Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3139312e352e3137362e302f32302d3332203d3e203533323338.roa
File:                     3139312e352e3137362e302f32302d3332203d3e203533323338.roa (raw, json)
Hash identifier:          4K+gDqgn0iqks2+hn8Qpyocz/rwWo2GgjPb15PRdjsQ=
Subject key identifier:   09:AA:4E:7A:FE:30:CB:B2:7D:FB:3B:75:EC:D9:01:A6:86:73:CD:00
Certificate issuer:       /CN=413AC88212333C28246B2D35C853E50D0EAA55DC
Certificate serial:       042081BD789B8F71B8CA0EE85CA9D8D3E24F98A8
Authority key identifier: 41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3139312e352e3137362e302f32302d3332203d3e203533323338.roa
Signing time:             Mon 20 Apr 2026 15:29:21 +0000
ROA not before:           Mon 20 Apr 2026 15:24:21 +0000
ROA not after:            Mon 19 Apr 2027 15:29:21 +0000
asID:                     53238
IP address blocks:        191.5.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.crl
                          rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:20:81:bd:78:9b:8f:71:b8:ca:0e:e8:5c:a9:d8:d3:e2:4f:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413AC88212333C28246B2D35C853E50D0EAA55DC
        Validity
            Not Before: Apr 20 15:24:21 2026 GMT
            Not After : Apr 19 15:29:21 2027 GMT
        Subject: CN=09AA4E7AFE30CBB27DFB3B75ECD901A68673CD00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:48:71:a7:9b:6d:5c:c8:70:76:7e:2a:88:
                    18:86:a0:44:d3:9d:70:7d:31:bd:44:79:4d:9d:62:
                    b6:4d:a6:b3:be:25:af:07:da:41:d1:2a:8e:fd:54:
                    7e:00:a7:08:cc:fb:c1:01:a1:36:2a:a4:60:cc:a2:
                    9b:d8:b7:92:55:92:3d:b9:51:8f:91:fe:d4:b8:6a:
                    68:5e:a9:52:fc:f2:45:a3:b0:43:40:0e:ba:b8:db:
                    34:19:77:46:57:b8:a0:3a:dc:ec:cd:b8:3c:3b:cc:
                    40:b2:84:67:e7:de:6a:8f:4f:cd:de:85:34:5b:3c:
                    0c:03:2e:c4:be:d7:65:c7:8e:62:45:60:6d:e2:09:
                    57:17:b7:46:36:b1:f6:ad:ba:93:ea:e4:66:1b:3b:
                    b3:43:7d:11:88:2b:79:ef:5d:e9:74:5d:88:26:0d:
                    19:0d:4b:d1:24:3f:95:ed:86:d2:0e:53:1b:10:66:
                    be:ee:05:1d:29:12:99:5d:c7:79:47:9c:2f:1b:1f:
                    06:ad:3e:65:21:87:6c:8f:7f:85:73:43:20:11:4b:
                    33:aa:95:01:81:83:12:89:e8:cb:84:ae:7b:e5:5d:
                    95:84:7a:24:62:07:3c:bd:cc:5e:73:e8:db:e6:9d:
                    68:07:3b:5d:19:47:21:32:26:86:d4:6d:96:b2:2a:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AA:4E:7A:FE:30:CB:B2:7D:FB:3B:75:EC:D9:01:A6:86:73:CD:00
            X509v3 Authority Key Identifier:
                keyid:41:3A:C8:82:12:33:3C:28:24:6B:2D:35:C8:53:E5:0D:0E:AA:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/413AC88212333C28246B2D35C853E50D0EAA55DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413AC88212333C28246B2D35C853E50D0EAA55DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aW9MyTvWiKCtDPb3J4pa1E2xoDW8oNu98jU7Awp4qY1/0/3139312e352e3137362e302f32302d3332203d3e203533323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:89:dc:7e:49:e3:1f:96:83:a9:95:15:d4:fa:49:ca:55:
