Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32362e302f32332d3233203d3e20323633323736.roa
File:                     3139312e3234332e32362e302f32332d3233203d3e20323633323736.roa (raw, json)
Hash identifier:          0Pb2Sg5fsO41X0zmi+pE6vCrg6EnaxuuDN0PDZ/Ne/w=
Subject key identifier:   1E:3F:B9:9C:B5:8D:2C:DE:97:99:2A:9F:21:F4:6B:96:0D:4A:10:95
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       57DD95D803A2422A6B4B562547430B3E4B99EEF0
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32362e302f32332d3233203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:18 +0000
ROA not before:           Fri 10 Jul 2026 14:24:18 +0000
ROA not after:            Fri 09 Jul 2027 14:29:18 +0000
asID:                     263276
IP address blocks:        191.243.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:95:d8:03:a2:42:2a:6b:4b:56:25:47:43:0b:3e:4b:99:ee:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:18 2026 GMT
            Not After : Jul  9 14:29:18 2027 GMT
        Subject: CN=1E3FB99CB58D2CDE97992A9F21F46B960D4A1095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:a6:58:d6:bf:f0:fb:6e:01:59:8e:44:93:
                    98:5a:af:2a:62:a0:ba:7f:28:12:fe:b9:40:47:7d:
                    d4:f7:b1:e6:0e:a0:ac:41:14:c3:3a:09:68:88:8d:
                    a3:b8:ac:83:87:dd:fd:44:0e:12:6d:47:fe:e1:32:
                    bf:5c:46:ca:ef:49:83:70:91:de:77:70:a2:de:36:
                    0a:bd:f1:e4:14:e8:9e:e1:8f:66:51:7e:38:a2:ac:
                    4f:cd:cc:22:31:79:93:9e:d9:c7:63:a2:65:9a:7f:
                    78:35:ba:f9:4b:7b:6c:8e:dd:e9:f6:1c:c0:b1:79:
                    df:27:51:f4:8b:7d:c0:2d:84:2e:5f:cd:79:1b:04:
                    44:c4:88:ad:22:b3:62:d1:c5:27:d2:d1:56:be:d8:
                    2c:a2:77:54:1d:53:a4:ed:ce:b7:cb:ef:c4:2b:5a:
                    87:e2:ed:70:af:0c:9d:55:48:54:ff:63:12:74:d2:
                    7a:4d:23:23:76:68:16:25:37:2c:e7:4a:9b:38:29:
                    cb:9c:c0:24:93:9e:04:43:81:35:b2:9f:60:fe:9a:
                    7f:a4:af:a2:ac:40:7d:6a:90:e8:9b:2d:57:42:88:
                    aa:78:46:22:ce:c7:0b:3d:a5:21:c4:55:34:25:b3:
                    3a:2a:92:c1:65:71:5f:2d:5a:92:b6:7b:65:36:c2:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3F:B9:9C:B5:8D:2C:DE:97:99:2A:9F:21:F4:6B:96:0D:4A:10:95
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32362e302f32332d3233203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:3c:6c:8b:58:68:1b:e8:c2:88:20:3f:15:6d:1a:16:94:
         a9:9f:6a:50:85:d6:ed:2a:c7:19:5d:72:99:0d:05:7d:05:e7:
         a1:9a:6d:67:80:62:80:e1:1b:8e:02:10:db:57:7a:ca:8b:d6:
         95:17:80:80:18:74:09:ee:96:6f:17:38:77:8f:9a:96:3d:f2:
         33:ef:52:d0:4e:70:16:c3:97:06:ad:df:e8:7b:28:48:6e:7f:
         1f:83:b8:7d:f9:23:34:0e:63:ca:a0:51:bc:1d:ae:f9:d1:1a:
         53:78:67:f7:b2:41:f9:25:52:fd:28:99:b9:01:68:72:1f:9a:
         3a:bd:64:32:eb:fb:f9:68:0a:82:48:30:69:f1:55:dc:17:37:
         79:21:37:89:b3:0c:01:1b:09:26:49:6b:8f:b8:b3:b5:94:e4:
         b8:0e:5a:99:3f:2e:19:7e:37:c6:65:cb:c9:ca:90:00:e3:7a:
         f0:4c:1b:03:18:12:d8:87:07:ac:5f:36:64:17:38:ee:a2:19:
         4f:f1:49:b8:98:0c:0b:47:d6:e9:e2:e3:32:33:6d:fa:ae:66:
         14:6a:c5:03:04:38:d7:bc:80:d3:80:3d:74:ab:8e:51:8b:8b:
         d6:17:5c:79:d1:08:b1:5e:15:bc:05:83:0f:5a:42:e3:72:df:
         67:3c:f5:de
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV92V2AOiQiprS1YlR0MLPkuZ7vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwOTlEODk0MTI2QUM0Q0FEOTQxMUU0MzA4RUU2ODlB
NzY3NjA5QTAeFw0yNjA3MTAxNDI0MThaFw0yNzA3MDkxNDI5MThaMDMxMTAvBgNV
BAMTKDFFM0ZCOTlDQjU4RDJDREU5Nzk5MkE5RjIxRjQ2Qjk2MEQ0QTEwOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMaZY1r/w+24BWY5Ek5harypi
oLp/KBL+uUBHfdT3seYOoKxBFMM6CWiIjaO4rIOH3f1EDhJtR/7hMr9cRsrvSYNw
kd53cKLeNgq98eQU6J7hj2ZRfjiirE/NzCIxeZOe2cdjomWaf3g1uvlLe2yO3en2
HMCxed8nUfSLfcAthC5fzXkbBETEiK0is2LRxSfS0Va+2Cyid1QdU6TtzrfL78Qr
Wofi7XCvDJ1VSFT/YxJ00npNIyN2aBYlNyznSps4KcucwCSTngRDgTWyn2D+mn+k
r6KsQH1qkOibLVdCiKp4RiLOxws9pSHEVTQlszoqksFlcV8tWpK2e2U2wnkhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHj+5nLWNLN6XmSqfIfRrlg1KEJUwHwYDVR0j
BBgwFoAUsQmdiUEmrEytlBHkMI7miadnYJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZBcFdyY2pHV1k0Q215YThydXlNQnFvTm1FYWl1VjYxZmpLbjFjanVz
ZWkvMC9CMTA5OUQ4OTQxMjZBQzRDQUQ5NDExRTQzMDhFRTY4OUE3Njc2MDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMDk5RDg5NDEyNkFDNENB
RDk0MTFFNDMwOEVFNjg5QTc2NzYwOUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2QXBXcmNqR1dZNENteWE4cnV5TUJxb05tRWFpdVY2MWZqS24xY2p1c2VpLzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/8xowDQYJKoZIhvcNAQELBQADggEBAGpyPGyL
WGgb6MKIID8VbRoWlKmfalCF1u0qxxldcpkNBX0F56GabWeAYoDhG44CENtXesqL
1pUXgIAYdAnulm8XOHePmpY98jPvUtBOcBbDlwat3+h7KEhufx+DuH35IzQOY8qg
UbwdrvnRGlN4Z/eyQfklUv0ombkBaHIfmjq9ZDLr+/loCoJIMGnxVdwXN3khN4mz
DAEbCSZJa4+4s7WU5LgOWpk/Lhl+N8Zly8nKkADjevBMGwMYEtiHB6xfNmQXOO6i
GU/xSbiYDAtH1uni4zIzbfquZhRqxQMEONe8gNOAPXSrjlGLi9YXXHnRCLFeFbwF
gw9aQuNy32c89d4=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:29:12 2026 by rpki-client