Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32322d3232203d3e20323634313230.roa
File:                     3139312e3136302e34342e302f32322d3232203d3e20323634313230.roa (raw, json)
Hash identifier:          YquOSTZ55awAj338jeCprolyTi9W9aCnUjm0hTaoRYw=
Subject key identifier:   70:A5:21:38:FA:28:9D:FB:B2:F0:31:D9:CE:3C:05:66:39:2A:F2:F3
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       2C7F1BEF51DB4032ED117586CBF0398ED2734EDE
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32322d3232203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:19:51 +0000
ROA not before:           Wed 22 Apr 2026 05:14:51 +0000
ROA not after:            Wed 21 Apr 2027 05:19:51 +0000
asID:                     264120
IP address blocks:        191.160.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:1b:ef:51:db:40:32:ed:11:75:86:cb:f0:39:8e:d2:73:4e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:14:51 2026 GMT
            Not After : Apr 21 05:19:51 2027 GMT
        Subject: CN=70A52138FA289DFBB2F031D9CE3C0566392AF2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:5f:8c:3a:20:ed:6f:9f:7b:3b:a5:6a:83:
                    dc:3f:2d:4a:c5:32:34:b8:8a:0e:1e:6a:ab:d0:ee:
                    c4:58:21:f5:2c:29:79:a0:d3:d7:af:89:ab:23:d7:
                    4c:30:dd:44:e4:5f:c1:14:80:d6:5b:35:15:60:a6:
                    f2:bf:4c:05:ff:80:6f:94:a3:79:10:00:61:1d:f5:
                    3a:8b:29:fc:c3:1f:7d:0c:b9:6a:51:a9:82:54:67:
                    9d:7f:b7:58:0a:87:19:f9:18:16:f9:a5:b7:2b:f1:
                    7b:f4:44:76:3a:8d:88:b3:5c:9b:f6:a6:06:c5:a2:
                    f2:f3:6a:17:cb:42:60:44:47:9d:49:ec:07:d6:bf:
                    a9:0f:d0:ca:4a:6f:5a:d3:e4:ab:05:18:f8:59:3a:
                    3d:2b:6f:fa:42:70:c3:f5:0d:01:4b:34:fd:ce:d4:
                    52:34:99:0a:25:9f:66:e5:b1:dd:8b:5a:e7:07:07:
                    b6:de:71:50:3b:9d:3f:5d:b3:47:d8:b6:37:90:c7:
                    50:96:a8:25:96:75:26:97:2a:50:aa:f3:74:1c:ac:
                    59:0b:10:3b:21:1a:2d:9b:b5:17:c1:b7:3d:d5:d0:
                    94:99:22:90:eb:3b:4b:f0:6e:24:95:2c:c2:b5:f4:
                    67:d7:f7:65:1c:83:fa:48:6f:3c:36:08:66:46:07:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:21:38:FA:28:9D:FB:B2:F0:31:D9:CE:3C:05:66:39:2A:F2:F3
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32322d3232203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ad:bf:ae:53:64:c0:76:1b:0d:6c:e4:4c:30:b4:06:2f:db:
         56:66:1e:03:b9:ed:cb:56:ec:41:5c:07:51:cb:25:f8:f6:ad:
         f2:69:ad:39:bd:ff:b2:58:29:9c:aa:43:3e:02:7e:71:4f:d1:
         a4:a4:af:d9:40:6b:71:80:70:f1:1e:ab:df:b8:ea:bf:19:f4:
         ec:2a:19:27:55:53:bb:40:0c:44:77:4c:6a:49:6f:58:32:c7:
         79:e1:c1:64:a3:aa:22:a9:74:46:4b:13:39:6f:5c:4c:a6:a5:
         19:b6:92:c6:a2:59:68:b2:bd:71:8c:60:6e:a8:be:2f:90:73:
         7a:bd:d7:05:bb:18:d3:9a:62:3d:2b:ac:91:5e:e0:84:7d:a7:
         27:16:11:61:8e:c3:dc:53:d1:83:cb:f6:13:ef:96:6b:c0:df:
         c2:80:c4:00:96:ad:c6:bd:fa:02:dd:56:38:54:e7:cd:59:a5:
         b1:06:cf:88:c3:40:02:48:e4:54:d1:53:0c:77:7f:7e:53:3c:
         b9:37:44:0f:44:0e:41:59:e3:cc:ab:bb:4a:cb:50:0f:d0:ca:
         52:1b:72:9b:41:34:8b:bf:9d:f5:ab:21:30:3f:e4:f2:2f:19:
         c2:da:d9:34:02:de:63:bf:7b:a0:bf:c7:4c:79:51:af:91:fb:
         3f:9f:9c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:05 2026 by rpki-client