Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa
File:                     3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa (raw, json)
Hash identifier:          B1Lh3J8cKt0N+PzO27Co9RIoVyKs7v3XWs1jL5eI6i4=
Subject key identifier:   F1:A1:D4:DF:E3:77:BE:81:E7:7D:F9:A0:34:DB:3C:8F:CF:36:C3:FB
Certificate issuer:       /CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
Certificate serial:       77FC260C5B14588F11D97C1F94C1BCED633FD781
Authority key identifier: 99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa
Signing time:             Fri 17 Jul 2026 13:32:34 +0000
ROA not before:           Fri 17 Jul 2026 13:27:34 +0000
ROA not after:            Fri 16 Jul 2027 13:32:34 +0000
asID:                     267483
IP address blocks:        192.141.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl
                          rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fc:26:0c:5b:14:58:8f:11:d9:7c:1f:94:c1:bc:ed:63:3f:d7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99FE4DC5DC920594D9EDE67156A7135EA88CAADD
        Validity
            Not Before: Jul 17 13:27:34 2026 GMT
            Not After : Jul 16 13:32:34 2027 GMT
        Subject: CN=F1A1D4DFE377BE81E77DF9A034DB3C8FCF36C3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:10:1c:22:2f:c6:de:40:4c:f6:e3:ed:d8:
                    99:d0:62:5b:b4:22:ba:a0:d1:8d:55:4a:d3:31:eb:
                    de:35:d7:e6:55:e3:8d:3b:be:4e:ca:c4:77:5f:cc:
                    9d:43:21:12:97:f6:8f:2e:df:65:75:a6:43:79:14:
                    96:10:d9:e7:7c:28:e5:fd:65:4e:b4:ab:50:96:d8:
                    1c:d4:54:0d:25:7b:a1:19:92:54:14:83:f1:be:d6:
                    92:ad:9f:73:96:7d:41:1e:e4:5c:29:f5:44:ef:cb:
                    9b:5e:42:65:12:77:e3:e9:23:99:67:9b:0b:1a:cc:
                    22:a6:ea:27:42:6c:e5:de:b4:eb:a5:33:39:3f:7f:
                    2b:53:ba:32:c5:78:86:78:a2:fb:a1:1c:6f:6b:41:
                    ea:8c:85:b4:c9:a5:41:47:1e:d9:50:35:19:0b:98:
                    04:30:80:3e:66:50:2e:22:8a:6b:10:d0:68:a4:96:
                    23:6d:f4:8e:36:16:8d:83:81:3e:c9:2c:1f:95:89:
                    45:97:0f:43:55:22:05:33:ad:8e:05:81:67:f1:77:
                    e2:5a:3e:b2:07:84:22:8f:64:85:92:89:fc:f3:7d:
                    79:98:e2:98:60:1e:10:17:5d:47:a9:76:28:1f:de:
                    0e:1b:cc:b9:bd:76:9a:1b:95:aa:b8:3a:08:47:70:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A1:D4:DF:E3:77:BE:81:E7:7D:F9:A0:34:DB:3C:8F:CF:36:C3:FB
            X509v3 Authority Key Identifier:
                keyid:99:FE:4D:C5:DC:92:05:94:D9:ED:E6:71:56:A7:13:5E:A8:8C:AA:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99FE4DC5DC920594D9EDE67156A7135EA88CAADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/579mafuKr3K9MQRGQCY57NsrFac9Pj4PToTchZdwj4dX/0/3139322e3134312e3233382e302f32332d3233203d3e20323637343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:eb:69:db:1c:c3:67:a2:27:ac:2a:00:3a:16:38:e4:f7:c1:
