Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32342d3234203d3e20323634313230.roa
File:                     3139312e3136302e34362e302f32342d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          MlDNBp4jvjT7wiBloHGywQwLiV+VYmrNZFMOb9kREPE=
Subject key identifier:   DA:69:0A:2E:BE:81:77:CF:FF:EC:0F:54:46:67:EE:45:1F:72:E6:57
Certificate issuer:       /CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
Certificate serial:       5511F709EBE84767DED6E428D2A59AB4F9C9D762
Authority key identifier: 1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32342d3234203d3e20323634313230.roa
Signing time:             Wed 22 Apr 2026 05:21:23 +0000
ROA not before:           Wed 22 Apr 2026 05:16:23 +0000
ROA not after:            Wed 21 Apr 2027 05:21:23 +0000
asID:                     264120
IP address blocks:        191.160.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl
                          rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 12:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:f7:09:eb:e8:47:67:de:d6:e4:28:d2:a5:9a:b4:f9:c9:d7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A73FAF8D867B634EAC5E7386DE57083033A1C96
        Validity
            Not Before: Apr 22 05:16:23 2026 GMT
            Not After : Apr 21 05:21:23 2027 GMT
        Subject: CN=DA690A2EBE8177CFFFEC0F544667EE451F72E657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:74:ad:a8:3e:86:42:a2:f4:f8:52:fd:0f:
                    16:81:60:5c:66:97:36:ed:94:6a:aa:4c:88:19:2b:
                    e7:9f:53:77:4f:c3:22:c3:2e:f9:f7:b9:ad:b9:af:
                    aa:51:9f:5c:13:bf:6a:91:22:f4:59:27:5a:0b:01:
                    b8:45:da:0f:2f:28:5c:f1:36:1e:ef:c7:de:6f:68:
                    4d:2f:52:f6:e5:82:cd:1f:99:6e:ba:5a:07:c9:03:
                    d1:c3:a9:43:65:60:09:9a:5c:1a:a2:95:81:75:23:
                    c8:04:65:88:78:a4:f0:0b:43:80:61:55:b0:19:ef:
                    01:24:52:50:37:09:a2:37:44:13:d8:e8:c7:58:5e:
                    fb:0a:c0:8a:93:40:18:4a:a2:e5:55:7c:38:d0:19:
                    82:cc:bb:3c:e3:ab:38:4f:7c:05:1c:64:1d:9f:1b:
                    dd:a0:76:db:a1:a4:6e:3a:ac:c3:fb:d5:b0:4c:6e:
                    9a:e7:76:85:83:a5:43:24:58:6d:93:36:6f:89:35:
                    58:a7:96:a2:54:e3:6b:bb:3e:fe:52:43:6a:87:ed:
                    de:e5:03:a2:bb:d7:11:09:19:4e:5c:ca:d4:b6:30:
                    1e:e7:9c:e1:c3:39:c4:26:d5:2f:07:1e:5d:8b:2a:
                    2a:2d:b2:7c:43:71:b5:77:22:e8:6e:7c:7e:7c:a6:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:0A:2E:BE:81:77:CF:FF:EC:0F:54:46:67:EE:45:1F:72:E6:57
            X509v3 Authority Key Identifier:
                keyid:1A:73:FA:F8:D8:67:B6:34:EA:C5:E7:38:6D:E5:70:83:03:3A:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/1A73FAF8D867B634EAC5E7386DE57083033A1C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A73FAF8D867B634EAC5E7386DE57083033A1C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/2/3139312e3136302e34362e302f32342d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:e2:cb:26:90:81:0c:92:46:76:d8:72:ea:90:06:f8:ed:bc:
         ba:ed:cf:12:f7:52:60:c6:ef:ee:28:c9:1a:03:12:be:d2:59:
         4b:63:76:51:18:ba:66:1c:42:0d:46:8e:39:65:d9:93:40:99:
         97:d7:54:5a:b2:af:00:b7:73:2e:76:5a:cc:55:b3:ff:21:ce:
         00:3e:7e:82:e2:cc:a9:19:64:ed:a6:af:c7:29:76:4b:6b:99:
         88:ef:c4:08:82:72:43:43:0b:f6:87:d7:27:1d:03:ae:1d:c8:
         e6:be:5f:7d:6b:5d:c2:86:39:4f:8d:61:14:1b:4a:a4:ca:66:
         a5:cb:10:9b:29:3d:91:de:06:67:0f:98:8d:e4:c5:0e:5e:c1:
         44:10:b2:5d:26:1d:7c:24:de:60:e1:a5:55:6d:e3:40:fa:9d:
         99:70:4b:84:53:85:8b:25:17:c0:8a:99:6f:22:50:b0:0c:7d:
         86:0c:5c:2c:10:b5:d2:74:96:2a:66:7a:d0:72:62:09:bf:da:
         f2:5b:5b:f1:92:47:34:e6:24:a9:1f:05:8e:d1:fd:ea:2e:f2:
         85:3c:43:48:ea:b9:43:25:59:94:e7:51:c6:3a:25:67:ab:05:
         06:39:46:a4:0f:4f:0c:bb:30:0a:39:2d:7d:23:f0:53:6f:4c:
         3a:e0:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:04 2026 by rpki-client