Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34352e302f32342d3234203d3e20323634313230.roa
File:                     3139312e3136302e34352e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          s6wGSW8oWVS3qMMJa2T2J1DGzWnP516C62DNkFLTVSA=
Subject key identifier:   9A:EF:F0:A4:E6:FD:99:7A:58:90:19:C7:32:E9:1A:A8:CD:66:F4:3B
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       1186492BC503CC20E451029C5AFF4EB87238EB03
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34352e302f32342d3234203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:21:05 +0000
ROA not before:           Wed 22 Apr 2026 05:16:05 +0000
ROA not after:            Wed 21 Apr 2027 05:21:05 +0000
asID:                     264120
IP address blocks:        191.160.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:86:49:2b:c5:03:cc:20:e4:51:02:9c:5a:ff:4e:b8:72:38:eb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:16:05 2026 GMT
            Not After : Apr 21 05:21:05 2027 GMT
        Subject: CN=9AEFF0A4E6FD997A589019C732E91AA8CD66F43B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:78:aa:54:b1:19:83:f8:86:74:7f:4b:62:
                    48:63:81:5f:8d:84:79:af:b9:48:09:87:03:81:1d:
                    c4:15:b0:b2:2e:73:aa:0f:d7:f5:b6:d2:08:fc:72:
                    a2:b8:a6:64:eb:79:5a:3e:fc:68:0d:7c:c6:d3:00:
                    04:e9:eb:86:5b:d0:30:f6:bd:85:be:22:c0:68:ba:
                    e0:fd:d9:40:42:ad:f8:dd:2a:2c:ae:73:db:1f:9b:
                    bc:46:6d:07:3f:aa:f1:29:50:32:a4:52:0f:2d:31:
                    d4:1c:bd:81:c1:80:03:ad:18:25:b8:ed:2f:bc:05:
                    ca:f1:05:0f:f7:85:90:66:60:d5:91:86:f2:a5:88:
                    dd:d1:f9:ff:e1:82:b8:94:e9:e6:45:92:87:89:35:
                    80:3e:d8:f0:33:09:9c:80:25:61:7d:c0:36:c2:51:
                    0a:89:c9:4a:66:f1:07:8d:33:e2:21:0e:60:a6:64:
                    53:24:3d:5c:8d:ab:d4:92:a2:2e:6c:f7:29:df:6d:
                    3d:e3:eb:8f:55:18:17:ef:fa:9e:b9:48:53:8b:73:
                    57:8f:94:88:3e:a4:87:d0:b6:ee:38:15:49:c9:66:
                    a8:28:05:12:40:3e:b7:20:eb:b5:db:51:32:9d:2c:
                    5c:92:8e:26:60:a3:b8:69:c9:41:91:a8:da:da:91:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:F0:A4:E6:FD:99:7A:58:90:19:C7:32:E9:1A:A8:CD:66:F4:3B
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34352e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:48:8a:cf:d2:6c:18:88:87:db:4a:2f:18:24:b9:90:3a:22:
         9a:55:57:48:48:d9:b1:f7:6d:ce:4b:71:d9:7f:27:83:76:aa:
         61:10:ab:14:8c:50:89:05:78:3f:e8:71:56:07:53:4e:91:13:
         e1:74:51:cb:f6:83:e0:ba:77:98:dc:86:25:7c:05:f4:c4:85:
         6e:8a:7a:18:55:c6:e3:de:b0:71:ab:d7:22:cf:4b:24:b6:7d:
         90:e2:36:a0:9d:e4:11:c4:4f:45:7d:28:83:41:12:7e:cb:b6:
         51:4a:0e:29:6d:b2:f7:65:08:45:ee:2d:59:4c:2d:62:21:44:
         13:06:2c:54:5a:31:49:4f:94:9f:3a:cb:c4:10:df:95:21:b3:
         33:20:72:b8:46:bb:82:ff:c7:7e:e2:f5:ce:d2:ae:1f:d4:f7:
         88:a7:b8:34:d5:2b:6f:72:56:4b:53:3e:80:4d:64:9a:d3:3c:
         28:53:02:17:ee:66:ae:4d:28:e6:3c:c6:ec:82:97:f7:d8:d2:
         e0:c7:3e:47:6a:20:cd:c9:93:80:74:5a:ac:85:0b:98:32:e9:
         ec:69:b6:de:87:65:78:ca:37:7a:de:f8:81:33:3b:3b:aa:2b:
         77:0f:9c:92:d7:eb:83:94:52:57:ad:5b:09:6b:8d:7b:ef:a4:
         42:29:11:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:04 2026 by rpki-client