Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3332203d3e20323633353238.roa
File:                     3139312e3235332e36342e302f32322d3332203d3e20323633353238.roa (raw, json)
Hash identifier:          NVAuNr6HJ58hvTlACtwhYHxDdx1QXgA3WFJqXAgit98=
Subject key identifier:   DB:1A:21:1A:4E:CA:2C:A0:67:68:56:A3:FE:2E:0B:9A:24:0B:A5:53
Certificate issuer:       /CN=1F7B940A7F746AC83D9CDA266811C4C47B7B3479
Certificate serial:       5962576D274055F52FF5134F90BED7FD09468FA4
Authority key identifier: 1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3332203d3e20323633353238.roa
Signing time:             Thu 19 Mar 2026 20:31:17 +0000
ROA not before:           Thu 19 Mar 2026 20:26:17 +0000
ROA not after:            Thu 18 Mar 2027 20:31:17 +0000
asID:                     263528
IP address blocks:        191.253.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:57:6d:27:40:55:f5:2f:f5:13:4f:90:be:d7:fd:09:46:8f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F7B940A7F746AC83D9CDA266811C4C47B7B3479
        Validity
            Not Before: Mar 19 20:26:17 2026 GMT
            Not After : Mar 18 20:31:17 2027 GMT
        Subject: CN=DB1A211A4ECA2CA0676856A3FE2E0B9A240BA553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:e5:fe:cd:ec:c1:d7:fb:ab:c5:10:c8:59:
                    96:80:21:a6:57:80:3f:63:76:06:bd:71:88:a3:8c:
                    5f:e1:90:2f:b1:2a:54:37:6e:8c:dc:5d:f7:68:84:
                    51:00:57:90:ab:5d:54:18:4f:1b:dc:a9:52:51:28:
                    56:74:69:3a:df:d5:57:e7:7d:22:49:41:92:36:60:
                    ba:e9:c7:8b:25:46:02:16:b0:61:48:9a:78:2a:0b:
                    49:89:68:c3:ae:ad:d8:42:9d:27:4e:9a:6e:21:a4:
                    b3:c2:75:d9:66:66:a8:c8:e9:35:1e:14:19:a2:f6:
                    9f:d7:44:6f:86:8c:b6:e8:89:aa:21:9f:05:3f:af:
                    0d:9b:d3:fb:57:8b:85:5c:63:70:02:44:80:7a:97:
                    36:88:66:f3:b7:ee:3e:98:15:e7:06:40:b7:4a:b2:
                    8d:b0:70:c4:c6:4b:23:ee:ab:f9:32:d6:41:9a:04:
                    18:6c:c9:5e:72:9b:0b:88:24:32:2d:ef:79:0a:1c:
                    d5:b2:46:4f:d0:ff:44:19:84:be:8e:96:28:0c:a2:
                    7b:e9:18:01:81:0f:4d:53:1a:dd:3e:b5:c7:76:a5:
                    db:ea:ff:35:6e:2a:ed:bb:86:93:14:15:27:82:54:
                    9d:b5:e8:35:45:2e:16:da:64:25:93:50:47:90:35:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:21:1A:4E:CA:2C:A0:67:68:56:A3:FE:2E:0B:9A:24:0B:A5:53
            X509v3 Authority Key Identifier:
                keyid:1F:7B:94:0A:7F:74:6A:C8:3D:9C:DA:26:68:11:C4:C4:7B:7B:34:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F7B940A7F746AC83D9CDA266811C4C47B7B3479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/3139312e3235332e36342e302f32322d3332203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.253.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:0b:60:ec:0a:83:d2:3c:ec:1a:2d:78:f6:bc:34:bb:ec:
         8f:7a:55:2a:c2:36:e3:08:ab:d4:64:93:9a:95:65:44:2e:d5:
         f8:a8:33:fd:b5:86:90:44:27:ca:2e:af:c6:68:f7:91:ff:b2:
         e8:ac:e7:18:f5:ac:35:a7:8b:5f:7f:55:01:2d:76:73:d0:e1:
         0b:d2:88:73:99:78:3c:a0:9b:71:0a:c9:ba:4a:9e:b1:09:89:
         c4:98:51:3c:a4:bd:17:fc:a6:6d:71:a7:d5:74:46:f7:2b:c2:
         2f:cc:aa:55:09:df:d4:24:c9:64:13:4b:7f:1f:57:5f:56:48:
         ac:e3:56:ab:ff:2f:2e:46:9a:92:20:3c:48:0b:5f:d7:44:e5:
         22:8d:b6:b2:76:a8:b0:17:a3:03:07:c1:dd:53:e8:44:7c:bb:
         27:f7:f3:fb:d4:74:8c:50:01:58:d2:60:98:7a:65:f1:6e:95:
         33:7e:08:43:1b:24:9a:56:bf:b5:9b:d0:d6:e7:74:fc:14:39:
         84:e9:5f:d5:97:b9:e0:a2:8f:3f:a2:89:66:03:03:85:b3:ee:
         92:40:19:3c:63:80:19:53:df:72:8b:37:5f:2b:3c:8c:4a:d5:
         5b:3d:23:e6:db:0f:08:37:f0:51:01:ca:6d:f1:29:55:ee:f5:
         6b:c3:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:57:21 2026 by rpki-client