Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/3139312e3136302e33362e302f32322d3234203d3e20323732373230.roa
File:                     3139312e3136302e33362e302f32322d3234203d3e20323732373230.roa (raw, json)
Hash identifier:          8Dk9+JAB9UnesqsRD5GfJw/PspdHTykl3YQ6XnkN4NQ=
Subject key identifier:   B3:A2:77:5C:80:B6:EE:20:BB:62:E9:AC:86:45:DA:AB:81:2B:2A:30
Certificate issuer:       /CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
Certificate serial:       41A37C5F543C9E9E81B0D698026FC3F386568123
Authority key identifier: 5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/3139312e3136302e33362e302f32322d3234203d3e20323732373230.roa
Signing time:             Fri 13 Mar 2026 12:21:42 +0000
ROA not before:           Fri 13 Mar 2026 12:16:42 +0000
ROA not after:            Fri 12 Mar 2027 12:21:42 +0000
asID:                     272720
IP address blocks:        191.160.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl
                          rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a3:7c:5f:54:3c:9e:9e:81:b0:d6:98:02:6f:c3:f3:86:56:81:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DB9D1112BE2979B659023FF1013B1891DF0BC2F
        Validity
            Not Before: Mar 13 12:16:42 2026 GMT
            Not After : Mar 12 12:21:42 2027 GMT
        Subject: CN=B3A2775C80B6EE20BB62E9AC8645DAAB812B2A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:fb:78:fb:7d:ea:f7:94:bb:96:8c:bf:26:
                    b8:35:dd:91:f5:ba:93:68:0e:77:e2:d8:fc:0c:ce:
                    23:ee:31:a2:b0:c3:b7:c3:9f:a1:8a:64:77:19:48:
                    fb:72:5c:ef:5e:a8:de:a8:8d:6b:97:6c:62:b3:71:
                    2f:ad:ed:86:ed:25:2d:74:77:8a:ee:0b:25:c2:45:
                    78:0d:47:52:0d:f3:26:20:8a:b6:89:c4:20:f5:cb:
                    79:da:41:bd:23:34:59:f9:55:e5:e3:67:d6:9e:9f:
                    a6:37:de:bc:26:03:1e:0f:bd:0e:0d:b5:73:a8:06:
                    c2:c1:e3:20:6c:c3:81:c1:d6:c3:07:5a:57:ff:1f:
                    1f:1c:da:81:73:0d:0c:0a:4d:a6:91:07:b1:0e:2c:
                    05:7d:b8:5f:2a:57:bf:12:41:8d:3c:d3:97:32:3f:
                    8c:ca:2c:36:55:5d:50:f2:fa:dd:e2:dd:56:3b:79:
                    67:a0:06:3e:fe:77:a0:06:f3:e4:b2:d4:a7:84:6d:
                    59:29:51:ba:74:f5:0d:a2:dd:c1:a2:63:59:cd:3c:
                    8e:f9:e6:b1:27:32:fc:e3:2a:9b:9e:63:13:49:2d:
                    a2:26:2b:bb:cf:b6:65:65:19:87:f3:52:1e:7e:1a:
                    19:ca:67:fd:49:c5:27:bf:73:a7:ae:48:2c:31:23:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:77:5C:80:B6:EE:20:BB:62:E9:AC:86:45:DA:AB:81:2B:2A:30
            X509v3 Authority Key Identifier:
                keyid:5D:B9:D1:11:2B:E2:97:9B:65:90:23:FF:10:13:B1:89:1D:F0:BC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DB9D1112BE2979B659023FF1013B1891DF0BC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6EwDWDTTv7jSybESZWvVsyZguVFmwvVTBHenUwawiF5z/0/3139312e3136302e33362e302f32322d3234203d3e20323732373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.160.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:26:7a:92:d9:af:87:c6:dc:5f:1c:b9:3c:21:b1:6c:b9:4c:
         45:66:48:24:7d:ff:46:e5:7d:ed:9f:5e:fa:47:4d:c8:a8:fd:
         27:04:36:b6:ec:4e:6f:df:20:55:b7:5a:d6:b6:53:b4:1a:06:
         4a:d9:f0:8c:41:f3:fd:73:36:e6:ce:16:d4:46:39:3f:4d:9e:
         22:f7:73:71:53:68:a4:f2:ed:c8:2c:22:19:bb:4a:9a:86:e4:
         41:87:0e:65:9e:10:ba:80:9a:60:3c:88:03:3d:ba:3b:7a:b8:
         25:0a:c1:68:32:1a:fc:a8:98:15:02:c2:49:53:81:57:10:9e:
         6e:f3:01:dc:8c:48:6e:53:97:7f:94:77:e2:da:84:2e:5e:63:
         d6:bd:4d:e4:f9:a6:34:de:3f:e0:29:50:77:f6:e7:2b:15:10:
         87:9f:b0:72:17:df:81:6b:8a:5c:2c:3f:3a:3e:1b:90:66:73:
         96:c3:dc:7a:b0:74:c1:0e:d9:66:44:e8:ad:f8:d5:a9:2d:10:
         d5:31:0e:87:fc:ee:38:9d:a6:1a:6c:04:12:b2:4a:e9:f1:3e:
         d0:1d:5c:18:5c:5a:71:dd:bc:1f:26:74:74:8a:8d:05:3a:79:
         e1:c2:5b:d9:e8:d7:63:98:c0:70:3d:9a:66:b6:2a:04:aa:10:
         f5:8f:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:20:06 2026 by rpki-client