Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32382e302f32322d3232203d3e20323633323736.roa
File:                     3139312e3234332e32382e302f32322d3232203d3e20323633323736.roa (raw, json)
Hash identifier:          FQldE1fwm0+ftSHK8NOqtirZ3E+kxJ/bYOfVqx4PJpo=
Subject key identifier:   EA:31:AA:A3:E7:6C:12:73:77:37:F6:FD:65:1B:C9:82:8E:2E:BE:CB
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       2D77A92FDAD209B1EF73F117F3364487220B6BFF
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32382e302f32322d3232203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:16 +0000
ROA not before:           Fri 10 Jul 2026 14:24:16 +0000
ROA not after:            Fri 09 Jul 2027 14:29:16 +0000
asID:                     263276
IP address blocks:        191.243.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:a9:2f:da:d2:09:b1:ef:73:f1:17:f3:36:44:87:22:0b:6b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:16 2026 GMT
            Not After : Jul  9 14:29:16 2027 GMT
        Subject: CN=EA31AAA3E76C12737737F6FD651BC9828E2EBECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:17:ec:74:56:98:de:72:11:6c:27:4f:08:
                    81:48:5c:43:94:10:b0:38:c7:8b:90:59:87:27:c6:
                    da:fc:82:bb:c2:fa:95:5a:35:77:08:44:f8:59:ff:
                    5d:71:04:a4:2c:40:c3:de:81:7f:6f:90:4b:9a:39:
                    f8:ca:e1:76:90:22:fd:b2:51:fd:49:c5:29:d4:a6:
                    71:7e:02:85:cd:e6:02:a4:a4:da:c5:df:2f:b7:07:
                    1f:92:70:7b:3b:02:21:7d:83:be:dd:91:0d:0a:9d:
                    9e:1e:27:86:08:53:bb:0b:43:43:73:06:80:34:9c:
                    05:20:ae:d6:17:7e:35:f8:2e:7e:10:77:69:32:0d:
                    7e:0c:cc:7e:a9:35:20:03:92:59:1c:81:03:82:71:
                    59:33:6c:4b:61:97:95:80:bc:a3:a4:d6:7f:07:24:
                    5f:d1:0d:d4:81:5b:cc:ec:55:42:06:a0:fb:6f:78:
                    38:c3:d4:e5:21:9b:a9:40:88:bf:dd:7f:0d:6d:92:
                    43:e0:9b:0f:a3:46:d7:c0:7e:83:b9:81:e9:bc:12:
                    11:c6:d5:63:1c:45:4c:34:28:69:b6:6c:1e:d4:b3:
                    ce:03:c2:09:d7:1c:4f:59:f6:dd:8e:0b:20:9e:f5:
                    89:46:b3:6d:90:f1:a7:e3:74:b6:21:75:45:a6:86:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:AA:A3:E7:6C:12:73:77:37:F6:FD:65:1B:C9:82:8E:2E:BE:CB
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3139312e3234332e32382e302f32322d3232203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:0a:99:94:a9:b6:79:9c:a8:b2:2c:4b:c4:3f:b8:93:fd:
         cd:f3:67:6a:86:a6:19:8c:71:1b:d4:ca:af:7b:e4:c4:33:d7:
         e4:25:c6:a5:3f:f8:d1:85:1c:d7:c0:4a:a2:75:3c:49:23:2a:
         fb:6f:3f:01:91:64:61:db:e0:a5:46:59:9e:6f:4a:ec:5e:3a:
         9f:3b:24:20:5a:bb:11:46:90:9f:71:8b:b0:9d:18:57:fd:a0:
         40:cd:3b:45:b7:29:03:df:4c:1e:eb:a4:83:ad:ab:fc:d3:b8:
         40:a9:42:d5:5f:5f:4c:fc:b8:5a:9d:95:6d:f2:aa:dd:75:27:
         52:3e:2f:9c:87:21:1e:a7:39:81:01:ff:89:ad:96:9b:1e:bc:
         76:7f:21:f8:4e:d3:f1:76:e9:34:5f:0e:08:9b:8e:6d:80:0e:
         41:30:cd:83:31:50:73:c3:2c:fd:bf:46:e6:85:0f:42:5b:af:
         aa:cc:d1:49:8e:fd:d9:f7:b5:3e:e1:77:61:7e:d4:b8:ef:06:
         9a:df:6e:2d:c7:fd:c8:52:07:c8:1b:0a:26:89:bf:de:dd:1f:
         7d:42:8c:78:ce:f9:d0:ab:97:4e:b9:a3:56:28:c9:ed:ec:43:
         f2:44:a2:af:1e:c6:83:02:84:be:02:d0:ec:fc:08:67:5a:87:
         44:48:5d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:30:36 2026 by rpki-client