Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa
File:                     3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa (raw, json)
Hash identifier:          LQ7x5KpsSTNYv+XaOfo9m2p6hIHYACLMd3PIYhHf89w=
Subject key identifier:   98:21:00:AF:E9:02:8B:8E:C3:83:D5:F2:64:87:55:A7:E3:82:0D:E9
Certificate issuer:       /CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
Certificate serial:       1E1891572779D1A6A679AFE6027169B8467446B2
Authority key identifier: 01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa
Signing time:             Tue 28 Apr 2026 23:42:52 +0000
ROA not before:           Tue 28 Apr 2026 23:37:52 +0000
ROA not after:            Tue 27 Apr 2027 23:42:52 +0000
asID:                     270652
IP address blocks:        190.11.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl
                          rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 16:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:18:91:57:27:79:d1:a6:a6:79:af:e6:02:71:69:b8:46:74:46:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0144765DC0A3D9D0EADA845625C5E7F14C552690
        Validity
            Not Before: Apr 28 23:37:52 2026 GMT
            Not After : Apr 27 23:42:52 2027 GMT
        Subject: CN=982100AFE9028B8EC383D5F2648755A7E3820DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:5f:c0:64:a2:98:6e:5a:ba:45:27:17:53:
                    e5:94:56:10:3b:d4:b4:51:f2:b8:54:68:19:b5:d1:
                    ce:0c:75:56:63:f2:6d:77:fb:f0:d3:82:59:11:67:
                    63:9f:6b:3c:01:32:0d:c9:b9:5e:dd:ba:9b:f4:9a:
                    a1:75:72:e0:95:3d:de:bd:86:12:de:78:00:cf:ff:
                    3c:f3:df:1e:6a:38:e3:20:73:0c:0f:1a:38:c9:67:
                    ac:75:bc:c3:1e:da:f8:dc:b4:2d:4b:4a:8f:bd:13:
                    d0:05:9e:56:a3:8a:c0:2e:9d:35:df:c2:07:85:47:
                    29:19:b5:af:5d:86:2b:d5:72:12:ff:56:09:fb:4c:
                    13:68:a3:c1:d9:21:26:ef:db:b7:ae:06:77:65:1a:
                    36:67:ce:4b:55:65:15:19:2a:33:20:f1:1a:fd:3c:
                    2e:1c:94:ea:8f:15:3d:9f:14:a4:2c:78:8a:3f:8d:
                    9a:5a:c5:d7:a7:e3:00:50:7b:89:c1:e6:cd:e8:53:
                    b9:08:03:17:2a:9c:12:c5:f7:8b:b0:cc:9a:de:63:
                    c9:77:d7:6e:c2:35:a9:af:49:35:79:04:77:30:03:
                    1a:00:43:f3:84:c2:6d:ea:0b:1b:e1:86:3f:6c:ab:
                    5d:17:74:0f:65:d3:70:b5:db:c0:9d:02:b9:6a:46:
                    62:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:21:00:AF:E9:02:8B:8E:C3:83:D5:F2:64:87:55:A7:E3:82:0D:E9
            X509v3 Authority Key Identifier:
                keyid:01:44:76:5D:C0:A3:D9:D0:EA:DA:84:56:25:C5:E7:F1:4C:55:26:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0144765DC0A3D9D0EADA845625C5E7F14C552690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/1/3139302e31312e3230392e302f32342d3234203d3e20323730363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ab:00:f0:ee:96:00:a4:67:a4:a8:ad:d5:51:80:ba:bc:da:
         6f:e0:87:a8:46:6a:39:18:f6:e4:a6:83:73:b0:4e:ae:9d:89:
         12:9b:bf:f4:c7:8b:c5:f5:81:85:14:2f:74:5b:a1:ec:1a:fa:
         92:63:ac:06:cb:65:23:d6:2c:eb:cc:22:6f:64:7e:82:c5:0e:
         8a:72:0c:bd:bf:63:76:81:af:9c:27:a4:42:0c:d5:45:07:9a:
         fa:b4:d3:0e:ff:10:29:52:bb:62:34:9d:34:e7:4d:e9:c5:d4:
         c2:55:c0:b5:77:bb:27:02:7a:fb:bc:1d:d0:31:aa:3d:2b:0e:
         6b:3c:6f:53:71:9a:7e:53:2d:fd:24:83:8d:45:95:21:72:31:
         74:3b:f2:95:04:3c:b0:05:8d:b8:23:be:d1:a8:70:c5:7a:83:
         f4:f2:83:0b:e6:a7:cd:45:27:b1:54:b8:09:1d:e7:76:79:bc:
         9e:20:1c:bb:b8:13:ce:2c:32:64:e6:20:e7:3b:e4:6e:1f:ae:
         04:d4:3e:db:b6:5b:42:85:f1:b1:1a:f1:97:3d:26:84:fe:be:
         63:f5:98:5c:5f:e7:8d:2d:49:2e:f2:ec:99:64:80:a5:13:aa:
         5a:ab:ce:47:53:ba:04:3f:c2:56:42:7c:42:70:b6:13:ad:92:
         7e:b8:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:10 2026 by rpki-client