Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          w5UD5iEJ5ozwKAUCgYBqgSVtvu8KLq8Jd5uV7hKny4U=
Subject key identifier:   A8:9D:AC:90:79:52:BB:60:B0:29:FD:74:AC:DC:54:8E:8B:D9:1F:17
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       64F55022BACB74A888CA6345B621B6BC72257F7D
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:00 +0000
ROA not before:           Thu 25 Jun 2026 11:55:00 +0000
ROA not after:            Thu 24 Jun 2027 12:00:00 +0000
asID:                     262784
IP address blocks:        191.241.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f5:50:22:ba:cb:74:a8:88:ca:63:45:b6:21:b6:bc:72:25:7f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:00 2026 GMT
            Not After : Jun 24 12:00:00 2027 GMT
        Subject: CN=A89DAC907952BB60B029FD74ACDC548E8BD91F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:58:c1:db:9d:bf:37:dc:18:43:0e:f6:12:
                    42:bf:02:16:60:3a:97:54:54:99:3c:fe:0c:82:46:
                    be:39:0c:00:36:45:70:ab:cf:8c:6c:58:90:81:11:
                    56:3c:a4:40:78:54:2f:f5:fd:9a:5b:fc:6a:9c:78:
                    51:e1:50:dd:23:dd:cc:5a:1c:d1:b3:7e:c8:bb:00:
                    14:e8:85:00:a9:1d:fa:7a:28:70:18:eb:ba:46:79:
                    37:80:c8:09:e9:44:ca:f7:8e:53:98:28:e7:a9:ab:
                    8a:ab:7f:4b:c6:29:7a:af:19:9f:37:80:f1:12:79:
                    70:0b:40:fb:ef:c1:4f:40:28:85:0c:d3:2c:fd:5b:
                    99:48:0d:30:22:16:ed:30:4a:01:c6:a4:92:d3:af:
                    72:08:33:a0:6b:f8:e3:9b:17:9d:47:04:95:54:09:
                    c1:11:52:07:b0:1c:f8:34:92:86:c5:ac:0e:ae:a9:
                    00:00:17:54:38:1b:4e:fb:e5:a2:ad:dd:cf:d1:a6:
                    d7:a2:84:cf:ab:1d:b8:52:dd:00:a1:c7:e3:3d:0f:
                    6f:a7:f7:57:64:dc:4e:5e:86:e2:96:1b:aa:ad:2a:
                    ad:f9:57:8f:80:05:b8:fd:3a:52:23:f2:80:f1:65:
                    66:2d:d2:49:49:a0:52:f9:93:5a:57:da:c3:0e:bf:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9D:AC:90:79:52:BB:60:B0:29:FD:74:AC:DC:54:8E:8B:D9:1F:17
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134352e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:25:1d:65:74:b3:99:12:91:4f:a5:e4:79:df:a2:69:94:
         2a:2a:03:15:2f:b8:9c:44:4d:e9:c8:c5:68:d7:4d:e1:e1:04:
         a9:c1:b5:14:da:24:f6:15:c0:29:92:30:6f:aa:36:74:8a:5e:
         c0:75:db:f9:fb:f3:6c:ec:21:4e:57:7b:24:ad:2f:e9:1f:66:
         db:ec:9c:fc:be:a0:68:a5:f8:bb:56:be:84:c1:9a:04:80:f7:
         c9:0d:36:55:bc:e6:76:76:2a:52:ae:1c:e9:7a:73:a1:dc:2f:
         2f:fd:ba:c2:8d:83:d6:30:aa:de:2d:20:cf:20:8b:94:49:ef:
         75:ad:1e:f2:ec:7d:96:5e:d5:60:25:61:10:50:c6:01:de:59:
         92:32:91:bb:a8:ea:0b:1f:75:94:11:bf:96:77:fe:4c:95:0b:
         59:b3:26:2d:d9:ad:ec:a5:73:0c:56:fe:2b:0f:45:af:54:eb:
         da:88:b5:38:66:14:f3:18:d1:51:30:a6:99:e0:a0:7b:45:ac:
         15:79:d9:3b:5f:ef:f6:f6:1d:44:af:db:1a:d1:f5:aa:46:06:
         dd:4b:df:94:11:34:9b:f5:ab:38:70:e5:f3:e4:f9:3e:02:f3:
         28:aa:05:44:79:df:8c:45:18:ad:96:f2:e4:b5:fc:84:b8:e3:
         dc:db:3e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:20:13 2026 by rpki-client