Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/3139302e392e3130322e302f32342d3234203d3e20323731373032.roa
File:                     3139302e392e3130322e302f32342d3234203d3e20323731373032.roa (raw, json)
Hash identifier:          gH4USoQy+0z0sbKzJ3Cy2C4ViDRErL4KqZd1z8K3TF0=
Subject key identifier:   EE:A1:6F:D4:38:2F:E7:A1:A7:BB:69:14:19:6B:FA:71:F0:78:F0:F0
Certificate issuer:       /CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
Certificate serial:       67840CEF287004E42FD06F302324B45680F1F767
Authority key identifier: 90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/3139302e392e3130322e302f32342d3234203d3e20323731373032.roa
Signing time:             Thu 05 Mar 2026 18:15:14 +0000
ROA not before:           Thu 05 Mar 2026 18:10:14 +0000
ROA not after:            Thu 04 Mar 2027 18:15:14 +0000
asID:                     271702
IP address blocks:        190.9.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl
                          rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:84:0c:ef:28:70:04:e4:2f:d0:6f:30:23:24:b4:56:80:f1:f7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6
        Validity
            Not Before: Mar  5 18:10:14 2026 GMT
            Not After : Mar  4 18:15:14 2027 GMT
        Subject: CN=EEA16FD4382FE7A1A7BB6914196BFA71F078F0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:52:4a:6c:be:ba:d1:46:b6:c3:4f:a9:f4:
                    08:c5:35:ae:16:cb:1c:fe:38:68:a3:bc:03:47:49:
                    53:37:4c:4d:c7:cc:37:47:73:0a:cd:c1:2f:17:e2:
                    36:44:4a:b5:24:6e:08:0e:13:20:81:60:87:32:2b:
                    36:a3:38:9a:37:98:2e:f7:ad:db:c3:33:23:5f:d2:
                    cc:41:bf:3f:04:17:87:0a:e7:68:4d:ab:ab:b5:70:
                    f7:25:27:ae:a8:14:b1:fe:a7:15:9b:e3:25:c5:fc:
                    2b:ac:8f:b8:41:aa:d1:2e:d5:bc:ca:a9:6b:35:6d:
                    d5:7f:fc:1a:2f:60:80:21:33:5d:4e:f2:26:ba:5b:
                    3f:87:52:14:1f:85:17:62:14:83:ca:b0:47:44:4d:
                    c4:fe:aa:73:c6:9a:fb:a1:df:ea:b6:3e:87:67:65:
                    60:5a:0e:cf:49:0e:e4:97:d0:c2:50:57:3b:10:cf:
                    65:58:26:8c:69:c7:ef:af:dd:31:ad:aa:a3:2f:45:
                    3f:89:74:d7:9e:ee:df:86:98:c0:9e:7f:9f:cc:9d:
                    6b:e0:20:67:42:e4:86:b4:41:cb:2e:08:09:3f:b2:
                    2b:58:dc:4f:dc:4b:6e:85:95:22:91:05:c1:fd:86:
                    de:59:4e:66:67:44:55:8c:16:ce:65:ba:66:fc:34:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:6F:D4:38:2F:E7:A1:A7:BB:69:14:19:6B:FA:71:F0:78:F0:F0
            X509v3 Authority Key Identifier:
                keyid:90:F2:56:A3:90:CB:1B:26:04:BC:80:BB:DB:AE:6E:82:49:A1:B9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90F256A390CB1B2604BC80BBDBAE6E8249A1B9A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8abQ3nQmthwBPaEQqu7kD2h84f2vQ1Y6ZbB1gsyDuvJE/0/3139302e392e3130322e302f32342d3234203d3e20323731373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:02:43:f2:6c:e9:ee:d6:09:f1:a5:bc:fe:9c:24:54:b2:
