Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa
File:                     3138392e35312e34322e302f32332d3332203d3e20323730373235.roa (raw, json)
Hash identifier:          uJPZpGqlp2+6BM8e5FiCaFRRh4X3aiGqt7DY2Tt6jT8=
Subject key identifier:   61:99:50:3D:14:44:3E:1F:1D:18:9A:10:91:3C:77:0D:C0:3D:AE:13
Certificate issuer:       /CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
Certificate serial:       6082E40A98106C240C20B45C4B72F2D368BB0A78
Authority key identifier: 3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa
Signing time:             Wed 29 Apr 2026 14:00:00 +0000
ROA not before:           Wed 29 Apr 2026 13:55:00 +0000
ROA not after:            Wed 28 Apr 2027 14:00:00 +0000
asID:                     270725
IP address blocks:        189.51.42.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl
                          rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:39:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:82:e4:0a:98:10:6c:24:0c:20:b4:5c:4b:72:f2:d3:68:bb:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A643A755DDC15D6F86DC11230B9F76A2774D614
        Validity
            Not Before: Apr 29 13:55:00 2026 GMT
            Not After : Apr 28 14:00:00 2027 GMT
        Subject: CN=6199503D14443E1F1D189A10913C770DC03DAE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:6e:13:17:28:0c:9a:64:a3:84:c8:8c:87:
                    7f:d7:56:a7:00:1b:ae:18:b9:f2:00:21:31:b1:54:
                    87:d4:63:b7:07:da:5e:26:4a:af:6d:73:c7:47:24:
                    68:8f:d5:60:43:2b:bf:34:49:b3:d7:54:da:59:12:
                    63:f5:49:0f:bb:5e:ef:ee:ad:db:b3:a9:ec:6a:9a:
                    f3:43:41:e9:2d:1f:cc:56:22:60:d3:f9:06:d1:6c:
                    fd:3a:e4:ad:92:e1:47:2f:d5:2f:01:4a:f6:f6:b3:
                    6c:1b:5c:7a:a7:40:21:fc:49:d4:57:6e:38:91:22:
                    99:02:d2:06:5f:2a:0a:02:df:da:3d:d4:41:3c:70:
                    1f:e3:7e:3d:1d:a0:29:9d:7e:73:84:cb:51:dc:75:
                    c5:51:1b:e9:81:a7:50:45:0f:04:4d:63:6c:3c:48:
                    93:e9:a3:cd:43:fc:57:c2:7f:11:d4:03:d4:f4:e5:
                    a4:bb:fc:d9:32:7d:b1:58:59:15:a8:0c:0c:8b:4b:
                    c6:f5:09:71:8f:1b:38:37:52:d8:4e:4f:ca:06:f0:
                    fb:68:78:53:d8:4d:ff:7b:0f:02:ea:fb:a0:cb:05:
                    a0:4b:5f:b1:98:d7:a9:54:bd:ae:57:1b:35:48:42:
                    07:00:17:0e:ed:27:02:54:f5:95:db:59:61:1f:88:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:99:50:3D:14:44:3E:1F:1D:18:9A:10:91:3C:77:0D:C0:3D:AE:13
            X509v3 Authority Key Identifier:
                keyid:3A:64:3A:75:5D:DC:15:D6:F8:6D:C1:12:30:B9:F7:6A:27:74:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3A643A755DDC15D6F86DC11230B9F76A2774D614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A643A755DDC15D6F86DC11230B9F76A2774D614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ne5MqkHMk81YgaZzVcfN3kJr3AVUnZTmbnCp3iWdUKA/0/3138392e35312e34322e302f32332d3332203d3e20323730373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:83:b3:4c:26:24:85:e3:3d:ac:08:35:fd:03:f5:56:62:a4:
         0b:42:9f:ec:46:92:dc:88:b2:e2:1d:f2:fc:6c:26:8c:26:e0:
         c3:b0:a8:e2:2c:95:85:a2:ee:1e:69:36:55:cc:2d:a8:65:6a:
         18:60:89:50:84:d1:aa:32:d6:17:d8:b2:66:17:34:e2:6e:04:
         c3:b7:b4:24:08:ef:cf:dc:53:cd:48:d2:29:a6:b6:d1:ad:62:
         f7:7f:e9:92:7d:42:fb:8b:97:fb:76:76:78:4b:71:af:06:9b:
         19:d0:ef:13:61:51:63:18:b3:ce:b9:a5:f9:03:ad:83:dc:b6:
         f5:23:9d:51:3e:be:1d:13:a0:c0:ce:38:26:19:71:b5:28:90:
         ae:11:83:a5:ac:31:7b:2b:f5:10:ab:bd:c7:48:0e:11:66:b6:
         b1:63:02:b5:2f:69:f1:7d:69:46:0c:d7:dd:0e:02:a9:ac:15:
         eb:e3:82:22:cc:45:6f:6c:a4:33:6d:c0:2f:99:5f:ea:e0:2c:
         5e:64:f3:0f:b7:d3:78:88:3b:01:08:e6:37:66:14:ef:b7:88:
         7d:27:d8:73:35:40:73:11:c6:78:8c:11:24:47:3e:3c:ed:a6:
         64:1f:ed:72:aa:79:73:6c:05:de:27:f5:d1:dc:06:06:a3:83:
         0f:95:06:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:36:43 2026 by rpki-client