Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38382e302f32342d3234203d3e203532393031.roa
File:                     3139312e372e38382e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          PFkI33Xu3HEUsayMx/S9uCvAMGWuJSZQHQu3XYVhJ3M=
Subject key identifier:   5F:4E:A7:71:ED:39:83:EF:95:58:3F:4B:EC:52:E9:8F:A8:62:D0:EA
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       2F3C1DDA9E7DF24769C6EE505A59D9A36EE4B996
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38382e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:47 +0000
ROA not before:           Fri 13 Mar 2026 12:26:47 +0000
ROA not after:            Fri 12 Mar 2027 12:31:47 +0000
asID:                     52901
IP address blocks:        191.7.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3c:1d:da:9e:7d:f2:47:69:c6:ee:50:5a:59:d9:a3:6e:e4:b9:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:47 2026 GMT
            Not After : Mar 12 12:31:47 2027 GMT
        Subject: CN=5F4EA771ED3983EF95583F4BEC52E98FA862D0EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:50:3a:1d:6c:6f:ef:c0:fc:f7:12:2b:38:
                    82:46:6b:05:40:32:a0:6a:fc:17:90:76:ae:8e:0f:
                    87:b0:29:a2:c4:e9:36:2d:2e:52:29:be:a1:90:60:
                    d6:9c:23:da:f4:ea:de:39:70:c5:d1:7e:db:c2:9f:
                    f0:46:4e:0d:fa:c9:e8:4b:c6:f9:ff:94:3e:0b:4d:
                    9a:a7:4a:a9:3f:8f:75:47:45:13:ac:bb:82:94:91:
                    62:39:b6:45:42:fe:84:78:32:01:83:0c:a9:7d:36:
                    2b:ad:ec:70:d6:0f:82:51:19:67:4a:35:c9:6b:65:
                    8b:01:62:df:92:7b:c1:5c:74:de:04:1f:d7:fd:aa:
                    a2:40:12:00:fa:95:0f:01:18:da:81:40:07:3f:18:
                    bf:46:26:a2:54:51:af:9a:85:34:e0:0a:e1:28:05:
                    25:38:85:ac:82:f9:3f:48:be:8f:05:4d:d9:a9:e3:
                    e4:03:da:c8:91:b4:31:f7:86:64:45:8d:2f:00:8d:
                    42:ab:95:3d:ee:1c:1e:a5:db:70:e1:58:6b:86:00:
                    cd:6a:23:dc:8d:0d:27:40:1f:c4:1a:76:12:e7:44:
                    3b:b9:ad:60:07:95:81:c0:3c:f4:09:df:5c:0d:98:
                    d2:84:cb:61:33:c7:1c:6e:c4:13:c3:82:bd:41:78:
                    ab:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:A7:71:ED:39:83:EF:95:58:3F:4B:EC:52:E9:8F:A8:62:D0:EA
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e38382e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1b:5c:86:0d:04:a3:9a:e6:61:32:90:01:53:87:c1:99:3d:
         b8:c8:68:8c:7c:7b:ea:e4:3f:66:17:b5:13:ef:df:09:9a:50:
         68:34:72:50:42:bf:cb:56:d5:59:ff:f3:fb:e9:73:b3:f9:bc:
         5a:d1:5b:7e:a9:7a:e9:3a:ec:c2:cb:53:59:03:19:98:f1:4f:
         41:43:13:ce:9b:35:ef:15:2b:b2:4f:c9:f5:e8:45:ff:de:3a:
         e4:15:ea:2d:f2:2e:ac:28:56:7b:64:6f:29:b8:b6:98:af:2e:
         ce:d5:0e:28:27:98:d1:be:fb:c0:e3:e5:a7:dd:45:fc:c2:11:
         3f:1e:e6:97:ee:a5:3f:eb:a3:c5:c4:7e:28:55:5f:e1:f1:9f:
         68:4f:df:a3:38:56:1e:da:56:8a:e7:1b:0e:ca:e9:9a:b3:ed:
         c9:ea:37:54:b8:38:f6:db:75:33:69:09:e1:4f:0d:38:cc:44:
         db:ad:0d:76:d9:70:1b:aa:72:ba:0f:5c:59:85:52:9b:3a:d8:
         02:70:ad:04:17:b1:c8:db:65:2e:a3:6a:3b:98:d9:50:ab:93:
         9a:19:54:6c:df:24:1e:2c:65:23:f1:df:ab:f5:e6:3e:b5:d0:
         82:c9:39:40:e6:6b:3c:24:59:63:30:e9:47:96:57:5d:a3:2a:
         15:6a:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:16:01 2026 by rpki-client