Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133372e302f32342d3234203d3e20323733353536.roa
File:                     3139312e3232372e3133372e302f32342d3234203d3e20323733353536.roa (raw, json)
Hash identifier:          VuhA+S3EcIgynvXd/iveUUeIqWWHc4dO6gaDaBalVsA=
Subject key identifier:   EE:9E:E5:99:7B:C0:D8:34:D1:8A:6A:A5:0F:C8:5C:CE:B1:85:11:C8
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       563C9EB32A0E2D19013212B47331E7808C166FAD
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133372e302f32342d3234203d3e20323733353536.roa
Signing time:             Tue 30 Jun 2026 15:21:56 +0000
ROA not before:           Tue 30 Jun 2026 15:16:56 +0000
ROA not after:            Tue 29 Jun 2027 15:21:56 +0000
asID:                     273556
IP address blocks:        191.227.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3c:9e:b3:2a:0e:2d:19:01:32:12:b4:73:31:e7:80:8c:16:6f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Jun 30 15:16:56 2026 GMT
            Not After : Jun 29 15:21:56 2027 GMT
        Subject: CN=EE9EE5997BC0D834D18A6AA50FC85CCEB18511C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ab:2b:48:6a:65:e3:48:02:2c:b6:7a:88:f9:
                    cb:90:90:d6:35:cb:98:12:15:ba:83:4d:c9:b1:37:
                    bf:ff:d2:98:e7:cb:5f:1f:2a:6f:c4:12:68:0b:5e:
                    8d:7b:84:1e:bd:6d:d1:e7:a5:8c:26:89:9c:c9:0d:
                    02:d5:e9:eb:a5:41:48:82:c1:0e:35:50:8f:b5:80:
                    14:5c:62:2f:03:b9:eb:b5:6c:ca:17:ea:38:4b:02:
                    2b:a3:b4:2a:bc:25:a9:8f:be:0e:b3:5e:90:45:b5:
                    39:02:ce:71:5c:46:db:38:b8:5a:f3:4d:b4:ba:4b:
                    4c:b0:39:a9:f2:73:ce:99:cb:72:9e:64:fe:2b:0f:
                    29:3d:39:dc:59:85:15:c3:b9:2b:17:1a:55:86:18:
                    06:10:ea:15:d0:17:7a:65:64:71:70:76:40:8d:02:
                    65:be:72:b6:71:da:9f:7d:17:d4:97:89:1b:b0:62:
                    57:cf:46:b9:07:7d:96:3e:d8:ad:a6:d3:04:ab:75:
                    28:94:8e:a4:fb:ec:48:a7:92:cb:c9:c7:4c:c7:74:
                    e8:e4:39:31:bd:97:2b:e9:5c:e9:e3:75:e5:30:b2:
                    de:a2:d4:dd:fe:38:fe:dc:84:6d:0f:a9:3a:3b:0d:
                    08:95:22:9b:1d:16:46:a5:45:84:b6:6f:d1:e3:2d:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:E5:99:7B:C0:D8:34:D1:8A:6A:A5:0F:C8:5C:CE:B1:85:11:C8
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133372e302f32342d3234203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.227.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:f3:76:f0:09:44:60:28:4e:5d:20:f6:7f:b7:fa:95:d7:a8:
         50:9a:69:27:2f:dd:c9:86:56:f7:74:8f:25:f3:72:e1:02:63:
         a8:8e:8e:bc:8a:30:52:39:21:9f:c1:fd:e9:3f:fd:6f:10:42:
         c4:2f:ae:d5:2c:4b:37:f1:55:8e:e3:9c:50:93:e2:b9:ce:24:
         d2:d8:ff:51:55:dd:0f:ee:4c:cc:1e:d8:06:69:df:f8:6c:00:
         f2:0a:09:ec:c0:59:33:c8:45:59:1f:c2:e5:88:a1:ef:a4:c8:
         1e:49:f0:66:67:0c:67:e7:86:ae:b9:9e:05:08:96:82:2d:85:
         04:67:7e:ab:98:fb:ca:c5:6d:5c:e6:e8:03:3e:0e:bb:5b:89:
         90:e9:de:ba:0d:be:7b:8c:9f:df:1b:fb:8c:1f:fa:b5:0c:3f:
         95:63:86:74:79:c5:1b:79:c4:79:4b:75:51:b8:64:fe:2a:3e:
         90:1d:1c:f1:4a:a9:73:51:78:09:bd:b7:77:dc:09:ae:3d:d7:
         91:eb:e8:15:33:f3:62:6a:68:ed:c8:22:93:a7:bf:4f:9e:78:
         52:1b:ee:e6:c0:17:54:a2:60:66:f9:66:04:51:9a:d0:a8:30:
         a4:27:99:bd:64:75:9d:55:c5:0e:42:94:fc:ba:ec:93:c5:9e:
         e0:8a:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:34 2026 by rpki-client