Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa
File:                     3139312e372e3138342e302f32322d3332203d3e20323633333238.roa (raw, json)
Hash identifier:          7ggHqaf4fKkXPZNeQVOV3TOjhb/c3HcEGUiehvmCjkE=
Subject key identifier:   D8:D7:DE:37:A0:C9:64:2B:0C:C7:3D:14:69:C5:88:F1:72:C9:36:32
Certificate issuer:       /CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
Certificate serial:       1695E8322BC2BFFB9CEA361B86C05B5E7E43DBD5
Authority key identifier: 2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa
Signing time:             Tue 21 Jul 2026 13:53:28 +0000
ROA not before:           Tue 21 Jul 2026 13:48:28 +0000
ROA not after:            Tue 20 Jul 2027 13:53:28 +0000
asID:                     263328
IP address blocks:        191.7.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl
                          rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:95:e8:32:2b:c2:bf:fb:9c:ea:36:1b:86:c0:5b:5e:7e:43:db:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC
        Validity
            Not Before: Jul 21 13:48:28 2026 GMT
            Not After : Jul 20 13:53:28 2027 GMT
        Subject: CN=D8D7DE37A0C9642B0CC73D1469C588F172C93632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:cf:2d:0b:63:9e:ce:71:ff:ff:e3:e2:2e:
                    c6:66:4b:9a:9f:e0:2e:f0:7f:ce:bb:66:6c:ad:29:
                    cd:0d:5c:21:e3:22:33:cc:3e:8d:59:fd:d7:fe:73:
                    bf:48:30:91:18:9b:06:f9:ff:11:44:28:64:57:70:
                    0a:4d:15:33:03:ea:20:d1:73:07:70:55:50:52:9c:
                    0b:73:a0:8d:f1:8f:e6:76:9f:bc:6f:1b:10:72:8e:
                    d7:ae:0b:cc:f8:d1:e9:0b:e6:65:36:36:4a:3c:d6:
                    97:ff:e7:05:ef:36:8d:2f:ef:81:52:b4:de:fc:bc:
                    a4:8c:ec:2d:d1:ea:83:04:6c:31:bb:6c:b1:b0:d1:
                    cb:54:a9:ed:29:67:d2:26:bb:aa:70:0b:10:bc:63:
                    f4:68:6d:a4:e5:1c:02:44:62:de:6e:35:c6:ca:80:
                    37:d6:a3:4d:0e:ac:4a:8b:dd:10:5a:dc:21:a8:6c:
                    14:a5:79:1d:90:89:fd:95:bd:36:3a:0d:71:80:82:
                    28:a1:a2:54:2c:14:fe:b4:ef:38:58:f9:95:b0:30:
                    9b:61:35:42:dd:10:1a:21:3c:2c:3c:58:60:53:e9:
                    0e:e9:d5:af:8b:33:83:d8:ad:9b:6a:4d:ef:1b:66:
                    75:59:c0:4d:71:81:56:72:7d:29:ec:82:78:02:89:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D7:DE:37:A0:C9:64:2B:0C:C7:3D:14:69:C5:88:F1:72:C9:36:32
            X509v3 Authority Key Identifier:
                keyid:2E:B5:29:B0:ED:AE:44:7E:3F:0B:C4:18:52:21:ED:03:94:CF:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EB529B0EDAE447E3F0BC4185221ED0394CFC7DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ELhdCagDhRdrzrw6h4Ya1CqJFqcAKmwQTLQS9U3Gy2X/0/3139312e372e3138342e302f32322d3332203d3e20323633333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:c8:43:44:52:7c:25:b5:66:78:73:ee:b5:57:6c:55:8b:
         ad:0b:48:9e:76:23:53:0a:e2:0f:13:1a:d7:5e:35:a0:30:c4:
         7a:bc:4d:08:08:0f:fa:76:9c:da:e4:59:2b:c5:63:9a:f3:c5:
         b3:77:2d:1b:1e:bb:9c:d9:a0:aa:41:11:e4:24:8c:64:74:90:
         0a:59:f7:40:50:9f:e4:2b:3b:d9:28:ea:85:98:48:b2:58:0c:
         5f:d0:97:4a:3a:ab:3b:f0:91:3d:70:bc:f6:78:1e:8d:19:73:
         28:b0:df:35:d7:bb:27:5e:59:93:f9:49:3e:ab:e9:30:c6:32:
         db:1b:40:00:f3:3d:80:22:79:d0:dc:c3:99:eb:6d:e2:7c:92:
         07:13:ca:f1:cb:3c:52:ad:8e:a4:0e:e4:ca:9f:19:cd:6a:ca:
         a7:8f:81:0f:b8:67:27:16:04:03:0a:f9:bf:d5:62:8a:df:c8:
         29:27:a2:07:77:2f:ea:4a:2b:3b:f4:23:4e:dc:2d:d8:58:1a:
         0c:9f:49:49:5b:42:73:8e:51:a7:51:a1:0f:5d:ee:0a:03:19:
         e5:c5:51:8c:7c:f1:36:d8:79:07:65:64:b2:6a:9e:6d:33:47:
         b0:03:ee:0a:19:de:eb:d6:35:c4:09:9b:b2:cb:a5:ab:f3:b0:
         92:2d:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:29:25 2026 by rpki-client