Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e39322e302f32342d3234203d3e203532393031.roa
File:                     3139312e372e39322e302f32342d3234203d3e203532393031.roa (raw, json)
Hash identifier:          e5U/zrASiLRxWt0x292vgHzCZ/NaXEbHLIf64nyiR74=
Subject key identifier:   7B:94:3A:EB:24:FA:F2:47:B4:1C:0F:DB:3B:82:B0:EC:E5:98:6F:A1
Certificate issuer:       /CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
Certificate serial:       0AC8F317232A6F0DD8C2DD61F36BA0B18BCD0A2E
Authority key identifier: E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e39322e302f32342d3234203d3e203532393031.roa
Signing time:             Fri 13 Mar 2026 12:31:52 +0000
ROA not before:           Fri 13 Mar 2026 12:26:52 +0000
ROA not after:            Fri 12 Mar 2027 12:31:52 +0000
asID:                     52901
IP address blocks:        191.7.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl
                          rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c8:f3:17:23:2a:6f:0d:d8:c2:dd:61:f3:6b:a0:b1:8b:cd:0a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0
        Validity
            Not Before: Mar 13 12:26:52 2026 GMT
            Not After : Mar 12 12:31:52 2027 GMT
        Subject: CN=7B943AEB24FAF247B41C0FDB3B82B0ECE5986FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:ff:ea:7d:69:6f:ce:d3:82:38:05:a7:20:
                    ae:ba:2e:17:eb:4e:f2:73:e1:c7:bc:a4:14:1e:37:
                    5f:ab:ac:e5:85:e9:69:bb:6d:7a:b9:eb:5c:2e:22:
                    f0:d2:9b:a1:a3:9c:a5:1e:4d:ba:b9:fc:ba:8e:65:
                    43:b2:34:c4:83:70:b4:69:5b:68:8b:02:9a:17:29:
                    48:6a:a1:41:08:6a:2b:a7:b4:05:e5:98:b9:e4:5d:
                    1b:31:34:26:f5:cf:83:8f:7d:b6:1b:f6:96:b7:f3:
                    35:cc:90:43:88:6e:64:01:cb:b7:b0:36:e9:65:9c:
                    40:7d:e9:fd:fd:aa:66:47:59:ad:d0:22:ae:10:e0:
                    fc:44:cf:7f:96:17:46:01:16:0f:82:19:b0:b5:97:
                    e0:00:3f:72:f8:ac:8d:ef:5a:60:9b:4b:05:86:db:
                    97:41:9e:b1:57:dd:0d:50:fd:3a:46:6b:f0:3f:91:
                    ea:54:32:f5:56:23:2c:d7:08:14:c0:87:60:fa:57:
                    78:bf:c7:79:3e:b7:06:a3:9a:8c:75:68:23:fa:36:
                    cc:88:c6:35:ed:27:18:24:bb:28:0b:0c:30:09:05:
                    af:e0:d7:b3:dc:fc:eb:30:e9:1a:51:f4:b5:4e:a2:
                    e8:f4:d3:00:a1:ff:3c:84:70:2a:38:36:ed:53:65:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:3A:EB:24:FA:F2:47:B4:1C:0F:DB:3B:82:B0:EC:E5:98:6F:A1
            X509v3 Authority Key Identifier:
                keyid:E0:A6:82:53:39:F3:C5:96:9B:A4:AF:86:BA:70:BD:AF:FE:F4:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0A6825339F3C5969BA4AF86BA70BDAFFEF4D3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3U7upcUMX49G3VSoYqDPaxXYnJWp19Cnr2akwqYdk9rx/0/3139312e372e39322e302f32342d3234203d3e203532393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:12:05:a6:73:15:e9:2a:36:94:67:b8:20:a5:c1:94:fe:
         06:38:80:83:95:0a:ef:2e:6f:be:87:98:28:f6:05:06:d5:61:
         2d:7b:88:86:2e:28:83:9f:c3:87:23:fe:5b:0c:90:d2:a2:04:
         4f:22:3d:76:f5:44:5b:9c:9e:38:1e:5c:da:76:00:87:60:84:
         b1:f3:6d:e1:79:02:40:32:43:6a:aa:4f:0c:ae:fa:3a:35:b5:
         9b:38:ee:ab:7b:3a:11:ff:6e:72:6d:04:40:e7:ee:a8:77:65:
         90:90:df:26:01:b7:02:ef:d5:d7:9e:e3:60:09:3c:92:33:b4:
         91:97:f3:6c:b3:ca:7e:0d:e4:90:fc:4d:f9:8b:fd:17:da:7f:
         67:87:05:08:e3:55:5d:f2:82:fc:b3:a6:ae:34:e6:c4:7e:17:
         6e:38:29:24:21:3b:1f:a8:53:04:65:ec:11:ba:72:ed:fa:06:
         4f:2b:dd:2a:2f:89:de:66:01:ae:2d:97:ed:28:70:bb:ca:a1:
         58:20:86:76:4f:98:b7:a9:dc:35:b0:c1:75:32:bd:54:0e:2a:
         33:13:bd:68:d9:2b:d2:4a:b8:1f:60:56:37:ab:c5:c1:6c:43:
         bc:60:98:29:3a:3e:19:4f:b6:3a:5f:31:8a:f6:6f:b5:ec:9c:
         e6:17:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:55 2026 by rpki-client