         96:22:1f:b1:05:da:e9:a0:2b:11:e0:8c:6f:82:96:0a:ed:12:
         04:c5:09:24:a2:a0:fc:a1:ff:be:62:a1:33:af:3b:af:77:4f:
         a2:b6:3f:50:c7:1e:63:d6:f5:de:c9:e8:75:f0:b4:ae:d7:76:
         e9:7b:3a:c3:44:46:2b:d7:44:68:39:ad:e6:a2:40:2d:b8:48:
         04:fe:a7:10:bd:5a:fb:6a:b8:e8:f5:b3:33:75:0b:cd:7e:cf:
         54:a2:d5:df:82:20:ac:50:4b:a8:a6:4c:c9:2c:b6:fc:84:46:
         cd:d2:8e:40:48:8d:2d:3f:89:48:71:b2:6a:cf:ad:b4:ad:99:
         93:ee:ba:34:e0:f9:63:5d:28:9c:1b:62:96:fc:04:b6:4b:02:
         68:c1:af:1a:cc:65:aa:af:0a:e2:fc:38:13:06:ca:1e:e6:3a:
         95:f7:a6:f4:e4:91:e0:73:47:6f:a6:6c:ff:ef:83:3c:17:f3:
         60:12:34:64:87:65:ba:3d:9b:aa:a1:6a:4b:c9:45:dd:12:00:
         67:8e:1f:38:53:5e:7f:ce:e8:e7:86:03:5b:b2:de:f5:39:f0:
         9f:79:06:02:85:c8:c1:d1:b3:69:fd:6d:fa:af:07:6c:c2:61:
         84:ee:ff:d9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ4QM7yhwBOQv0G8wIyS0VoDx92cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBGMjU2QTM5MENCMUIyNjA0QkM4MEJCREJBRTZFODI0
OUExQjlBNjAeFw0yNjAzMDUxODEwMTRaFw0yNzAzMDQxODE1MTRaMDMxMTAvBgNV
BAMTKEVFQTE2RkQ0MzgyRkU3QTFBN0JCNjkxNDE5NkJGQTcxRjA3OEYwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5lJKbL660Ua2w0+p9AjFNa4W
yxz+OGijvANHSVM3TE3HzDdHcwrNwS8X4jZESrUkbggOEyCBYIcyKzajOJo3mC73
rdvDMyNf0sxBvz8EF4cK52hNq6u1cPclJ66oFLH+pxWb4yXF/Cusj7hBqtEu1bzK
qWs1bdV//BovYIAhM11O8ia6Wz+HUhQfhRdiFIPKsEdETcT+qnPGmvuh3+q2Podn
ZWBaDs9JDuSX0MJQVzsQz2VYJoxpx++v3TGtqqMvRT+JdNee7t+GmMCef5/MnWvg
IGdC5Ia0QcsuCAk/sitY3E/cS26FlSKRBcH9ht5ZTmZnRFWMFs5lumb8NOIvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7qFv1Dgv56Gnu2kUGWv6cfB48PAwHwYDVR0j
BBgwFoAUkPJWo5DLGyYEvIC7265ugkmhuaYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFiUTNuUW10aHdCUGFFUXF1N2tEMmg4NGYydlExWTZaYkIxZ3N5RHV2
SkUvMC85MEYyNTZBMzkwQ0IxQjI2MDRCQzgwQkJEQkFFNkU4MjQ5QTFCOUE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwRjI1NkEzOTBDQjFCMjYw
NEJDODBCQkRCQUU2RTgyNDlBMUI5QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhYlEzblFtdGh3QlBhRVFxdTdrRDJoODRmMnZRMVk2WmJCMWdzeUR1dkpFLzAv
MzEzOTMwMmUzOTJlMzEzMDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzczMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvglmMA0GCSqGSIb3DQEBCwUAA4IBAQB6OQJD8mzp
7tYJ8aW8/pwkVLKWIh+xBdrpoCsR4IxvgpYK7RIExQkkoqD8of++YqEzrzuvd0+i
tj9Qxx5j1vXeyeh18LSu13bpezrDREYr10RoOa3mokAtuEgE/qcQvVr7arjo9bMz
dQvNfs9UotXfgiCsUEuopkzJLLb8hEbN0o5ASI0tP4lIcbJqz620rZmT7ro04Plj
XSicG2KW/AS2SwJowa8azGWqrwri/DgTBsoe5jqV96b05JHgc0dvpmz/74M8F/Ng
EjRkh2W6PZuqoWpLyUXdEgBnjh84U15/zujnhgNbst71OfCfeQYChcjB0bNp/W36
rwdswmGE7v/Z
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:40 2026 by rpki-client