Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          W1PVrXcquUe10ieAbb9tsFSuyFfYEa6phNadCKgKWfQ=
Subject key identifier:   8E:AC:E4:18:9F:C2:E2:D2:A6:C8:25:52:A7:B8:62:FE:D0:40:73:5D
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       1CE332F7D273B5A1BF5F80A82B36F2F2CFD7FF16
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa
Signing time:             Wed 01 Jul 2026 18:50:34 +0000
ROA not before:           Wed 01 Jul 2026 18:45:34 +0000
ROA not after:            Wed 30 Jun 2027 18:50:34 +0000
asID:                     262784
IP address blocks:        191.241.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e3:32:f7:d2:73:b5:a1:bf:5f:80:a8:2b:36:f2:f2:cf:d7:ff:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jul  1 18:45:34 2026 GMT
            Not After : Jun 30 18:50:34 2027 GMT
        Subject: CN=8EACE4189FC2E2D2A6C82552A7B862FED040735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:4c:cf:85:2d:c5:b9:ce:5a:61:96:76:d8:
                    2b:12:3a:0a:a0:81:80:52:9a:af:73:ba:3e:58:e8:
                    d1:01:a0:37:7c:d2:78:7f:eb:ac:85:a1:96:08:a3:
                    20:0e:c3:bb:e2:bd:89:8d:10:f1:13:90:55:37:43:
                    8a:b5:2b:87:09:12:22:d0:c3:a0:da:4f:05:34:1a:
                    e0:5b:21:41:54:ce:ab:41:d5:ed:c9:63:22:51:aa:
                    7a:31:bb:3a:59:75:f8:46:4d:fe:bb:c8:c4:09:c2:
                    cf:9e:63:64:25:14:28:a2:5c:4a:e5:4b:af:20:dd:
                    e9:9e:b9:58:e3:3f:e1:77:bf:21:74:44:c7:67:6c:
                    60:01:7b:3e:9f:64:e2:65:68:cf:f9:99:fc:59:87:
                    9d:6f:9b:ef:2c:90:1d:bc:a6:dd:cb:1c:93:a5:6b:
                    3c:29:ce:fd:dc:e7:3e:b3:86:2d:10:a4:55:e6:0f:
                    99:cf:6c:d3:bc:19:5f:c5:2b:92:dc:5b:1c:fa:d7:
                    59:55:2a:b3:68:bd:64:cc:23:8c:94:a6:75:64:91:
                    3c:7d:54:b7:8b:46:bf:0b:5a:25:d7:e3:e8:f1:e7:
                    25:aa:85:02:37:d7:04:50:67:b8:30:f0:48:22:d5:
                    3d:04:41:d6:a9:98:7e:e4:ac:3f:ba:22:ac:a5:ac:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:E4:18:9F:C2:E2:D2:A6:C8:25:52:A7:B8:62:FE:D0:40:73:5D
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135352e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:51:87:1b:5f:92:78:a6:84:50:d7:05:44:ed:b8:c0:0f:a7:
         3f:98:54:c3:0c:64:5b:b4:5e:fc:73:87:6b:d1:1b:b0:af:51:
         04:0f:a4:76:a7:75:18:1e:48:45:81:f2:da:35:79:e1:46:e1:
         8a:7b:98:51:78:16:de:c3:dc:10:3d:1b:06:43:e7:58:ef:61:
         e5:cf:3e:1f:cf:1e:82:bb:08:ed:aa:55:af:3d:bc:7d:8d:b7:
         49:ce:61:c7:1e:3e:65:ca:08:dd:c2:0b:71:95:07:41:61:00:
         02:b8:dc:ca:a8:fd:64:b0:cd:d3:a6:7c:6f:9b:0f:00:88:53:
         a4:5b:75:00:c6:94:78:18:85:45:ed:a4:85:34:a7:b3:3b:65:
         d2:56:6f:a7:cd:a7:eb:eb:88:55:fd:b0:fd:ec:b2:90:a9:a2:
         06:23:c7:c4:85:57:61:51:46:42:ed:b2:85:ba:86:db:62:ff:
         77:46:15:85:0b:4c:47:e4:58:cc:6e:be:89:ca:a3:8f:04:0a:
         5b:b1:27:cb:10:c4:a0:26:de:ca:17:26:b8:bf:4d:48:6c:ec:
         9a:a8:18:dd:2c:33:88:29:b3:14:64:0b:d1:da:e6:2b:f8:97:
         a7:63:4d:63:e7:d2:33:9f:2e:29:ef:84:2c:7e:e6:fd:09:e0:
         f8:33:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:29 2026 by rpki-client