Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          X1cuicW13631xj1ryvMUFu2KEqqD7lBsPdYnyIQxwwQ=
Subject key identifier:   84:CC:1D:13:C2:78:77:6E:AB:5C:19:34:57:36:8A:4B:0F:7D:E9:D5
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       767D9958D3B8DF13C861CEE234F8DBE651BB99E0
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:04 +0000
ROA not before:           Thu 25 Jun 2026 11:55:04 +0000
ROA not after:            Thu 24 Jun 2027 12:00:04 +0000
asID:                     262784
IP address blocks:        191.241.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7d:99:58:d3:b8:df:13:c8:61:ce:e2:34:f8:db:e6:51:bb:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:04 2026 GMT
            Not After : Jun 24 12:00:04 2027 GMT
        Subject: CN=84CC1D13C278776EAB5C193457368A4B0F7DE9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:fb:11:1b:18:1f:04:fa:94:4d:a8:6f:95:
                    54:59:76:ef:44:2b:d8:d8:c9:20:9d:31:3c:9e:03:
                    08:ca:70:0e:23:4a:f6:e0:c2:3b:f9:ef:bb:8f:6b:
                    a8:b2:fc:a6:e2:fc:fe:e0:1e:8b:86:aa:70:09:6d:
                    e0:69:a7:c7:46:eb:32:40:e5:36:7d:4f:5a:1c:4b:
                    ac:11:3d:4f:71:83:0c:37:68:e9:f2:d5:f7:13:77:
                    3b:e2:78:2a:18:ca:84:4b:61:b8:20:52:14:b8:02:
                    89:b5:7b:f9:3e:17:26:ee:4c:90:63:70:f9:0f:da:
                    7c:f2:2a:a4:06:b0:24:7f:52:a2:8a:e2:13:ce:99:
                    db:17:72:dc:91:9b:a1:94:4e:13:67:5b:40:63:07:
                    a4:df:50:11:b0:e3:3e:56:c0:70:0a:b5:8b:54:bd:
                    6d:54:28:bd:5e:29:9d:80:e9:4a:19:52:88:2d:5a:
                    b0:e4:7a:72:5f:d3:63:13:f7:40:20:74:61:74:4d:
                    31:5a:57:9f:be:57:ea:52:b8:ab:07:ef:a4:3e:f9:
                    8d:7b:ba:60:53:ed:f9:d2:d2:b0:d2:ac:98:1d:04:
                    b4:4f:da:71:1e:93:28:ac:b1:84:67:df:bf:cb:64:
                    7e:62:3c:e7:4f:56:86:70:88:52:d4:91:39:ed:0e:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:1D:13:C2:78:77:6E:AB:5C:19:34:57:36:8A:4B:0F:7D:E9:D5
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3134392e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:02:53:45:ac:ce:19:45:26:31:02:44:bf:8f:79:c9:e9:bb:
         09:1c:6e:ac:71:7c:d8:89:21:b8:13:47:94:8a:b0:1a:87:b0:
         78:95:18:51:d1:d1:e8:25:d5:fa:59:68:08:7b:25:c1:7e:a3:
         99:1a:b8:b4:45:52:88:ce:cf:10:67:76:ef:90:d2:1c:d7:a2:
         17:02:79:83:a7:49:a8:49:79:e0:3f:9f:8e:18:0e:78:98:f2:
         0d:06:2d:a4:d3:c1:93:f6:95:31:28:14:a5:a6:0a:e2:e9:71:
         8e:a9:77:58:71:af:4b:bd:db:d6:80:5b:ae:f8:1d:29:ac:2f:
         1e:fe:d8:60:26:db:4e:25:28:5a:f9:ed:4f:7e:4f:16:7a:a7:
         ec:b9:cd:92:48:0f:31:4c:ce:d7:91:36:f2:7d:82:44:c7:db:
         c0:ab:48:a4:8b:7b:f6:c3:62:f1:38:43:1c:08:64:a1:c6:84:
         f2:dc:7c:ce:6f:a1:e6:d5:d1:ea:ad:32:74:9a:bd:40:93:c3:
         be:1c:1e:3a:79:6d:c3:da:22:2c:85:d5:fc:02:78:ad:4b:f5:
         7f:92:3e:82:d7:70:e8:67:00:63:6f:78:f7:72:1a:d6:dc:4e:
         02:f9:9b:77:a1:cc:a3:5e:a7:44:a7:12:dd:a8:01:63:09:9f:
         3b:0c:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:11 2026 by rpki-client