Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa
File:                     3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa (raw, json)
Hash identifier:          CQp32iZLq25kiAzFALDiuQDj5zrp69tj8mN2ys+3uMw=
Subject key identifier:   59:96:81:6D:BE:98:BB:F9:AD:0C:0E:67:45:16:2F:36:9C:16:5D:61
Certificate issuer:       /CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
Certificate serial:       4715F12A2A33093A95E8B07F70642DA158375D69
Authority key identifier: AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa
Signing time:             Sat 20 Jun 2026 01:00:00 +0000
ROA not before:           Sat 20 Jun 2026 00:55:00 +0000
ROA not after:            Sat 19 Jun 2027 01:00:00 +0000
asID:                     270936
IP address blocks:        190.103.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl
                          rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:15:f1:2a:2a:33:09:3a:95:e8:b0:7f:70:64:2d:a1:58:37:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3
        Validity
            Not Before: Jun 20 00:55:00 2026 GMT
            Not After : Jun 19 01:00:00 2027 GMT
        Subject: CN=5996816DBE98BBF9AD0C0E6745162F369C165D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ef:3e:01:53:2b:4b:c6:64:2f:17:f2:de:29:
                    b4:fa:01:e1:64:71:d2:37:2d:35:3c:a0:0d:39:34:
                    ef:8c:31:de:8a:b0:c4:55:af:89:8e:20:aa:0b:f8:
                    33:fb:df:59:49:ef:b8:d0:a9:62:dd:32:9e:fd:f1:
                    a3:8f:b7:06:79:f6:fa:e9:d2:a2:56:0b:7b:a1:01:
                    e4:39:0a:6e:6d:0a:64:17:18:aa:cc:98:aa:2d:bc:
                    3e:f7:fb:e2:a3:8e:c9:3f:cb:3f:65:4f:b2:c4:b9:
                    3e:b2:d6:af:9f:0f:ab:6f:9e:2a:ea:8a:f1:84:30:
                    2a:fd:08:91:71:aa:c1:26:ec:04:a2:2f:2c:d2:a0:
                    2d:92:15:6b:d0:30:d6:70:12:40:f9:cb:a1:14:e7:
                    73:64:6c:50:27:6e:f9:5c:8c:35:31:4c:3d:19:7c:
                    9b:d1:84:ad:3e:08:f7:e4:cd:b9:01:8c:2b:67:c2:
                    df:46:bc:cd:91:01:29:5e:8f:f5:04:ad:66:d3:9e:
                    21:51:6d:1a:4b:b3:ee:25:50:3b:8f:f1:1b:94:59:
                    36:df:81:df:c8:f6:d3:8b:d4:93:ea:37:27:5e:42:
                    50:df:c1:13:d5:92:20:df:2f:8b:20:93:37:d5:79:
                    06:59:c4:71:e7:f5:6d:1d:ec:f7:00:8f:33:85:79:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:96:81:6D:BE:98:BB:F9:AD:0C:0E:67:45:16:2F:36:9C:16:5D:61
            X509v3 Authority Key Identifier:
                keyid:AB:9E:E7:D5:65:C0:27:09:75:85:37:AF:EB:7B:B8:3E:C6:AD:2E:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9EE7D565C02709758537AFEB7BB83EC6AD2ED3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2SapynWKhumGNgHfEGDY7J6CEonuNxXzyHHaCvEvCcuY/1/3139302e3130332e3135342e302f32342d3234203d3e20323730393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d7:f4:f0:0c:8d:17:1a:d3:ee:7e:a5:42:0b:4d:84:9f:a3:
         25:98:64:5d:da:51:d9:af:4d:03:0c:26:ad:eb:89:5b:bb:28:
         4b:8b:2a:c5:b6:05:78:d4:b0:83:f0:10:21:fd:09:ae:b6:ce:
         17:74:4f:5f:c4:2e:56:21:ec:d2:d3:8a:0a:2a:f9:8e:14:47:
         6c:de:99:50:f8:4a:8a:fd:39:6b:10:e8:9c:60:53:73:41:93:
         0c:d6:fc:41:82:0e:8f:19:34:84:ff:39:4e:7a:30:a5:f5:8a:
         26:16:24:0d:46:63:07:3d:96:0f:bc:18:4e:68:c9:a3:84:b6:
         cf:19:4f:a7:55:8c:ce:4a:39:0e:b9:c1:2b:4a:a1:fa:62:67:
         53:e1:da:4f:8c:94:55:3e:4e:1d:67:01:ea:3f:7c:33:49:68:
         2e:ad:06:42:f4:5f:77:30:9e:48:e5:f5:0a:b2:55:9c:79:38:
         90:4b:f8:07:ce:67:61:e1:8d:80:1a:48:6b:e9:a9:7b:a7:9d:
         80:04:b2:c2:02:74:ea:f2:e6:3e:d7:11:df:29:5a:55:d2:df:
         88:fb:23:f5:32:1e:be:e9:bb:87:ec:40:05:d2:e2:9f:30:2b:
         4b:c2:1b:12:35:b0:cf:be:27:2a:5e:ba:50:ca:50:d3:18:fe:
         3a:bc:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:26:15 2026 by rpki-client