Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32342d3234203d3e20323634313230.roa
File:                     3139312e3136302e34342e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          +fMT1B++tetJZy9JpUow4+i962+6VkPstKL8nUHwFt4=
Subject key identifier:   D3:38:CC:6D:DF:D2:11:C6:DD:ED:99:D1:D2:A7:90:51:21:7A:36:93
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       16E1A43AF6795DCE0B6672022269AB17FB2E0C55
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32342d3234203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:20:35 +0000
ROA not before:           Wed 22 Apr 2026 05:15:35 +0000
ROA not after:            Wed 21 Apr 2027 05:20:35 +0000
asID:                     264120
IP address blocks:        191.160.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e1:a4:3a:f6:79:5d:ce:0b:66:72:02:22:69:ab:17:fb:2e:0c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:15:35 2026 GMT
            Not After : Apr 21 05:20:35 2027 GMT
        Subject: CN=D338CC6DDFD211C6DDED99D1D2A79051217A3693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:e5:cc:ff:fa:e7:3a:fd:fe:20:f8:4c:b4:
                    7f:7d:fe:5e:eb:ab:bb:8a:e0:69:fb:a5:94:12:0d:
                    11:9f:65:b0:db:9b:da:f0:c3:98:14:95:37:63:06:
                    d8:be:79:4e:42:d4:54:01:48:12:c1:15:97:d9:e6:
                    98:94:47:50:78:a2:65:78:e1:6b:65:a4:34:47:e1:
                    7a:4a:71:11:6c:4f:c1:c3:53:7c:0a:3f:63:11:91:
                    9b:21:e7:36:46:79:0e:a2:2c:ea:a5:78:61:28:0b:
                    3f:cd:8d:65:ca:3a:30:e0:72:8b:46:e1:41:aa:c2:
                    89:26:8d:50:16:48:a2:bb:d0:ab:ef:64:0c:06:ee:
                    b0:c5:eb:f2:b1:5c:a4:58:e8:2a:13:a5:16:44:93:
                    d1:6c:f8:2d:28:aa:84:68:8b:e5:c0:7f:3e:39:bc:
                    90:a1:ce:ea:76:3c:5b:60:ee:78:c8:d1:99:b1:bf:
                    c2:df:e1:e3:36:f6:8b:e7:cf:41:ad:f8:ff:7a:eb:
                    6d:02:ee:bc:85:0e:ef:dc:7d:fc:f9:93:e4:df:b9:
                    2d:5b:33:c9:7e:95:da:a9:9b:d4:49:69:2b:59:94:
                    64:3a:5f:c0:a7:18:62:fa:4b:10:01:20:21:d5:5f:
                    1d:48:3f:9a:ec:00:99:49:04:47:71:a8:05:e4:2a:
                    56:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:38:CC:6D:DF:D2:11:C6:DD:ED:99:D1:D2:A7:90:51:21:7A:36:93
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34342e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:d0:99:c8:a4:5f:2f:c6:db:9f:d5:b8:96:ef:02:13:25:
         4d:fa:01:28:10:02:cc:e2:ec:67:d6:08:85:8e:cb:29:7a:98:
         2c:1a:b8:74:b5:28:59:91:4c:51:9a:5a:26:1b:15:e5:1c:54:
         ed:e2:44:f5:13:c9:1e:e8:f7:ed:4e:4d:b6:f4:b8:5a:a8:08:
         59:0d:61:e8:6c:4f:61:67:91:f5:4a:e7:dd:83:a7:5e:60:95:
         76:34:bb:75:0e:61:71:47:50:da:0e:6d:ff:08:b6:ec:65:0d:
         dc:c7:03:0d:40:4b:3c:aa:7f:d9:30:a2:9b:03:1b:81:19:b4:
         31:e7:ce:fa:92:87:87:66:02:c0:dc:dc:15:6e:cc:8d:2c:46:
         66:28:03:21:5f:4f:da:6f:be:c1:6b:a8:39:21:0b:63:35:e9:
         19:29:56:cb:0b:18:17:b5:b9:61:be:8b:da:73:15:5b:c4:42:
         d4:2a:a4:9d:c6:0f:1d:e3:84:ce:12:45:08:72:e0:4f:2a:6c:
         bc:d7:c9:da:8d:64:95:5b:09:52:fe:5d:55:e1:cf:3b:b3:e5:
         7a:06:2a:a2:c3:20:50:f3:7f:f0:69:86:d9:54:d1:16:c6:53:
         05:c6:26:f8:91:87:b9:4c:38:ed:6c:0f:3a:1b:2a:12:38:72:
         25:e7:30:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:05 2026 by rpki-client