Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3230203d3e203532393031.roa
File:                     3139312e372e38302e302f32302d3230203d3e203532393031.roa (raw, json)
Hash identifier:          dRNqSEckhvM0wJlVIM3yHQeB0pxaKsiP3ShCXqScCKA=
Subject key identifier:   A6:07:2B:2C:86:57:73:AF:6C:56:72:D8:B4:C6:F9:03:A1:DD:A0:82
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       6EA392337FA8E42B09E5BFD07D4A496FECB6A3A4
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3230203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:30 +0000
ROA not before:           Fri 13 Mar 2026 12:26:30 +0000
ROA not after:            Fri 12 Mar 2027 12:31:30 +0000
asID:                     52901
IP address blocks:        191.7.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a3:92:33:7f:a8:e4:2b:09:e5:bf:d0:7d:4a:49:6f:ec:b6:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:30 2026 GMT
            Not After : Mar 12 12:31:30 2027 GMT
        Subject: CN=A6072B2C865773AF6C5672D8B4C6F903A1DDA082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:91:29:70:99:f5:71:c0:53:58:d2:b9:0f:
                    06:17:1a:48:d7:f2:1e:04:93:57:40:00:1b:70:2b:
                    32:36:94:85:a9:cd:8e:d7:fd:fa:25:68:ed:13:dc:
                    1e:bf:87:37:8a:6a:45:83:48:f0:ac:32:72:c9:74:
                    b5:77:2c:24:2e:8c:fc:ef:94:90:e6:ac:0c:8e:18:
                    4e:a1:8f:5f:f2:1a:db:3b:28:36:fd:5d:2d:69:dc:
                    e5:e2:9a:a4:e6:14:4a:8e:3e:a9:f5:ab:4d:6e:9a:
                    ea:48:72:e8:99:f3:8b:c5:5b:d0:ca:2d:96:7f:13:
                    43:29:4a:05:a4:ca:f0:9c:05:36:1c:a2:bc:2e:12:
                    db:f2:8c:e2:80:03:d9:3b:09:32:af:bc:f1:39:f3:
                    be:62:3b:05:66:72:01:c7:c4:8b:b2:9d:c2:2f:e2:
                    37:03:09:fa:c0:bf:b8:10:de:18:df:4d:ab:a7:74:
                    27:e0:ce:48:62:a2:12:39:ad:c6:04:15:c3:4f:fc:
                    b2:2e:5d:fe:a7:02:05:9f:c9:d0:07:99:08:18:e9:
                    a2:69:33:dc:30:4e:ae:b1:46:a4:8c:19:de:46:4a:
                    93:c7:b1:0f:fe:10:20:6b:20:24:d7:4b:5e:b9:be:
                    31:4f:7a:14:de:51:13:b5:aa:d6:3e:94:3a:8f:e6:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:07:2B:2C:86:57:73:AF:6C:56:72:D8:B4:C6:F9:03:A1:DD:A0:82
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38302e302f32302d3230203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:13:1e:43:6a:8c:1f:53:21:a0:49:08:df:33:81:83:34:91:
         07:12:35:4d:6f:a6:1f:7f:83:ab:9d:b1:cd:cf:4e:ff:8e:b3:
         ad:ce:53:d4:60:23:b7:99:04:42:2c:ad:07:8b:f5:36:62:dd:
         93:46:23:ea:f8:26:7d:02:03:ad:3c:a1:1a:3d:af:98:f2:55:
         10:9d:73:0c:52:4f:a3:92:bf:eb:0f:51:5c:d9:61:12:d5:30:
         85:26:a7:64:25:30:2a:4d:61:17:66:a9:68:04:0d:96:f3:31:
         4f:97:b2:b1:e4:9a:a9:4e:af:32:73:91:7b:20:83:cd:dd:58:
         b5:e6:b8:44:0c:93:98:9a:33:d3:b4:7b:00:d9:da:c2:98:eb:
         67:85:03:d3:90:7d:d6:08:50:5b:38:f2:22:ea:41:47:a4:f5:
         c0:ec:b3:7d:3a:07:e5:58:3f:12:d2:94:29:16:7f:7e:4c:2c:
         7c:f7:ab:2b:48:d1:9a:1c:7e:08:1c:dc:fd:4d:b7:76:4c:67:
         c2:53:ca:f2:c1:0e:6b:6c:0d:9d:32:bc:ac:57:99:80:80:f5:
         c0:78:4e:79:56:d3:a3:d1:70:72:43:1d:fc:08:ea:b5:8f:40:
         08:64:87:f2:95:b7:77:23:cc:91:f0:42:be:07:3f:bf:3c:8a:
         64:22:06:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:13 2026 by rpki-client