Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231302e302f32332d3234203d3e20323633343831.roa
File:                     3139312e3234322e3231302e302f32332d3234203d3e20323633343831.roa (raw, json)
Hash identifier:          fSieT2paYbo1hJpIjMJVsTBtWGW7FIAR1WOO7V8JNJo=
Subject key identifier:   91:FB:AD:D0:10:BD:85:CB:B6:ED:4F:A8:CB:EC:9A:E3:34:DE:EC:14
Certificate issuer:       /CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
Certificate serial:       732002BC1E19E2A45B86B2CCD0FF790D7F4DD5B8
Authority key identifier: 2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231302e302f32332d3234203d3e20323633343831.roa
Signing time:             Wed 14 Oct 2026 18:19:38 +0000
ROA not before:           Wed 14 Oct 2026 18:14:38 +0000
ROA not after:            Wed 13 Oct 2027 18:19:38 +0000
asID:                     263481
IP address blocks:        191.242.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl
                          rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 05:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:20:02:bc:1e:19:e2:a4:5b:86:b2:cc:d0:ff:79:0d:7f:4d:d5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
        Validity
            Not Before: Oct 14 18:14:38 2026 GMT
            Not After : Oct 13 18:19:38 2027 GMT
        Subject: CN=91FBADD010BD85CBB6ED4FA8CBEC9AE334DEEC14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:7e:13:a2:f7:78:d8:f9:66:8f:88:be:5f:
                    cd:e4:fe:c3:cf:81:35:0a:07:07:7c:4e:03:c7:33:
                    cc:24:52:8e:b8:06:f5:48:74:04:63:5c:c9:c9:48:
                    61:aa:be:d4:cd:97:a3:2d:61:60:c2:9e:e0:0f:77:
                    19:26:b2:c2:b9:27:0a:bd:c1:c4:49:55:bc:16:07:
                    24:73:ea:0a:ac:e2:df:87:b7:d4:08:1a:26:4c:97:
                    bd:5f:c1:35:55:48:ad:7c:fc:ac:31:c2:2c:66:b3:
                    8e:32:1e:db:a1:22:0e:a7:da:b6:44:c3:c0:a0:db:
                    bd:60:a1:f1:e0:f3:99:d5:91:ad:82:a7:db:71:d4:
                    d4:e6:a9:dd:ce:83:14:4e:9b:de:24:6a:6c:f2:a3:
                    94:19:28:32:00:8b:88:2e:68:e2:64:f7:ba:1d:eb:
                    ba:dc:a9:08:d6:0a:23:a0:83:ed:52:7a:ee:ad:bd:
                    4f:b1:3c:e6:de:ec:b6:09:fc:9b:f4:20:3b:26:11:
                    cf:c1:8e:10:c5:ec:93:af:80:68:c2:20:9c:63:aa:
                    39:a8:26:49:42:98:1e:43:c5:1e:f3:fb:ff:a1:ca:
                    b1:9d:b3:e8:8d:bd:9e:7c:c5:3e:f9:4b:c1:f1:f8:
                    b1:d3:05:7c:bd:35:d3:43:09:43:2b:48:7a:35:1c:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FB:AD:D0:10:BD:85:CB:B6:ED:4F:A8:CB:EC:9A:E3:34:DE:EC:14
            X509v3 Authority Key Identifier:
                keyid:2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3231302e302f32332d3234203d3e20323633343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:4a:d3:fa:4a:2b:0c:31:95:6c:70:42:2c:dd:ec:fc:32:
         35:25:9c:11:5c:0c:af:ad:e2:ce:0a:e3:15:a6:55:5b:23:40:
         2c:fb:6b:d2:d7:72:8d:58:55:40:17:72:cf:ac:3d:73:ac:d8:
         6b:15:e8:e8:f8:bf:2e:43:77:01:8b:cf:71:db:7a:4e:64:87:
         10:da:b6:62:ee:58:2e:99:c0:e0:fa:c7:6b:a2:c3:28:9b:96:
         42:b7:d3:e5:d7:4f:72:6f:5b:db:f9:a0:7e:bd:6b:0e:8c:c6:
         87:ce:e1:7b:55:7e:8b:b3:99:43:d2:51:5b:d6:26:73:9e:da:
         6d:e9:57:b9:08:75:52:de:3f:25:e2:14:35:d0:10:3e:7a:3f:
         15:ea:15:9b:84:21:f3:30:9a:ad:b6:a4:3a:ec:22:ee:5f:62:
         50:44:8a:c5:d1:35:2f:30:80:b4:d5:2b:06:34:38:ba:3d:08:
         17:3f:6a:81:12:7d:45:b9:61:73:e8:01:2e:24:6d:48:cb:c1:
         3e:ee:23:9a:da:10:7a:1f:d2:ab:1e:35:ce:22:0b:2f:c2:a5:
         4b:83:44:3d:60:27:2d:66:a2:b5:ab:9b:b8:4a:59:2b:6f:0f:
         24:cf:6b:83:a8:36:5a:ed:f0:5b:6f:60:d9:b5:93:9d:4e:0d:
         78:02:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:22:43 2026 by rpki-client