Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa
File:                     3139312e33372e34382e302f32332d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          SSHfHSGAG+Y73u6gTm2wijMlA6fCQ1HSb4LVOqqBD5I=
Subject key identifier:   C6:AE:F0:FF:2F:C2:A8:53:74:B2:8E:A8:FC:BE:A9:A9:DC:FF:DE:CA
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       0EDFB33BF1C55C3F21BD86B42E35247FC9617160
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa
Signing time:             Wed 15 Jul 2026 17:57:51 +0000
ROA not before:           Wed 15 Jul 2026 17:52:51 +0000
ROA not after:            Wed 14 Jul 2027 17:57:51 +0000
asID:                     263347
IP address blocks:        191.37.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 23:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:b3:3b:f1:c5:5c:3f:21:bd:86:b4:2e:35:24:7f:c9:61:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Jul 15 17:52:51 2026 GMT
            Not After : Jul 14 17:57:51 2027 GMT
        Subject: CN=C6AEF0FF2FC2A85374B28EA8FCBEA9A9DCFFDECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cb:66:bb:87:92:60:be:84:9a:f6:50:fd:07:
                    25:f7:0b:ed:80:e9:24:82:ab:e7:f1:68:f2:a0:be:
                    b7:b6:48:83:7d:05:80:d3:b5:22:94:74:de:fa:47:
                    9c:c4:54:1e:77:f0:6b:e2:2d:1e:65:26:20:32:cd:
                    d1:56:7e:10:23:b1:c1:2e:ae:2d:52:f8:14:9b:2f:
                    be:12:82:53:f0:ee:27:d7:00:94:5c:0e:c3:49:6e:
                    78:b8:60:6a:a8:ad:c1:f3:0a:ed:cc:f6:01:ba:4b:
                    5b:85:bf:b9:ec:cb:7c:49:38:f0:db:03:85:d3:e4:
                    2b:a0:b2:c5:f4:1a:8e:62:72:49:30:0a:f5:bd:20:
                    d4:61:d1:c2:71:f4:2d:24:c8:88:a7:ec:6c:59:85:
                    b6:68:f9:16:eb:d3:0a:0f:d2:54:8b:ee:7e:fa:83:
                    34:a1:c5:7f:c8:17:54:11:d9:df:94:6e:ce:39:7d:
                    49:67:e7:9f:8c:46:b0:7e:6a:81:30:49:74:35:b1:
                    af:52:22:27:0a:71:d6:d0:ce:6c:1b:f9:8c:6d:c0:
                    2a:94:78:f1:dc:84:24:50:32:7c:90:ae:59:c9:a8:
                    31:ca:e6:8e:26:e9:cb:54:dd:22:ce:c4:2c:c6:71:
                    89:00:95:83:32:e3:1b:d0:c4:5f:0c:71:f6:04:42:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:F0:FF:2F:C2:A8:53:74:B2:8E:A8:FC:BE:A9:A9:DC:FF:DE:CA
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e34382e302f32332d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:a4:c2:83:4d:51:98:c6:05:95:34:ba:ec:12:96:64:0b:
         d1:2e:83:83:64:42:6b:5f:1d:27:18:ea:7b:9a:5a:ed:16:de:
         ed:cc:52:06:6e:ea:47:00:d7:fd:a8:d7:e9:d7:51:db:ea:70:
         b9:f4:50:f2:f2:4a:89:5c:b3:1e:ac:69:8d:5e:6d:ae:a0:ca:
         6f:81:47:73:6c:1a:82:4a:41:f3:c7:bf:e2:20:57:07:e6:9b:
         fe:29:56:55:1b:0d:c9:7b:ec:e2:0b:0f:93:7e:ad:4a:92:30:
         59:b5:b3:ab:26:60:00:bc:e0:8d:14:89:44:8d:89:41:06:38:
         7a:cb:28:f1:90:74:1b:76:4b:9f:f7:33:21:6d:c0:23:de:50:
         ea:80:df:a3:08:40:7f:50:bb:f6:2c:0d:9f:31:35:2a:bc:ef:
         12:7f:08:62:67:9a:b6:74:2c:d3:a1:43:f2:12:bf:90:9f:52:
         fe:2c:dd:85:ff:70:40:34:18:e7:3a:22:58:c5:b3:13:13:a1:
         d8:65:6e:50:e8:21:f7:ff:37:55:af:0b:ba:91:ea:db:d6:61:
         3e:e6:7e:59:46:03:43:08:02:aa:f2:30:d7:02:93:4a:4b:97:
         33:ea:66:d8:f1:d1:4e:05:f2:97:52:4c:6e:bc:ae:81:1b:ec:
         32:5a:51:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDt+zO/HFXD8hvYa0LjUkf8lhcWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4
RUZGOUJGMjAeFw0yNjA3MTUxNzUyNTFaFw0yNzA3MTQxNzU3NTFaMDMxMTAvBgNV
BAMTKEM2QUVGMEZGMkZDMkE4NTM3NEIyOEVBOEZDQkVBOUE5RENGRkRFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgy2a7h5JgvoSa9lD9ByX3C+2A
6SSCq+fxaPKgvre2SIN9BYDTtSKUdN76R5zEVB538GviLR5lJiAyzdFWfhAjscEu
ri1S+BSbL74SglPw7ifXAJRcDsNJbni4YGqorcHzCu3M9gG6S1uFv7nsy3xJOPDb
A4XT5CugssX0Go5ickkwCvW9INRh0cJx9C0kyIin7GxZhbZo+Rbr0woP0lSL7n76
gzShxX/IF1QR2d+Ubs45fUln55+MRrB+aoEwSXQ1sa9SIicKcdbQzmwb+YxtwCqU
ePHchCRQMnyQrlnJqDHK5o4m6ctU3SLOxCzGcYkAlYMy4xvQxF8McfYEQhJrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxq7w/y/CqFN0so6o/L6pqdz/3sowHwYDVR0j
BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5
ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4
NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv
MzEzOTMxMmUzMzM3MmUzNDM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvyUwMA0GCSqGSIb3DQEBCwUAA4IBAQAsKqTCg01R
mMYFlTS67BKWZAvRLoODZEJrXx0nGOp7mlrtFt7tzFIGbupHANf9qNfp11Hb6nC5
9FDy8kqJXLMerGmNXm2uoMpvgUdzbBqCSkHzx7/iIFcH5pv+KVZVGw3Je+ziCw+T
fq1KkjBZtbOrJmAAvOCNFIlEjYlBBjh6yyjxkHQbdkuf9zMhbcAj3lDqgN+jCEB/
ULv2LA2fMTUqvO8SfwhiZ5q2dCzToUPyEr+Qn1L+LN2F/3BANBjnOiJYxbMTE6HY
ZW5Q6CH3/zdVrwu6kerb1mE+5n5ZRgNDCAKq8jDXApNKS5cz6mbY8dFOBfKXUkxu
vK6BG+wyWlFE
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:11:05 2026 by rpki-client