:5a:f0:27:
                    33:b1:19:74:dc:27:c6:23:97:33:bf:89:43:da:31:
                    b7:93:bd:21:f5:db:95:ef:a8:6b:1f:36:a8:98:7d:
                    d9:fe:ca:d8:aa:1c:62:c0:bc:ad:92:0b:b3:72:77:
                    63:8f:fa:57:34:d3:48:75:d3:a9:e9:76:62:8d:3e:
                    b5:22:43:35:be:57:25:26:be:ee:39:68:f2:6c:ac:
                    60:4e:6e:c8:b0:fd:84:f8:2b:f3:60:a0:64:08:ad:
                    fb:80:c0:04:3c:c2:d5:f5:0f:6e:69:c1:84:8b:b9:
                    5f:5c:3b:6a:b2:8f:7c:4e:62:63:a8:f8:7d:a1:8a:
                    65:71:ab:c7:6f:fc:06:ca:bb:10:e3:79:df:c0:22:
                    02:36:06:f8:d8:45:51:a4:30:ed:ba:73:61:25:97:
                    12:6b:ba:b4:80:63:6b:14:02:e4:4d:22:89:5b:c6:
                    aa:aa:d5:06:be:39:ce:dc:29:36:90:c1:d3:5d:82:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:C5:DF:F4:30:B2:D6:18:E6:B3:C1:FA:46:E4:13:4B:63:B7:B1
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e8:6c:8b:07:5a:d8:74:76:f6:69:22:12:f7:10:9b:26:de:
         9d:25:34:9f:5c:16:92:61:22:af:e6:d5:9d:7a:a6:b9:19:90:
         3d:b5:fa:ef:6e:18:7f:96:da:18:b0:87:5d:7a:7f:55:cd:c6:
         0f:e2:54:05:98:fe:b0:0a:03:31:9a:81:ae:04:64:d9:e3:79:
         5b:dc:87:19:75:53:53:df:c4:d1:be:bf:b9:f4:66:10:6f:2e:
         96:41:18:3b:a0:0f:94:80:6b:60:68:78:dd:ce:5b:a6:ff:dd:
         65:6a:ea:e2:09:44:d2:28:47:83:26:09:8c:37:e9:d1:2e:b3:
         8c:0d:18:bf:30:fe:b1:1a:49:1c:c3:e1:1d:57:31:6a:c4:0c:
         e1:76:04:76:3a:62:95:12:08:ae:ef:47:65:44:30:88:1f:29:
         56:08:87:4c:1f:07:6f:1e:c4:a3:b6:05:99:b7:1f:e2:c8:f2:
         4c:50:29:7b:2d:31:29:c5:f4:9d:80:22:1b:41:83:9f:37:69:
         b0:ca:53:c2:b3:32:df:f7:32:cf:40:c5:95:a8:41:96:a7:2e:
         69:5e:13:14:95:f4:e0:6e:05:af:a6:0b:37:9a:e7:3e:c5:f0:
         84:cd:b7:0f:92:22:0e:2b:0f:87:c3:48:5f:c7:78:68:62:1a:
         19:8d:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:01 2026 by rpki-client