Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3139312e3234312e31362e302f32322d3332203d3e20323638393736.roa
File:                     3139312e3234312e31362e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          nFFzbciU/xlVpDh3KYpLrpbCH9SeZmbZYPuuaOmebrk=
Subject key identifier:   46:E1:6A:EE:2C:89:94:90:97:A8:56:AC:AB:8B:35:AF:E3:C2:F8:66
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       64BE97732E2664DC3005E7AFDC6F627B4AE39F2D
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3139312e3234312e31362e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:48:13 +0000
ROA not before:           Mon 11 May 2026 17:43:13 +0000
ROA not after:            Mon 10 May 2027 17:48:13 +0000
asID:                     268976
IP address blocks:        191.241.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:be:97:73:2e:26:64:dc:30:05:e7:af:dc:6f:62:7b:4a:e3:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:43:13 2026 GMT
            Not After : May 10 17:48:13 2027 GMT
        Subject: CN=46E16AEE2C89949097A856ACAB8B35AFE3C2F866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:42:58:15:b7:74:20:ae:92:3b:e7:0d:f1:
                    59:0d:b0:83:bf:78:e8:f3:8c:93:fc:52:e0:99:aa:
                    3c:96:b5:2f:b0:21:c9:45:9b:f2:b8:5b:76:7e:90:
                    a8:61:d1:33:b7:a6:09:06:0d:f7:8e:9b:ba:e7:9b:
                    8d:1c:bc:36:af:33:d3:e4:32:c6:74:76:43:c7:1e:
                    c1:15:ff:e3:89:02:0e:ea:15:3e:63:32:2c:54:de:
                    74:45:2a:c9:17:3e:d0:ae:3a:84:e0:3d:8c:2e:0b:
                    55:b2:0a:db:de:be:3d:14:98:06:10:bb:1b:e6:32:
                    1b:d7:8d:bd:56:2a:e3:5e:61:9d:f8:d1:6f:f8:28:
                    6a:d8:fd:1d:3e:ae:f4:22:98:09:a7:04:ee:3d:3b:
                    d3:b4:c9:ab:68:63:e8:a7:ef:6e:4a:bf:e8:17:97:
                    d1:15:37:7a:9c:9c:a4:5c:95:aa:fc:cd:ea:2e:52:
                    32:e1:58:a5:d1:39:36:88:f8:60:d2:5d:b4:2c:e9:
                    37:80:6f:30:7c:5c:76:93:d0:13:2e:17:b1:d0:7d:
                    8a:50:59:47:72:b0:e1:b9:67:af:c0:43:79:f3:01:
                    b1:9f:00:1c:a3:b2:86:7d:8c:c4:72:df:b0:e2:cb:
                    09:f4:75:5b:b3:aa:68:f8:3d:26:c0:f0:e1:fd:6d:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:6A:EE:2C:89:94:90:97:A8:56:AC:AB:8B:35:AF:E3:C2:F8:66
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3139312e3234312e31362e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:05:b3:38:9e:89:e6:db:e1:b4:47:ac:c4:03:10:f6:e4:b6:
         94:77:d7:87:c1:74:30:13:62:aa:aa:99:d4:8f:fa:3b:72:19:
         14:e0:de:a5:41:fd:e2:65:54:2c:b8:3c:ea:e2:f8:ae:50:5f:
         0d:57:18:69:dc:e6:1d:3f:5b:e1:c9:d4:78:c5:cc:c2:e9:4d:
         a9:85:ea:38:11:ae:25:29:ee:fa:7d:e0:e7:6d:3c:85:e0:14:
         2a:09:02:0d:da:34:2b:3f:be:83:08:0a:f8:90:15:99:dc:ea:
         e2:b8:f6:ab:26:33:07:d3:f9:b6:d6:4f:f6:b3:d4:bf:54:3b:
         fc:6f:12:26:d4:f2:5a:0b:a4:4a:63:e0:7e:10:5d:52:0a:08:
         76:c3:79:66:a4:3b:8d:38:72:df:eb:a4:35:a9:54:ed:5a:6c:
         68:0d:cb:90:b0:27:34:5f:3d:1a:f7:1d:7a:e8:45:01:b4:33:
         f4:49:d0:b7:53:72:bb:05:21:08:61:77:56:f0:4e:d1:91:91:
         f9:b1:4d:6d:96:0c:4f:91:e8:3c:bc:36:ae:86:c1:e0:0a:67:
         4c:9c:41:97:56:15:d3:1e:b0:33:3a:45:d2:cd:8c:f2:e8:07:
         f2:88:40:f2:8d:a7:d6:3c:a1:e7:36:b9:66:1a:8c:1c:ec:87:
         61:2b:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:37 2026 by rpki-client