Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          fsctAWaWSF2alFtwRmbBFlOgcurrQ8jNbU8y3UJ83zQ=
Subject key identifier:   4A:61:F6:F7:F3:58:7B:6F:F4:C6:C2:EE:3F:74:8E:BD:AF:0D:A1:30
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       31E7BC50EB5B7AACE3E425EECF22F2860A8D4970
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:02 +0000
ROA not before:           Thu 25 Jun 2026 11:55:02 +0000
ROA not after:            Thu 24 Jun 2027 12:00:02 +0000
asID:                     262784
IP address blocks:        191.241.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:bc:50:eb:5b:7a:ac:e3:e4:25:ee:cf:22:f2:86:0a:8d:49:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:02 2026 GMT
            Not After : Jun 24 12:00:02 2027 GMT
        Subject: CN=4A61F6F7F3587B6FF4C6C2EE3F748EBDAF0DA130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:bd:20:d9:ec:b1:de:f7:70:a5:2a:0d:f3:
                    ba:ee:88:62:4c:c8:19:c0:79:60:ea:3a:7c:54:77:
                    3a:35:ca:7c:a3:6a:77:5e:2b:66:99:98:d0:8a:55:
                    bc:87:64:d5:72:8a:9a:f7:14:29:2e:cf:cb:5f:4f:
                    1a:87:64:16:cb:b7:89:b7:02:ad:e3:01:85:ac:4e:
                    23:1d:bc:18:dc:0e:30:0f:c3:af:c1:bd:ea:4c:f0:
                    7f:e8:40:bb:50:cf:39:04:d4:93:db:db:c7:51:8d:
                    ce:04:5f:de:c8:58:c0:c8:4c:a5:f5:4d:97:4e:9c:
                    fa:5a:2b:26:1f:bb:57:66:08:a4:58:c8:98:e0:35:
                    dc:fc:c2:f6:85:d0:6a:b9:4d:31:00:b8:cc:c0:7c:
                    31:ba:32:a6:94:d1:a8:46:d5:0c:21:09:f1:3a:d3:
                    16:2a:59:72:0c:0f:e6:38:0c:69:f6:31:2b:be:0b:
                    08:58:13:da:7a:c6:21:49:28:67:25:52:35:da:e8:
                    32:b7:a3:1e:b2:11:e2:b4:01:1f:8a:8f:8e:03:19:
                    27:6d:09:a3:a2:59:aa:6d:ea:a2:9b:4d:c8:8d:0e:
                    43:57:86:8f:2c:ec:f9:c3:e9:0d:bc:e4:6c:ae:7c:
                    01:30:b8:5a:a0:d7:59:25:7a:50:92:8f:c4:17:b4:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:61:F6:F7:F3:58:7B:6F:F4:C6:C2:EE:3F:74:8E:BD:AF:0D:A1:30
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135332e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:fe:93:6f:74:f1:fc:65:c0:a1:c5:70:c3:9e:41:d8:0b:
         98:40:4e:a8:ca:a4:91:01:65:f3:94:b5:00:3f:fc:86:28:7a:
         2f:c4:b4:17:61:53:3a:b9:dc:1a:f1:1e:61:f6:07:fb:b5:55:
         40:de:7a:6e:31:14:2e:c9:c9:b8:66:2d:0e:17:4c:64:32:9d:
         97:4f:e8:18:7f:a6:65:ef:8d:32:01:10:74:5a:b0:de:dc:36:
         f4:a9:00:fc:c4:a2:9d:5d:b4:26:22:37:b7:39:0c:5e:03:f1:
         2e:19:59:07:5f:f8:3d:aa:95:ce:5d:cf:3e:f9:16:e4:f5:95:
         6b:fb:a3:42:cd:d9:5d:d6:54:ee:54:63:b2:60:b2:1e:d1:29:
         c8:06:17:e7:02:43:ac:85:5c:6b:c6:ff:49:39:82:b7:7f:fd:
         20:fd:0d:bc:88:8a:48:31:61:e6:2d:df:12:c5:d7:0e:a6:e9:
         38:14:6f:5a:33:f4:6d:f0:a3:43:61:dd:1a:66:87:7b:5b:ed:
         35:7f:94:dd:7a:eb:ba:18:63:c3:db:85:b2:50:38:d8:6a:ca:
         c5:c9:63:36:79:63:d1:8b:10:1c:3f:99:3e:27:fb:48:7f:12:
         f9:ba:d4:c2:dc:46:3f:1e:3e:50:95:13:2c:48:95:ec:a9:43:
         49:f9:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:36:44 2026 by rpki-client