Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa
File:                     3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa (raw, json)
Hash identifier:          +ofBSaFjksYoFmqDhiPdgz7zjSxhH4q1BBCNS7SNk9E=
Subject key identifier:   85:5C:11:4F:14:85:9F:C2:E8:E2:29:0F:53:A9:1B:D5:04:EB:F7:FB
Certificate issuer:       /CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
Certificate serial:       331E8F728974430B7A60B5A67A1073653F74B6D4
Authority key identifier: 23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa
Signing time:             Fri 24 Jul 2026 14:33:16 +0000
ROA not before:           Fri 24 Jul 2026 14:28:16 +0000
ROA not after:            Fri 23 Jul 2027 14:33:16 +0000
asID:                     263359
IP address blocks:        191.37.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl
                          rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1e:8f:72:89:74:43:0b:7a:60:b5:a6:7a:10:73:65:3f:74:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23C8AF4A82E7919DA5058B28DC35790A8DA25BE0
        Validity
            Not Before: Jul 24 14:28:16 2026 GMT
            Not After : Jul 23 14:33:16 2027 GMT
        Subject: CN=855C114F14859FC2E8E2290F53A91BD504EBF7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:5f:5a:59:f2:f0:6d:48:3b:3c:2b:66:cc:
                    ec:86:6b:c0:7e:60:4c:4e:7c:55:fb:56:5a:2e:44:
                    7f:71:2f:a6:43:3a:05:53:ad:55:18:f8:8e:f5:1c:
                    d1:21:15:ef:c5:d9:e9:b5:90:69:13:11:b8:7c:3f:
                    42:6d:2e:32:9a:69:07:6b:8a:4f:93:57:81:12:f6:
                    bf:7b:bc:1b:01:bb:5c:05:0b:61:b0:19:33:d8:0e:
                    74:c1:d8:bc:16:48:42:93:48:f2:b1:bd:12:35:21:
                    dd:49:47:54:93:3d:30:e1:ed:92:76:5c:1f:14:02:
                    8f:e9:1d:b9:16:66:35:d4:89:e0:71:3c:9c:8e:a3:
                    8d:65:65:6c:30:2b:b3:fe:f6:b6:2d:15:03:e1:e6:
                    ba:70:db:b8:8c:96:09:3a:8b:75:27:9d:d4:29:5a:
                    fb:b3:5b:3b:04:fc:5c:02:fd:1e:61:31:a4:39:18:
                    8b:4d:6d:2a:8b:78:08:13:96:29:a3:13:b2:66:eb:
                    90:63:db:8d:fa:17:3e:87:64:12:a6:84:6f:4e:68:
                    98:f7:9c:4f:1a:2d:a9:64:19:7e:55:47:bc:85:c9:
                    91:e4:ad:ad:67:b1:11:49:5b:bf:31:e7:7e:7c:78:
                    ac:31:8a:63:11:2a:97:46:ad:06:98:c2:2e:e7:b1:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5C:11:4F:14:85:9F:C2:E8:E2:29:0F:53:A9:1B:D5:04:EB:F7:FB
            X509v3 Authority Key Identifier:
                keyid:23:C8:AF:4A:82:E7:91:9D:A5:05:8B:28:DC:35:79:0A:8D:A2:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C8AF4A82E7919DA5058B28DC35790A8DA25BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/3139312e33372e3132382e302f32312d3234203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:7d:15:c1:53:e9:b0:d6:98:ae:b0:6b:f3:2f:79:2b:42:6f:
         87:cd:7a:10:3d:da:29:35:dd:0e:10:ad:54:23:9f:8f:71:3c:
         68:98:6d:e0:39:52:51:b5:4c:b1:17:54:95:b6:76:38:2b:c0:
         5b:49:48:c3:6e:53:da:66:5b:00:51:aa:03:9d:d1:28:9b:46:
         28:81:70:51:82:f4:c1:e6:84:6a:03:06:db:b7:f3:fc:ee:05:
         53:b0:db:92:ae:0b:6f:6e:a4:d9:f0:9e:59:43:60:24:2c:1f:
         1f:63:65:2a:f9:47:e1:96:cd:20:5b:c6:b2:72:85:f7:df:97:
         8c:4c:56:0b:7e:e5:b7:d9:5d:7d:4c:c9:36:bc:07:c7:80:c3:
         59:e2:f8:7d:11:e2:47:a0:a2:b9:e8:bb:1d:6c:b5:a4:a5:a8:
         ca:4c:b4:61:a7:ee:09:1a:ce:36:1e:cc:e5:47:be:5d:36:dc:
         0f:48:5e:5a:10:d4:ff:0b:18:b8:fd:1a:96:79:5a:bd:f0:ee:
         ca:13:7a:5c:2f:8a:cc:a7:6b:87:66:4d:f8:ed:bc:97:46:76:
         d8:fe:06:5e:35:90:6b:24:4f:19:13:a6:66:6c:cf:ae:3a:c8:
         8e:e9:ac:4e:df:ce:ff:6e:b7:a5:27:e8:68:fc:97:96:19:6e:
         2d:a4:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:06:34 2026 by rpki-client