         2f:0e:02:b6:2b:57:f9:64:e2:35:c0:ac:ec:76:aa:35:d7:78:
         36:76:b5:f7:89:2e:d0:7f:a0:cb:c9:47:95:d7:da:b9:36:9e:
         31:f3:8b:68:68:c7:14:99:d5:c8:7b:22:5b:96:97:e4:74:49:
         02:59:f1:12:f1:0c:f9:b2:31:24:76:d4:8c:c6:d9:cd:f6:66:
         9f:c0:a0:8c:4a:6f:d5:28:dd:eb:f4:bc:15:b8:bd:a7:81:ee:
         d6:3f:54:ce:d8:a2:0d:3b:55:5e:4a:b7:87:ed:71:45:42:58:
         76:a4:71:bf:83:fc:8d:b9:8d:77:e7:3b:f0:f7:44:fe:3f:c8:
         1f:c8:4b:62:1e:dc:f2:4e:95:ca:19:78:d8:8d:db:45:8e:50:
         7f:d8:56:95:77:a8:d3:1f:14:60:59:a8:09:00:7b:50:cb:27:
         d0:d4:b9:d4:a7:d6:94:a3:45:1b:d7:75:34:39:ab:35:43:4f:
         c3:d2:10:22:90:61:be:f3:e3:49:13:45:db:fe:94:56:bc:a3:
         8a:ea:45:78:8f:35:fa:0c:78:cd:39:2f:88:bd:ef:52:c5:93:
         3d:8a:b6:55:23:44:42:35:71:65:4a:f4:f5:10:b0:33:d9:32:
         07:f9:04:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUd/wmDFsUWI8R2XwflMG87WM/14EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlGRTREQzVEQzkyMDU5NEQ5RURFNjcxNTZBNzEzNUVB
ODhDQUFERDAeFw0yNjA3MTcxMzI3MzRaFw0yNzA3MTYxMzMyMzRaMDMxMTAvBgNV
BAMTKEYxQTFENERGRTM3N0JFODFFNzdERjlBMDM0REIzQzhGQ0YzNkMzRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqRAcIi/G3kBM9uPt2JnQYlu0
Irqg0Y1VStMx69411+ZV4407vk7KxHdfzJ1DIRKX9o8u32V1pkN5FJYQ2ed8KOX9
ZU60q1CW2BzUVA0le6EZklQUg/G+1pKtn3OWfUEe5Fwp9UTvy5teQmUSd+PpI5ln
mwsazCKm6idCbOXetOulMzk/fytTujLFeIZ4ovuhHG9rQeqMhbTJpUFHHtlQNRkL
mAQwgD5mUC4iimsQ0GikliNt9I42Fo2DgT7JLB+ViUWXD0NVIgUzrY4FgWfxd+Ja
PrIHhCKPZIWSifzzfXmY4phgHhAXXUepdigf3g4bzLm9dpoblaq4OghHcKSbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8aHU3+N3voHnffmgNNs8j882w/swHwYDVR0j
BBgwFoAUmf5NxdySBZTZ7eZxVqcTXqiMqt0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTc5bWFmdUtyM0s5TVFSR1FDWTU3TnNyRmFjOVBqNFBUb1RjaFpkd2o0
ZFgvMC85OUZFNERDNURDOTIwNTk0RDlFREU2NzE1NkE3MTM1RUE4OENBQURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5RkU0REM1REM5MjA1OTRE
OUVERTY3MTU2QTcxMzVFQTg4Q0FBREQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3OW1hZnVLcjNLOU1RUkdRQ1k1N05zckZhYzlQajRQVG9UY2haZHdqNGRYLzAv
MzEzOTMyMmUzMTM0MzEyZTMyMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM0MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCN7jANBgkqhkiG9w0BAQsFAAOCAQEAMutp
2xzDZ6InrCoAOhY45PfBLw4CtitX+WTiNcCs7HaqNdd4Nna194ku0H+gy8lHldfa
uTaeMfOLaGjHFJnVyHsiW5aX5HRJAlnxEvEM+bIxJHbUjMbZzfZmn8CgjEpv1Sjd
6/S8Fbi9p4Hu1j9UztiiDTtVXkq3h+1xRUJYdqRxv4P8jbmNd+c78PdE/j/IH8hL
Yh7c8k6Vyhl42I3bRY5Qf9hWlXeo0x8UYFmoCQB7UMsn0NS51KfWlKNFG9d1NDmr
NUNPw9IQIpBhvvPjSRNF2/6UVryjiupFeI81+gx4zTkviL3vUsWTPYq2VSNEQjVx
ZUr09RCwM9kyB/kEzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:59:26 2026 by rpki-client