Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa
File:                     3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa (raw, json)
Hash identifier:          34zerbVzCN+tVXBwTCDu4Hcy1EDJVSAxsjxlzsXk4Dc=
Subject key identifier:   6D:95:71:27:4C:33:FB:AE:D0:BE:80:6B:31:0C:53:B8:35:5B:5C:76
Certificate issuer:       /CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
Certificate serial:       54B0050DFBF527CB0B121DDFEFE558A62B42F8F5
Authority key identifier: 9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa
Signing time:             Tue 12 May 2026 03:18:42 +0000
ROA not before:           Tue 12 May 2026 03:13:42 +0000
ROA not after:            Tue 11 May 2027 03:18:42 +0000
asID:                     266439
IP address blocks:        191.243.192.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl
                          rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 May 2026 03:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b0:05:0d:fb:f5:27:cb:0b:12:1d:df:ef:e5:58:a6:2b:42:f8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A99692F686066162D6A71BA5B0DD60AF8E9C6AD
        Validity
            Not Before: May 12 03:13:42 2026 GMT
            Not After : May 11 03:18:42 2027 GMT
        Subject: CN=6D9571274C33FBAED0BE806B310C53B8355B5C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:53:99:61:b2:c9:69:35:d0:3d:d1:ff:61:
                    c4:ba:0e:3a:a8:ac:2d:de:a4:65:b4:ab:6a:62:a4:
                    6e:04:ba:99:4c:74:41:be:8f:22:69:48:4f:e1:51:
                    ec:b6:65:82:6e:a4:b9:15:d4:b8:09:a2:fd:b3:88:
                    1e:5b:53:cb:2a:74:e7:c9:fa:45:ae:36:89:3b:1f:
                    dd:9b:29:b4:77:20:c8:c4:e3:2d:37:6b:28:8c:11:
                    38:a7:47:82:3a:ee:bd:27:70:e4:02:25:c4:f8:2e:
                    ec:55:70:73:2a:1e:19:7b:cf:0e:e0:f9:02:39:0e:
                    bc:8c:4f:ac:c1:77:94:38:07:16:b6:fd:65:65:00:
                    ba:f4:ea:fa:37:f1:dc:a9:1e:a7:7c:e4:57:da:4a:
                    5a:e8:56:fe:de:75:cf:7a:1c:a5:ba:16:c7:5f:e6:
                    aa:9e:8b:94:2c:f5:93:ea:78:2e:35:09:77:e9:5f:
                    c2:58:ec:b8:f3:08:d5:48:ec:d9:05:85:14:66:37:
                    7f:ab:72:51:ec:e8:92:9e:7b:52:98:86:46:fd:66:
                    b3:67:ed:64:ba:60:96:63:2b:dd:26:8b:ac:8a:77:
                    62:a0:c7:f5:60:c1:a9:66:56:b9:b0:1e:c3:d1:ce:
                    d5:3b:6f:4d:bc:c6:e5:4e:37:ed:97:dc:77:e4:b8:
                    78:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:95:71:27:4C:33:FB:AE:D0:BE:80:6B:31:0C:53:B8:35:5B:5C:76
            X509v3 Authority Key Identifier:
                keyid:9A:99:69:2F:68:60:66:16:2D:6A:71:BA:5B:0D:D6:0A:F8:E9:C6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A99692F686066162D6A71BA5B0DD60AF8E9C6AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45d9CVex6MZppxX6Ndk6uR2ZyJLz8hdXyse9Vo9KD567/1/3139312e3234332e3139322e302f32322d3233203d3e20323636343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:6d:41:6e:69:58:e5:a5:99:33:79:c2:94:fa:84:45:9d:01:
         50:72:46:1e:c8:30:d7:a6:4c:9f:03:4b:a9:53:c3:75:cf:03:
         a8:87:15:e2:d9:d0:60:94:c6:17:64:85:3f:fb:16:85:7e:5d:
         ee:50:78:a5:bb:08:0a:20:d7:70:bc:91:7a:6d:a8:04:bd:a5:
         06:b1:d5:a5:d9:4e:03:9b:ca:88:73:a8:52:62:15:5d:0e:de:
         af:95:54:f5:b5:80:f1:61:6f:91:87:4a:8e:4c:87:03:b2:a9:
         61:54:e0:6c:cb:8b:b5:99:05:b5:43:c2:79:73:0e:52:3b:0e:
         a6:c7:e7:16:2f:98:b0:a2:a6:cf:ca:3f:3c:93:5a:2f:09:4d:
         df:ae:53:56:ce:4d:fe:5f:9d:8f:bf:08:21:6a:2d:f2:46:c7:
         32:5f:57:96:91:c9:82:fb:4e:b6:ae:8a:92:cc:46:7c:f5:a2:
         36:a9:54:7c:86:ff:7f:64:29:69:f0:9c:b1:ab:9a:0d:a1:af:
         7b:8f:3a:80:0c:e2:f2:41:b2:67:aa:fc:72:10:73:b7:42:b8:
         15:7e:89:be:a2:02:c2:02:fe:82:b6:8d:13:9d:bf:8f:7d:f1:
         71:40:95:e7:c7:6a:d3:03:4c:dd:ad:8b:eb:39:75:53:9e:d7:
         c2:b4:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:26:42 2026 by rpki-client