Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32342e302f32312d3231203d3e20323633323736.roa
File:                     3139312e3234332e32342e302f32312d3231203d3e20323633323736.roa (raw, json)
Hash identifier:          pZ9kmzHJPlaLyYTAbxdeUghFwepvkCGriCFi26xZ6R0=
Subject key identifier:   0F:0C:2F:9D:F2:89:DE:52:E2:3C:EA:18:95:41:43:7C:2C:58:02:ED
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       4D7803CF449B28C9CB2F9D597EAECFD3E9AFAF64
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32342e302f32312d3231203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:17 +0000
ROA not before:           Fri 10 Jul 2026 14:24:17 +0000
ROA not after:            Fri 09 Jul 2027 14:29:17 +0000
asID:                     263276
IP address blocks:        191.243.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:78:03:cf:44:9b:28:c9:cb:2f:9d:59:7e:ae:cf:d3:e9:af:af:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:17 2026 GMT
            Not After : Jul  9 14:29:17 2027 GMT
        Subject: CN=0F0C2F9DF289DE52E23CEA189541437C2C5802ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:d8:05:58:79:c8:10:24:2a:98:5b:cb:74:
                    90:ef:f0:f2:a1:f1:c5:52:f6:d2:5b:00:d6:a0:29:
                    f3:ec:e5:4c:01:7e:5f:a3:c8:46:58:1f:ea:60:c4:
                    8b:80:44:75:0a:00:2b:21:3f:2c:06:f6:b5:4c:50:
                    67:98:1b:aa:7f:92:61:ab:35:d3:2c:00:93:b6:64:
                    7b:2a:c4:1b:17:da:31:71:88:b0:ba:49:cb:6a:67:
                    74:f4:95:0b:46:89:d4:dd:3a:f1:15:cd:d6:22:f2:
                    8e:f2:6f:ae:22:ce:ec:6a:c1:cb:38:c6:57:73:f8:
                    a7:2d:56:35:82:20:af:c8:33:68:ad:5d:7e:57:18:
                    b8:40:86:69:74:f6:5a:49:85:fa:d7:65:46:aa:08:
                    ed:61:9d:d2:b5:8a:13:b7:1f:d0:f8:a7:ff:ed:74:
                    cf:1f:6f:6c:c5:e2:08:18:3a:07:4e:b3:89:6c:04:
                    84:8d:7f:8d:f0:17:3b:f9:81:fe:f8:b1:2d:40:2a:
                    4c:d3:95:65:a1:42:fc:5e:eb:f3:31:9e:5a:90:38:
                    7a:53:09:96:d5:36:44:16:8f:66:0f:d5:4a:d5:58:
                    9a:27:d0:28:81:1e:85:b8:fe:fb:8d:59:51:50:80:
                    a2:3f:40:12:e6:b1:dd:75:16:0c:af:14:2d:58:4d:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0C:2F:9D:F2:89:DE:52:E2:3C:EA:18:95:41:43:7C:2C:58:02:ED
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32342e302f32312d3231203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:36:e8:5f:dd:57:14:64:3a:ab:15:36:b9:45:2c:d1:a6:
         cc:e2:c4:0f:55:76:6c:d4:0f:45:7f:fc:50:e3:3e:17:c8:66:
         7c:07:67:9e:79:6e:66:c3:fc:1f:82:be:ce:78:5c:90:0f:92:
         8a:ec:b7:b6:17:91:c9:4d:d5:43:4a:31:53:b0:fe:37:5d:b5:
         38:b1:59:1a:27:af:bb:f9:cd:e2:85:80:e5:ce:60:ac:61:ce:
         15:60:05:b5:a1:63:56:cf:3d:6b:ef:93:da:27:aa:dd:96:0e:
         5f:86:e6:c3:ab:2f:b5:64:a4:2e:a3:c0:1c:68:50:b4:aa:0e:
         8c:31:f0:42:6e:62:c3:80:ad:e1:b4:6e:cf:df:b3:64:35:b9:
         33:dd:8e:9d:b4:ea:7c:db:eb:43:1c:36:1f:f3:f5:c6:8b:8f:
         8e:cd:3d:04:22:21:0a:a3:ed:7a:ca:bf:0c:5f:60:2e:84:b5:
         33:57:0d:ca:55:81:8e:9e:50:ff:7f:7d:f5:f2:5b:02:a9:e1:
         9d:91:d1:18:43:01:a2:c4:44:03:fb:09:6f:20:10:18:ce:cf:
         fa:3b:d9:75:f5:09:2e:2b:67:4f:55:4a:c7:bf:d1:fb:13:af:
         3b:4a:bb:61:7a:2c:bb:f3:b3:b8:62:12:27:90:ea:e0:8f:e8:
         6e:d0:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:29 2026 by rpki-client