Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          pWTgWjPWP/aUhgkhm6agXBHOXHO/Vdt0OewWlMnvxRo=
Subject key identifier:   D4:DB:66:E6:44:65:ED:AA:F0:57:46:6E:61:08:7F:EF:3E:61:71:5B
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       3243DC6CD0E6D233770F24D3A16D36037BE5E76B
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa
Signing time:             Wed 01 Jul 2026 18:50:21 +0000
ROA not before:           Wed 01 Jul 2026 18:45:21 +0000
ROA not after:            Wed 30 Jun 2027 18:50:21 +0000
asID:                     262784
IP address blocks:        191.241.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:43:dc:6c:d0:e6:d2:33:77:0f:24:d3:a1:6d:36:03:7b:e5:e7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jul  1 18:45:21 2026 GMT
            Not After : Jun 30 18:50:21 2027 GMT
        Subject: CN=D4DB66E64465EDAAF057466E61087FEF3E61715B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:1e:d5:02:89:2f:33:60:ee:99:ef:cc:0d:
                    58:d8:00:0c:67:72:80:27:67:3c:42:a3:83:2e:51:
                    64:11:0c:90:53:d0:e1:20:5d:ec:4d:cc:c4:88:32:
                    84:4c:8b:5e:0d:e4:d0:f6:18:a5:2a:c1:62:00:6c:
                    3d:90:67:c2:ca:ea:ad:f5:97:a2:d1:3b:7e:75:04:
                    a9:4f:47:bd:b7:22:d0:df:36:ac:e9:73:c8:0a:e8:
                    1b:1c:f4:02:22:44:df:96:c6:4b:a4:63:f1:e1:44:
                    39:1c:43:b1:77:ed:a4:11:37:3f:74:6f:ef:00:bc:
                    8e:ed:98:d5:7d:4a:de:91:6a:1e:05:0f:06:d2:8a:
                    3f:9d:75:93:d9:10:26:10:44:fe:7e:cf:0b:8f:65:
                    da:86:55:3d:4f:e5:9a:57:45:ff:01:27:5b:01:51:
                    b4:99:d0:1f:6f:52:2f:d1:91:d2:e5:3d:db:b5:8e:
                    72:fe:b7:2a:75:25:a9:04:a8:a3:78:e4:6b:69:5c:
                    d9:d1:f1:57:17:a8:cd:b1:ce:f1:f2:63:b7:d0:69:
                    ef:7e:36:2c:1c:7f:49:29:ec:52:98:30:a7:4e:b8:
                    fe:c1:ef:d4:c4:90:c5:54:57:cc:8b:6b:69:6c:9d:
                    cd:48:a5:01:32:09:b0:3d:37:ad:15:ea:43:62:04:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DB:66:E6:44:65:ED:AA:F0:57:46:6E:61:08:7F:EF:3E:61:71:5B
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135342e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:00:5a:c8:86:fc:c8:9e:b0:da:35:f3:cd:56:03:54:16:c3:
         c7:01:e2:89:1e:40:f4:26:54:67:21:f3:6f:06:3d:a7:e7:21:
         aa:83:83:77:17:f5:8f:5c:8a:f6:ce:78:f2:0f:93:b3:8a:8b:
         ab:8d:e3:2e:08:23:b6:5a:04:47:3a:d7:8b:c7:97:42:96:33:
         e2:53:48:7f:eb:2a:14:4c:73:4c:c5:be:cb:be:16:70:a7:40:
         1f:40:8c:4a:a0:34:46:8a:64:b1:7e:97:ee:3a:fe:38:7d:7c:
         7a:b5:49:22:8b:8a:c6:ad:30:1d:73:6e:e7:50:d7:ae:18:66:
         60:94:e9:c5:98:a2:7b:90:5f:ee:a5:d0:8c:ea:96:22:46:64:
         8f:aa:a4:1d:26:c6:4e:1c:87:1d:7c:f2:da:8d:9d:d4:1a:39:
         2c:79:74:24:ee:13:1e:a2:f1:d1:77:54:01:3f:ce:93:5c:10:
         c3:95:84:c0:82:3a:70:fd:d2:7d:ed:83:78:75:7c:c0:7e:d8:
         0d:f1:28:2f:91:65:b4:ab:a0:f0:3c:4b:93:40:d4:32:c1:45:
         c4:0d:df:60:11:44:4f:77:67:04:ae:f6:5f:c7:ce:2f:d3:e0:
         fc:4d:83:46:f3:02:3b:8d:e4:25:3b:28:7b:c5:79:01:2d:29:
         f0:97:dd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:28 2026 by rpki-client