Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133382e302f32332d3233203d3e20323733353536.roa
File:                     3139312e3232372e3133382e302f32332d3233203d3e20323733353536.roa (raw, json)
Hash identifier:          jejgFumRCcW4qRH/459bu0qjC4M9lH7CDGC+SalFopc=
Subject key identifier:   96:F6:3C:07:60:96:A0:86:23:E4:EC:CD:3D:AD:69:6A:12:1C:FF:A5
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       34C756A60A7A249C64911BA88115630A603088FE
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133382e302f32332d3233203d3e20323733353536.roa
Signing time:             Tue 30 Jun 2026 15:28:33 +0000
ROA not before:           Tue 30 Jun 2026 15:23:33 +0000
ROA not after:            Tue 29 Jun 2027 15:28:33 +0000
asID:                     273556
IP address blocks:        191.227.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 09:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c7:56:a6:0a:7a:24:9c:64:91:1b:a8:81:15:63:0a:60:30:88:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Jun 30 15:23:33 2026 GMT
            Not After : Jun 29 15:28:33 2027 GMT
        Subject: CN=96F63C076096A08623E4ECCD3DAD696A121CFFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:09:f2:63:9f:31:82:4c:ce:5c:a1:e9:84:
                    1e:89:51:2d:da:d0:5a:73:31:e2:af:82:fd:81:ee:
                    14:0e:2f:ba:8a:52:fd:34:69:ab:ce:f3:5c:47:f2:
                    f8:a5:b1:d4:7a:9c:59:35:ba:f9:74:c5:c2:6b:ff:
                    fc:df:c5:2e:a6:cb:07:95:02:1c:3e:21:91:59:dd:
                    30:cc:cd:67:be:9b:46:82:5b:a7:08:15:be:21:05:
                    a7:ff:dc:f4:72:b2:1f:e3:ca:4d:46:5e:a3:fa:a3:
                    cb:35:cd:f4:e4:ea:15:d1:15:c4:86:c8:04:6f:ec:
                    8c:c2:a0:29:3d:e4:17:09:6f:a1:7c:1e:7d:d8:22:
                    f1:a8:6b:05:52:d7:d5:4c:35:21:4f:1f:2a:1b:a2:
                    7e:e4:8d:28:d3:80:f7:73:ba:14:47:b8:9e:c9:ed:
                    15:47:2b:d7:8c:59:0d:0e:54:a5:be:cc:65:70:64:
                    f8:5f:d8:df:20:d0:54:05:e0:10:88:c7:c8:2a:4d:
                    cb:61:6c:12:2b:f9:f6:9b:46:93:a4:89:97:f4:52:
                    04:ba:8f:c7:0d:2d:91:87:67:88:79:ae:75:82:b0:
                    b6:a6:cf:8c:f3:cc:d0:32:0e:d6:63:2c:bd:fc:1d:
                    df:00:fb:65:c1:de:3d:d5:97:2b:cb:40:57:d6:57:
                    fc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:3C:07:60:96:A0:86:23:E4:EC:CD:3D:AD:69:6A:12:1C:FF:A5
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/3139312e3232372e3133382e302f32332d3233203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.227.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:07:af:e3:26:4f:41:d2:6d:d8:e1:55:b3:87:98:d2:a2:8d:
         38:93:df:56:07:1f:9a:db:02:ee:1e:db:8c:7d:01:97:e6:da:
         4c:18:cf:ba:91:51:73:91:5d:b0:eb:1b:53:18:03:d4:5e:95:
         02:da:4e:53:7b:0b:39:58:35:15:c5:ab:15:4a:9c:56:d3:be:
         da:41:4e:1f:88:b3:25:fe:b0:c6:ae:d5:86:6e:d9:39:2d:ae:
         29:9e:21:43:52:dd:33:68:17:61:cb:23:60:0b:a2:16:3d:cd:
         57:96:ef:f2:a8:d0:a1:ff:eb:d0:e1:71:2e:ae:75:ca:66:57:
         8f:5e:32:42:fc:71:04:c5:ba:3b:fe:93:d1:bd:0f:6a:be:fd:
         08:82:4b:6b:75:c6:f1:71:d3:cb:f1:74:63:20:d5:be:94:54:
         f4:e9:d9:38:a2:fa:67:78:95:ba:fb:41:07:90:ea:5f:62:d6:
         56:f9:93:84:5d:78:1e:19:c8:78:be:45:5d:f7:c9:a7:97:77:
         c9:b6:56:2c:a5:b0:65:1b:3d:14:9c:18:72:5f:72:84:53:9f:
         1e:4f:d8:03:f5:f5:aa:1e:4e:23:1e:e9:c2:44:37:51:3d:af:
         4a:c5:79:53:c8:1d:83:c6:2e:a0:87:f2:13:51:ad:3b:9d:4f:
         bf:2b:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:41 2026 by rpki-client