Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32332d3233203d3e20323634313230.roa
File:                     3139312e3136302e34362e302f32332d3233203d3e20323634313230.roa (raw, json)
Hash identifier:          9pGizpJydJdKcfkEDwb3UmBW1fXLeIo7uTSrkuUYCQA=
Subject key identifier:   C3:8D:F7:8E:ED:89:BC:CA:FA:DA:B3:45:47:8E:92:CD:C9:39:B2:89
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       2B2356002C322BD7CCD3F7DFD9B6B367C3F1D814
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32332d3233203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:22:07 +0000
ROA not before:           Wed 22 Apr 2026 05:17:07 +0000
ROA not after:            Wed 21 Apr 2027 05:22:07 +0000
asID:                     264120
IP address blocks:        191.160.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:23:56:00:2c:32:2b:d7:cc:d3:f7:df:d9:b6:b3:67:c3:f1:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:17:07 2026 GMT
            Not After : Apr 21 05:22:07 2027 GMT
        Subject: CN=C38DF78EED89BCCAFADAB345478E92CDC939B289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:41:5c:11:ab:12:74:a8:0e:d7:e1:4b:7c:
                    c3:75:f0:83:df:d9:49:24:40:eb:6a:9e:98:16:27:
                    cd:7e:1d:b1:c0:35:24:c0:36:b2:15:b1:be:c0:5b:
                    46:2e:bc:9a:ba:8a:f1:1d:b4:86:eb:ca:c9:7f:eb:
                    78:9e:7b:4a:29:92:62:ff:48:27:be:cd:17:ac:dd:
                    eb:8c:ee:b8:00:a7:87:0a:f4:15:a0:bf:63:6b:c2:
                    f0:d0:17:5e:1d:87:39:27:d7:2c:30:6f:a9:a7:4d:
                    ab:6e:ee:c6:5f:59:4d:a9:b5:a5:ed:29:d0:b3:99:
                    66:59:bf:1c:13:4e:67:c1:45:cf:43:f0:61:95:ca:
                    51:e6:b6:24:de:f5:2c:d5:85:b6:83:6a:56:88:fd:
                    ae:f1:9e:5d:80:c8:b1:ff:bd:08:a4:85:15:83:15:
                    90:7c:c5:53:c3:db:5a:31:01:a2:ea:58:f0:c9:62:
                    f7:b1:46:df:2e:5a:8c:62:36:6f:d6:7e:28:75:d4:
                    82:bf:d0:7a:96:53:d6:ff:a4:59:05:b6:38:2a:88:
                    f2:4b:a5:82:89:06:f5:77:ea:ef:94:e3:3e:06:08:
                    a4:7d:62:5f:b9:e2:e6:0f:33:13:ec:58:07:53:40:
                    a7:71:ed:d5:86:51:16:5e:46:fb:d1:ad:d1:da:02:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:F7:8E:ED:89:BC:CA:FA:DA:B3:45:47:8E:92:CD:C9:39:B2:89
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32332d3233203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:65:28:db:ed:d6:87:2e:87:61:55:d5:18:cb:92:99:87:
         d1:60:66:2c:f4:87:22:46:f0:3b:e0:74:10:ba:b0:a5:e2:75:
         58:fa:fc:17:70:3c:5d:62:00:75:f4:cd:27:2b:2c:18:a3:59:
         cb:79:86:c0:37:23:6c:e7:8e:0a:ad:d8:a7:36:fc:90:b9:b3:
         24:43:5d:e9:47:8c:f1:c9:6e:b7:35:f8:2b:9a:04:f9:02:8b:
         b2:f4:1f:0d:75:d3:78:34:a6:0d:62:48:69:34:d8:94:e3:6e:
         b8:6c:83:21:bf:b9:76:42:9b:bb:53:42:cd:ed:1c:65:b2:18:
         a4:d2:0d:4d:78:e5:ce:0b:08:08:40:f1:c6:e7:81:a4:21:56:
         cf:4a:c7:1a:87:78:2f:da:8f:6f:ce:a4:d5:c5:cd:84:80:54:
         95:97:d4:78:63:29:2b:88:f0:e2:d0:22:63:6b:5e:70:39:0e:
         9e:84:45:f2:36:d6:00:22:0b:3f:a7:f6:14:89:3e:d4:36:8f:
         50:49:0b:c8:e3:8d:b7:85:ec:e8:7f:80:c4:a3:2f:f1:b4:85:
         6c:a6:a0:34:17:fe:80:b2:bf:18:0c:28:83:5a:9e:fb:8c:c8:
         d4:b0:2b:11:24:8e:93:c0:b0:2d:4b:b1:91:05:ac:c9:ad:46:
         aa:db:9a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:06 2026 by rpki-client