         ff:d7:83:77:cd:56:b1:23:d3:fe:57:61:24:d2:2f:5c:39:b0:
         dc:2b:93:77:e0:3f:1a:3f:95:6b:29:3e:6d:93:b9:9d:3e:f4:
         e5:cb:b6:0c:73:11:49:56:87:a5:f9:c2:02:01:f0:05:7c:57:
         53:83:08:b4:32:d6:f5:23:d0:d6:d9:74:ec:4c:33:35:48:07:
         86:15:13:30:1c:00:f4:b3:be:c9:0d:77:7a:ab:91:8c:43:10:
         02:97:84:76:d1:39:30:55:27:e1:8d:25:e2:a1:96:0f:e0:31:
         86:08:78:ac:63:87:8f:9c:c7:03:57:bc:11:83:57:b4:0e:66:
         c1:79:36:f3:1d:e4:96:c6:ef:21:b5:8d:18:a5:c8:b4:ea:cc:
         a3:95:49:7f:72:e3:99:d4:96:85:2d:99:78:89:2d:39:b4:16:
         10:10:e1:82:4a:a7:ee:8d:dc:0d:0f:ee:ae:50:19:3a:fd:41:
         d2:fc:82:3e:82:a8:56:74:9c:cb:5c:ae:f7:3b:53:45:23:21:
         3f:b0:2c:5a:db:65:96:0e:e8:ce:2c:d2:72:bf:7a:08:74:a6:
         1a:54:14:ba:f0:59:0c:86:dd:0d:68:96:41:26:22:44:f5:ea:
         7b:c2:34:d1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBCCBvXibj3G4yg7oXKnY0+JPmKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzQUM4ODIxMjMzM0MyODI0NkIyRDM1Qzg1M0U1MEQw
RUFBNTVEQzAeFw0yNjA0MjAxNTI0MjFaFw0yNzA0MTkxNTI5MjFaMDMxMTAvBgNV
BAMTKDA5QUE0RTdBRkUzMENCQjI3REZCM0I3NUVDRDkwMUE2ODY3M0NEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/M0hxp5ttXMhwdn4qiBiGoETT
nXB9Mb1EeU2dYrZNprO+Ja8H2kHRKo79VH4ApwjM+8EBoTYqpGDMopvYt5JVkj25
UY+R/tS4amheqVL88kWjsENADrq42zQZd0ZXuKA63OzNuDw7zECyhGfn3mqPT83e
hTRbPAwDLsS+12XHjmJFYG3iCVcXt0Y2sfatupPq5GYbO7NDfRGIK3nvXel0XYgm
DRkNS9EkP5XthtIOUxsQZr7uBR0pEpldx3lHnC8bHwatPmUhh2yPf4VzQyARSzOq
lQGBgxKJ6MuErnvlXZWEeiRiBzy9zF5z6NvmnWgHO10ZRyEyJobUbZayKpR3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCapOev4wy7J9+zt17NkBpoZzzQAwHwYDVR0j
BBgwFoAUQTrIghIzPCgkay01yFPlDQ6qVdwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFXOU15VHZXaUtDdERQYjNKNHBhMUUyeG9EVzhvTnU5OGpVN0F3cDRx
WTEvMC80MTNBQzg4MjEyMzMzQzI4MjQ2QjJEMzVDODUzRTUwRDBFQUE1NURDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0FDODgyMTIzMzNDMjgy
NDZCMkQzNUM4NTNFNTBEMEVBQTU1REMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhVzlNeVR2V2lLQ3REUGIzSjRwYTFFMnhvRFc4b051OThqVTdBd3A0cVkxLzAv
MzEzOTMxMmUzNTJlMzEzNzM2MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzUzMzMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL8FsDANBgkqhkiG9w0BAQsFAAOCAQEAMUqJ3H5J4x+W
g6mVFdT6ScpV/9eDd81WsSPT/ldhJNIvXDmw3CuTd+A/Gj+Vayk+bZO5nT705cu2
DHMRSVaHpfnCAgHwBXxXU4MItDLW9SPQ1tl07EwzNUgHhhUTMBwA9LO+yQ13equR
jEMQApeEdtE5MFUn4Y0l4qGWD+Axhgh4rGOHj5zHA1e8EYNXtA5mwXk28x3klsbv
IbWNGKXItOrMo5VJf3LjmdSWhS2ZeIktObQWEBDhgkqn7o3cDQ/urlAZOv1B0vyC
PoKoVnScy1yu9ztTRSMhP7AsWttllg7ozizScr96CHSmGlQUuvBZDIbdDWiWQSYi
RPXqe8I00Q==
-----END CERTIFICATE-----
Generated at Wed May 13 18:07:34 2026 by rpki-client