Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133362e302f32342d3234203d3e20323733353536.roa
File:                     3139312e3232372e3133362e302f32342d3234203d3e20323733353536.roa (raw, json)
Hash identifier:          9WOAJcWJ+Vz0j/YKRuvdktJfwOiZEI9aGPfBREf9pQc=
Subject key identifier:   74:BB:DD:B2:12:E4:46:74:1F:77:BC:D0:85:B4:BD:54:CE:2E:FA:56
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       42C219A5DCA507FF93FCF803A1119566ECABBED0
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133362e302f32342d3234203d3e20323733353536.roa
Signing time:             Tue 30 Jun 2026 15:21:32 +0000
ROA not before:           Tue 30 Jun 2026 15:16:32 +0000
ROA not after:            Tue 29 Jun 2027 15:21:32 +0000
asID:                     273556
IP address blocks:        191.227.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c2:19:a5:dc:a5:07:ff:93:fc:f8:03:a1:11:95:66:ec:ab:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Jun 30 15:16:32 2026 GMT
            Not After : Jun 29 15:21:32 2027 GMT
        Subject: CN=74BBDDB212E446741F77BCD085B4BD54CE2EFA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:60:5f:dc:bf:6d:33:71:fb:5e:72:a1:8d:c6:
                    25:93:6d:e6:a4:e3:2f:a8:6c:bd:b6:ea:d0:a8:3c:
                    e7:71:dd:e7:29:52:c1:83:eb:cf:6d:fa:10:dd:de:
                    d9:13:87:a6:4c:c9:fc:7a:04:a4:19:29:af:67:ec:
                    0a:46:d3:ac:c5:39:c2:b9:f2:14:69:99:c5:7b:e9:
                    51:11:63:39:d1:03:fc:b4:f4:ec:d8:aa:5a:ff:a2:
                    d7:31:05:1f:c3:4b:41:c5:88:a3:2b:c7:37:fc:16:
                    2f:c3:f0:87:a2:86:76:21:34:fc:34:c5:f6:56:62:
                    61:99:20:36:08:76:12:7c:0e:de:6d:e7:c6:1d:8c:
                    3b:88:d7:d7:af:58:71:f1:eb:78:9d:75:e0:b2:fd:
                    ea:cb:1c:91:5b:d1:d9:5c:2a:68:2a:2f:01:cf:97:
                    83:a2:f4:51:1e:6d:89:45:7b:3a:93:72:69:8c:65:
                    f5:2d:b6:59:b7:f8:10:6b:00:17:11:1d:9b:28:8c:
                    69:3c:cf:db:a3:af:f8:a7:57:ff:a8:a1:af:5b:67:
                    64:02:eb:aa:b9:c3:5f:27:a7:81:f1:13:68:36:56:
                    7d:17:3d:f5:99:3a:e8:d8:b7:2a:5b:f5:c2:81:31:
                    1f:98:27:a9:02:6f:12:36:c9:1f:a0:ac:29:03:71:
                    e0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BB:DD:B2:12:E4:46:74:1F:77:BC:D0:85:B4:BD:54:CE:2E:FA:56
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133362e302f32342d3234203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.227.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d4:05:bd:06:2e:1e:de:6a:77:fb:54:34:92:3a:c3:55:1c:
         5f:28:8b:a0:0a:7c:a0:ef:a4:41:5b:e3:91:f8:09:e1:39:53:
         e1:6c:44:d2:92:50:f2:52:87:7c:1e:84:aa:c8:c8:76:c6:d3:
         b2:01:c9:46:b5:7d:9d:34:d9:4c:f4:e2:cb:d6:32:36:b9:eb:
         58:d5:fb:65:b1:06:5b:d6:df:5d:d2:b9:da:85:68:8e:79:25:
         aa:ee:17:d9:0c:ae:0a:42:bf:9f:23:d4:fd:ba:62:3a:bf:bf:
         11:c2:e4:fb:6b:ec:bf:af:a3:38:e6:f7:76:06:e2:a6:eb:d2:
         a5:f0:6f:29:ad:c5:0e:3b:62:82:9e:5a:58:f7:67:75:d2:33:
         0f:b1:05:b4:e4:f9:a4:43:c0:7b:de:36:7e:fd:81:64:7b:6d:
         75:e5:53:09:d8:61:11:7b:af:ff:b3:77:02:9d:52:d0:43:af:
         f2:c8:73:d8:a6:d4:0d:59:27:31:06:c5:5f:30:ef:9e:da:01:
         25:8f:4b:de:dc:77:79:8a:b5:7b:99:cb:fe:7a:c1:ef:d6:35:
         3d:4f:ef:a5:ce:64:e4:59:89:f4:14:e6:d8:f7:cf:93:09:16:
         ae:46:a7:cb:d2:1d:d2:71:42:4e:e8:bc:2f:1d:47:e7:f2:b5:
         87:9a:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:33 2026 by rpki-client