Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
File:                     3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          rOSZCuM08AaBAOgU7KQY13mVQIMGYYydTvnUcwGGsts=
Subject key identifier:   1E:14:94:95:16:C8:F5:BC:B8:31:CF:8F:20:52:24:CB:A8:C5:59:E5
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       0E37A549C4AE7FFBEA11AC369DF1BBF3E34F6DC8
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:03 +0000
ROA not before:           Thu 25 Jun 2026 11:55:03 +0000
ROA not after:            Thu 24 Jun 2027 12:00:03 +0000
asID:                     262784
IP address blocks:        191.241.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:37:a5:49:c4:ae:7f:fb:ea:11:ac:36:9d:f1:bb:f3:e3:4f:6d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:03 2026 GMT
            Not After : Jun 24 12:00:03 2027 GMT
        Subject: CN=1E14949516C8F5BCB831CF8F205224CBA8C559E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:d6:0a:88:55:d9:80:79:99:4f:cb:d1:ed:
                    9f:42:fa:b9:54:0c:30:b9:01:27:ff:c6:8e:d6:7d:
                    0d:3f:85:ee:e3:d9:7e:37:0a:37:5e:e0:a8:a5:ec:
                    cd:1c:b6:c2:bb:86:d7:c1:ce:6b:06:99:bd:3a:ac:
                    0e:db:7c:8c:bc:a1:53:16:1c:4f:66:60:23:0d:44:
                    86:7f:38:a5:02:9e:43:a9:2e:31:c4:cd:d2:77:c6:
                    d7:2c:dc:07:d9:b2:e0:de:c0:d5:df:52:ca:63:51:
                    19:38:4b:86:38:73:25:f5:87:e0:61:78:d0:16:30:
                    9c:a1:52:d9:c3:42:d3:a4:2f:95:9c:6b:77:e3:d8:
                    07:c1:4b:e9:77:bd:b1:1d:ed:d1:72:1b:0c:08:f7:
                    91:aa:6e:eb:14:00:87:be:c1:e0:88:29:8d:c5:b1:
                    2f:76:91:61:9c:3f:8f:18:5d:0a:2a:93:f3:43:d9:
                    f7:dd:6f:16:7e:25:0d:f9:58:62:ba:9e:31:cf:97:
                    eb:22:7a:fe:1d:45:36:3d:4f:2f:bd:08:fb:7e:e9:
                    86:4e:f0:7a:cf:01:81:4a:84:6e:65:d7:9c:4b:cb:
                    d7:1e:ae:4b:c7:da:8e:ab:af:51:1f:8e:77:ab:ad:
                    67:03:39:7f:67:da:43:04:83:af:73:70:34:21:3e:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:14:94:95:16:C8:F5:BC:B8:31:CF:8F:20:52:24:CB:A8:C5:59:E5
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3139312e3234312e3135392e302f32342d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:c0:ee:32:75:c5:04:f9:1b:a5:e9:05:24:76:0a:6f:cc:
         c4:85:a2:a4:0e:94:95:aa:80:b4:7c:3b:eb:ce:97:0d:1a:1f:
         9a:86:4b:84:2e:c7:c0:ee:a6:b2:e2:17:87:f2:68:aa:de:a6:
         ee:0d:ee:e4:e2:87:ee:df:fb:14:63:49:01:07:d0:5e:91:09:
         43:7f:9c:05:0e:28:0d:3c:2a:e9:17:76:3d:d4:75:1e:dd:9e:
         c1:6f:15:05:9a:9a:1e:ab:3b:64:c6:ef:8e:90:82:57:02:2a:
         3a:d3:ed:36:63:43:fd:37:55:4d:b6:62:53:79:e1:41:0a:bc:
         1a:2f:26:5a:56:3f:a0:22:ec:b2:f8:7c:c9:dd:d7:ee:94:3a:
         d5:1e:c2:ab:6c:cd:47:25:a3:2a:42:3b:c0:16:ba:e4:77:be:
         d5:a1:ac:62:30:79:38:cd:5b:f5:4e:8e:9d:7c:33:5f:4b:86:
         32:63:a9:a2:a9:57:84:2a:a4:d2:74:4a:fc:b6:9e:83:fd:64:
         c7:5c:c8:5e:1e:38:82:43:d9:a9:75:ee:88:b2:a0:47:dc:e4:
         30:24:c9:54:81:9d:ac:fa:b1:80:5e:3d:d1:28:7b:d1:60:ba:
         97:9c:69:f3:02:35:54:48:b7:f0:c5:07:f8:0b:2e:dd:bb:2f:
         b6:1a:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:09 2026 by rpki-client