Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32332d3233203d3e20323634313230.roa
File:                     3139312e3136302e34342e302f32332d3233203d3e20323634313230.roa (raw, json)
Hash identifier:          tSoDPSFGzX5q74QP8x35/MOAXxNXub0QMeRoRrRY9ao=
Subject key identifier:   75:32:8B:4F:AC:75:C1:64:E9:7D:8B:D2:0B:00:2E:FA:11:04:94:32
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       77CB320553F5D867947DAC4746883306D1D516B2
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32332d3233203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:20:20 +0000
ROA not before:           Wed 22 Apr 2026 05:15:20 +0000
ROA not after:            Wed 21 Apr 2027 05:20:20 +0000
asID:                     264120
IP address blocks:        191.160.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cb:32:05:53:f5:d8:67:94:7d:ac:47:46:88:33:06:d1:d5:16:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:15:20 2026 GMT
            Not After : Apr 21 05:20:20 2027 GMT
        Subject: CN=75328B4FAC75C164E97D8BD20B002EFA11049432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:66:d4:47:8f:4d:80:cc:aa:49:b1:0f:85:53:
                    8b:53:da:09:6d:5c:6e:70:d6:e4:48:6c:a1:43:b3:
                    00:33:52:c9:7f:1c:1c:b3:8e:4f:f0:bd:b4:24:6f:
                    1c:e4:42:28:1d:a3:af:fe:f5:40:71:8e:0d:55:26:
                    d2:ea:ad:ad:30:83:19:0e:61:b6:2f:17:ef:46:24:
                    c6:8a:a6:e1:fd:68:6b:c1:7b:99:32:94:b8:0d:33:
                    ec:8a:46:bd:3f:cf:57:cc:23:81:8d:6c:ab:1b:30:
                    cd:2b:bd:8c:0d:ee:fe:4d:54:b6:6d:9b:11:45:14:
                    3c:70:af:da:06:f2:d8:f3:fc:a3:a2:81:10:41:ba:
                    85:70:94:bb:06:d0:8a:74:8c:6f:04:51:af:a7:23:
                    c7:82:be:b7:51:56:be:51:55:d5:26:86:7e:bf:5d:
                    9e:95:73:ea:1a:fa:96:fe:3f:c2:0e:b3:c5:2e:26:
                    eb:90:b6:22:e4:e1:7c:b9:0c:7f:12:4e:4d:58:de:
                    03:0e:8d:f5:e9:83:c1:5a:5e:2c:e5:3c:ab:eb:27:
                    9a:f0:fc:02:38:88:da:65:78:e2:e8:74:20:d1:c1:
                    f9:a1:ad:1f:46:f4:96:a2:ad:20:2e:fc:15:8d:60:
                    93:d7:af:90:e5:0c:23:75:0d:f9:d7:20:0a:bd:a1:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:8B:4F:AC:75:C1:64:E9:7D:8B:D2:0B:00:2E:FA:11:04:94:32
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32332d3233203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:f1:cb:b2:6f:10:df:ff:55:7d:3a:11:bb:e2:b9:cc:2c:
         66:d2:f7:8e:97:57:ca:72:ae:52:2b:b2:90:85:d9:e2:ad:ad:
         70:db:7e:9f:4c:7f:3a:9e:58:a7:9d:c8:69:b5:60:a2:81:51:
         78:0e:78:99:8f:e4:b7:9d:e0:a2:0e:53:fd:70:63:1e:ce:32:
         15:86:17:06:a7:f7:e6:d8:3a:fd:db:6e:ae:e0:b5:94:0e:09:
         4a:56:6c:3b:1b:22:1e:09:a9:9c:ea:f8:05:83:74:11:1c:36:
         90:8d:bc:ad:d4:d5:d1:27:87:c1:39:ec:d1:f6:a6:4f:4e:4c:
         be:97:e2:d6:13:a9:62:4a:2b:ad:81:90:aa:14:27:f7:5b:f2:
         d7:bc:50:34:2c:9e:00:28:2f:21:e3:07:80:fb:a2:a2:a4:dc:
         cd:d4:ed:cf:8a:ee:0c:e3:04:3e:f8:39:ca:f2:28:b3:d2:c6:
         87:6b:3d:e1:36:34:fe:19:f8:92:3c:ea:92:b2:53:4d:40:91:
         82:b4:68:fa:42:a2:21:bd:14:7e:61:63:bd:a8:8d:07:01:2f:
         f6:16:14:18:a6:02:3e:cd:61:aa:5a:69:58:fe:41:58:38:53:
         74:ac:0e:af:f5:00:03:a0:c7:22:b4:85:e4:a4:5e:23:5e:f1:
         22:38:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:06 2026 by rpki-client