Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa
File:                     3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          4gzjnHEhsPZBbHvJRjeqgvJmfHgV9y5ycFPQaSVzn80=
Subject key identifier:   E1:1E:24:16:79:2E:80:9F:84:38:B9:50:4C:C2:DA:2F:64:0D:D8:5E
Certificate issuer:       /CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
Certificate serial:       1055F365C70B457EEEEDECA83EBD1021BD5F42EC
Authority key identifier: 65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa
Signing time:             Wed 06 May 2026 12:23:20 +0000
ROA not before:           Wed 06 May 2026 12:18:20 +0000
ROA not after:            Wed 05 May 2027 12:23:20 +0000
asID:                     52700
IP address blocks:        191.240.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:55:f3:65:c7:0b:45:7e:ee:ed:ec:a8:3e:bd:10:21:bd:5f:42:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
        Validity
            Not Before: May  6 12:18:20 2026 GMT
            Not After : May  5 12:23:20 2027 GMT
        Subject: CN=E11E2416792E809F8438B9504CC2DA2F640DD85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a0:98:49:24:f3:4c:a5:86:ef:09:09:fa:1f:
                    13:29:5d:67:b9:0c:e8:98:b1:b1:fc:b6:89:6b:07:
                    3d:de:d3:f0:a9:42:59:d7:b7:f5:53:c6:01:4e:97:
                    12:fd:41:16:c0:da:78:d8:83:be:00:e4:36:83:1e:
                    12:76:5d:e3:64:e2:e7:0e:8c:d9:ca:0e:8b:77:fd:
                    c4:7d:22:3f:9c:ee:5c:1f:79:a6:6a:7e:f8:cd:2a:
                    e5:26:6e:b4:58:f7:cf:be:a2:cf:f4:4b:eb:ae:43:
                    c7:57:4b:e5:9b:9b:cf:48:b8:61:97:55:18:0c:06:
                    5d:e1:5c:88:bf:ee:a9:2d:d7:3b:d0:ab:ad:b8:80:
                    14:01:f9:55:ca:33:cb:17:e2:cc:ac:46:ba:59:98:
                    02:3f:64:05:5a:cd:20:e6:6e:a2:89:60:a1:c5:91:
                    16:4c:84:eb:3d:d8:8f:8c:55:d8:b9:d0:0a:a0:38:
                    3d:30:94:d4:4a:b1:90:95:06:c4:d5:fa:9a:38:e0:
                    5e:7a:83:e8:46:0c:f2:1e:e0:c8:d9:9d:0a:f5:f9:
                    ba:03:94:fc:59:8e:f1:0c:6e:d8:3f:91:71:7b:9f:
                    5a:97:9b:02:da:a2:53:b1:7d:f9:39:86:a4:19:a8:
                    5b:32:86:47:c3:13:b0:c6:aa:31:cb:84:e5:eb:75:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:24:16:79:2E:80:9F:84:38:B9:50:4C:C2:DA:2F:64:0D:D8:5E
            X509v3 Authority Key Identifier:
                keyid:65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3139312e3234302e3136302e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:ff:09:dd:21:c8:a1:7c:5b:f5:7b:00:c9:9f:15:6f:3c:04:
         a8:a5:1a:ec:c4:39:12:62:89:7a:f6:67:5f:09:f9:a5:b4:85:
         fe:34:37:e2:4c:96:dc:c4:c2:65:cf:8c:db:e5:dd:21:dc:b6:
         7e:ae:84:53:cb:fc:49:93:32:3c:45:34:ed:f4:5c:45:9c:4a:
         58:60:aa:ce:21:50:ce:a1:7c:cf:6f:25:98:e1:e4:ce:7c:10:
         81:b9:07:e4:32:6a:68:78:2d:f5:82:81:5a:6a:c4:8c:df:9e:
         40:6a:0f:70:05:e1:6e:16:4e:15:7f:fc:d9:87:e7:b5:6a:7e:
         c4:c4:e7:8b:15:16:4c:d6:a8:ba:25:b1:90:47:ec:52:3a:ab:
         3f:55:fb:17:55:f8:e8:8d:c0:44:7d:93:b6:16:b8:31:92:2a:
         2f:a0:30:2e:0b:0f:c7:0a:c1:49:e1:19:1c:fe:84:38:ea:ab:
         20:a2:6d:55:2e:f2:91:69:95:c1:d4:12:24:38:82:d2:4a:0c:
         a7:41:4f:d5:d4:a4:62:0b:1b:c3:c1:ad:ca:9a:a6:7a:eb:c1:
         d2:fa:f6:6e:72:35:45:6f:ca:2c:0a:6c:65:f1:47:32:4c:29:
         e5:2e:9d:59:bb:1e:98:44:d2:98:c4:b0:19:5f:76:e8:55:21:
         d3:91:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:06:22 2026 by rpki-client