Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/3139312e3234302e3232342e302f31392d3234203d3e203533313432.roa
File:                     3139312e3234302e3232342e302f31392d3234203d3e203533313432.roa (raw, json)
Hash identifier:          RVsdKxX65LApCxtl7dkh2S9cN3Hq+lahqYHJkJsOkaE=
Subject key identifier:   5F:EB:2F:7A:B9:F2:AC:B1:8E:D3:9F:CB:9E:3D:EB:93:16:B8:D6:58
Certificate issuer:       /CN=CE8177047B96FEA34112F26B4BA7FF591668670A
Certificate serial:       093058DA3038DA370A868CD3BEF410D6E5033786
Authority key identifier: CE:81:77:04:7B:96:FE:A3:41:12:F2:6B:4B:A7:FF:59:16:68:67:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/3139312e3234302e3232342e302f31392d3234203d3e203533313432.roa
Signing time:             Thu 09 Jul 2026 20:29:53 +0000
ROA not before:           Thu 09 Jul 2026 20:24:53 +0000
ROA not after:            Thu 08 Jul 2027 20:29:53 +0000
asID:                     53142
IP address blocks:        191.240.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.crl
                          rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:58:da:30:38:da:37:0a:86:8c:d3:be:f4:10:d6:e5:03:37:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE8177047B96FEA34112F26B4BA7FF591668670A
        Validity
            Not Before: Jul  9 20:24:53 2026 GMT
            Not After : Jul  8 20:29:53 2027 GMT
        Subject: CN=5FEB2F7AB9F2ACB18ED39FCB9E3DEB9316B8D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:ab:ec:09:fe:b2:4e:a2:bd:13:91:1a:39:
                    dd:99:dc:bc:01:d4:ec:ef:4b:43:29:d4:68:0c:db:
                    a8:61:24:a8:8d:48:12:88:2f:20:ee:f7:69:0f:2c:
                    af:09:35:7c:4e:94:da:32:e0:14:66:bc:43:91:7a:
                    b7:a3:d0:aa:4a:07:cf:56:4f:96:ca:f6:8d:ee:d9:
                    f0:ff:19:2f:01:bc:7e:b4:a7:85:af:d1:60:52:03:
                    93:ff:ed:64:c1:90:be:4a:97:96:53:04:60:0e:55:
                    d8:51:c1:60:40:0c:84:a8:1e:0c:60:27:58:ae:98:
                    98:d1:5a:f4:57:9a:a6:07:86:29:84:72:4d:d2:07:
                    7f:31:10:c4:4f:14:0f:e4:a0:db:33:bd:d2:42:81:
                    2b:47:35:a1:e6:f5:83:e8:09:62:35:e2:dc:15:c6:
                    2b:c2:e2:f7:5f:b5:86:bf:a9:67:bb:8f:c4:9e:ea:
                    d2:b7:98:c9:cc:ce:e5:de:1c:55:03:7b:89:fc:c7:
                    47:0b:2a:35:05:84:48:2e:1d:33:55:64:87:21:a0:
                    be:07:04:44:8b:ff:cd:ec:a0:68:ad:19:8f:33:67:
                    f4:fe:99:0f:e0:e5:bb:62:3e:dd:2b:04:aa:e6:a0:
                    72:30:b3:88:9e:e4:ff:60:c9:e8:07:6a:07:25:e3:
                    4a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:2F:7A:B9:F2:AC:B1:8E:D3:9F:CB:9E:3D:EB:93:16:B8:D6:58
            X509v3 Authority Key Identifier:
                keyid:CE:81:77:04:7B:96:FE:A3:41:12:F2:6B:4B:A7:FF:59:16:68:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/CE8177047B96FEA34112F26B4BA7FF591668670A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE8177047B96FEA34112F26B4BA7FF591668670A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VX3YECTW39mgfyXLrcvs6xxtMwux9zR1wxzyVDjQezb/0/3139312e3234302e3232342e302f31392d3234203d3e203533313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:c7:df:38:ea:05:72:98:7b:bc:b6:19:ec:a4:60:bd:2f:
         83:bf:28:24:cb:0b:36:df:da:f3:1a:d2:f0:25:8a:04:f6:83:
         fe:d0:09:66:d6:70:c1:72:6c:e9:18:51:dd:a5:ed:30:4a:ed:
         f0:a6:a2:c3:24:64:e5:41:1a:31:f0:f2:0c:80:b2:62:18:aa:
         10:9c:06:bf:33:e6:39:64:41:7f:79:f3:37:d5:40:54:54:a3:
         8a:2e:78:92:91:15:77:4b:87:ac:a1:0c:31:3d:ba:50:13:bf:
         05:0e:bf:0c:c9:15:0c:c1:62:ac:b5:bc:f7:1c:94:25:16:d0:
         6c:61:73:9c:74:b3:3a:97:91:84:87:2f:33:85:e1:bf:c3:c2:
         60:51:aa:fc:1a:f6:e5:79:92:34:72:67:0e:3d:9c:52:28:14:
         58:9d:bb:ba:17:46:14:a3:33:f7:8a:32:a5:eb:ba:04:da:b2:
         14:28:2d:7d:3b:61:41:9d:a2:ae:e9:58:e3:3b:9f:2d:2b:97:
         d9:59:52:f9:51:3e:08:91:6e:18:42:ec:66:d8:ec:92:04:b5:
         0a:be:d3:39:b5:16:95:24:87:ec:46:97:7b:fc:96:dc:1a:cd:
         c0:18:0f:fc:3c:98:81:35:13:ee:4d:c1:b1:33:96:7c:85:a2:
         f5:d0:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:47:49 2026 by rpki-client