Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38312e302f32342d3234203d3e203532393031.roa
File:                     3139312e372e38312e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          ocDMsZO82atGuzSrIWAYM5CTVkDxPnf3GzgMnWXawPs=
Subject key identifier:   30:79:0B:A5:72:02:84:DB:5F:26:8C:FB:91:17:E2:56:D1:16:29:8A
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       3908EC2335DF244B2CF87ABBD30D47ABA1DC4F06
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38312e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:33 +0000
ROA not before:           Fri 13 Mar 2026 12:26:33 +0000
ROA not after:            Fri 12 Mar 2027 12:31:33 +0000
asID:                     52901
IP address blocks:        191.7.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:08:ec:23:35:df:24:4b:2c:f8:7a:bb:d3:0d:47:ab:a1:dc:4f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:33 2026 GMT
            Not After : Mar 12 12:31:33 2027 GMT
        Subject: CN=30790BA5720284DB5F268CFB9117E256D116298A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:a0:b8:ac:da:4e:ca:32:1f:30:25:d5:22:
                    ba:3f:d5:9d:7c:41:d0:83:a9:59:b4:20:21:8d:d9:
                    41:b8:55:c3:27:7e:38:89:b1:e4:62:5c:dc:61:e9:
                    ff:83:47:48:c6:27:05:81:9f:f7:c8:a9:0c:e8:a1:
                    5e:a6:1d:17:cd:20:25:e9:e5:ea:3c:0b:67:b8:fd:
                    a4:f2:0e:82:43:45:3d:0e:13:6b:7b:7c:8d:ed:2f:
                    ac:1e:fc:22:aa:3e:94:cf:8d:ec:e5:b4:44:71:3e:
                    e8:62:b3:fe:14:4d:2f:d0:f9:d6:4e:39:6d:78:db:
                    8e:63:39:93:fa:e5:a9:95:62:b1:7d:43:7a:5e:eb:
                    3d:d2:9c:1f:af:c0:d8:9d:1b:16:49:3b:e0:8a:9b:
                    1b:bb:88:ae:ee:c1:3f:7f:9a:a2:2e:fe:a4:28:a1:
                    15:d9:7a:6d:3f:82:77:f6:59:d2:91:27:be:a4:45:
                    17:9a:ea:82:30:fe:32:59:98:d7:be:fc:3d:cd:7f:
                    c3:c9:61:86:3e:ac:43:2a:5d:83:66:a8:cb:65:d4:
                    1f:05:a4:ce:f6:09:e5:d5:1c:eb:06:4e:c9:d7:c5:
                    7a:8a:11:de:4c:0d:3d:8f:ad:a6:cc:44:66:ac:0c:
                    35:ee:50:30:2c:df:c4:7b:73:24:41:eb:31:e8:7d:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:0B:A5:72:02:84:DB:5F:26:8C:FB:91:17:E2:56:D1:16:29:8A
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38312e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:53:e8:a2:b2:bb:a9:3a:64:9c:57:c4:38:8f:e7:61:ee:08:
         16:7b:49:17:fb:9a:71:1e:4a:78:de:e8:ff:4d:8c:5e:6b:7d:
         7d:f9:78:22:b4:b6:11:52:c4:2f:6b:28:c2:c6:cd:4e:0f:6d:
         13:41:57:17:e6:f4:62:26:88:52:57:e0:dc:f6:bb:dd:5f:41:
         3d:27:5c:e5:2b:17:e9:76:1e:f0:ac:66:e7:83:6f:87:72:7e:
         79:08:12:fe:16:94:12:a1:a6:d2:7c:9a:0b:c6:b1:6c:79:c0:
         7d:57:bc:11:17:c6:fa:95:76:a1:4b:9b:62:ba:14:3c:de:de:
         58:a9:a5:f7:ee:8a:e9:33:22:89:fd:3b:3c:72:f4:5d:d5:30:
         fd:2b:4c:1d:83:62:d0:ae:d9:45:49:a3:72:49:3d:e0:24:d0:
         50:3d:2c:c7:66:6d:eb:da:0a:a0:5d:2c:45:7e:80:c7:81:96:
         1e:0e:88:13:2b:7c:28:67:c0:a3:43:32:be:b2:25:10:43:7d:
         24:e4:e2:be:ff:8b:4a:1f:4e:ad:bf:b0:2e:a3:fc:3f:2a:43:
         9f:99:8b:ca:c9:57:22:b7:fe:1d:56:16:11:64:03:fe:d6:fd:
         f2:e6:7a:bd:43:82:dc:55:1e:cc:2b:30:35:c1:2a:a7:df:1f:
         59:6b:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:05 2026 by rpki-client