Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa (raw, json)
Hash identifier:          vVRy304nQBxP+GViUz43DPERJnN1+nbIdtvCOfMJfAg=
Subject key identifier:   ED:0F:7B:9C:84:18:44:76:1E:FE:A8:56:12:A5:E0:F9:6F:44:65:EB
Certificate issuer:       /CN=CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D
Certificate serial:       06D29B3ECBA5472780DB2C64473F1936BB9555E0
Authority key identifier: CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
Signing time:             Mon 27 Apr 2026 17:55:09 +0000
ROA not before:           Mon 27 Apr 2026 17:50:09 +0000
ROA not after:            Mon 26 Apr 2027 17:55:09 +0000
asID:                     270430
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:9b:3e:cb:a5:47:27:80:db:2c:64:47:3f:19:36:bb:95:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D
        Validity
            Not Before: Apr 27 17:50:09 2026 GMT
            Not After : Apr 26 17:55:09 2027 GMT
        Subject: CN=ED0F7B9C841844761EFEA85612A5E0F96F4465EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:ba:1b:06:aa:3b:de:7a:a8:fa:5f:18:2e:
                    95:66:83:5b:a8:2f:c6:43:9d:a9:ac:a2:e3:e0:c1:
                    c9:cd:e8:2f:1b:06:84:2c:ec:22:04:f8:15:22:6d:
                    4c:a6:60:bf:01:90:de:c1:66:28:da:db:b0:b4:3c:
                    d0:86:69:28:ab:9b:0e:c5:ee:ff:0e:61:17:c1:ca:
                    54:f6:04:52:c1:fb:47:1d:6f:1f:d0:bc:51:d6:91:
                    52:b1:de:dd:aa:79:51:be:01:bd:51:fa:29:38:3b:
                    21:d5:64:90:a5:52:76:ca:9e:2f:5b:9d:31:15:ba:
                    df:75:86:82:6e:38:c3:9a:33:de:b0:a3:68:ec:c0:
                    c1:1c:58:de:b6:5e:8d:31:d3:16:00:6a:94:e7:5e:
                    bd:5e:0a:68:7c:53:d1:4a:5d:5e:a6:52:16:f2:f8:
                    83:66:b3:81:07:d3:b6:a5:4f:1a:88:7b:95:e0:62:
                    56:1f:56:61:6a:bd:d6:cb:7d:e4:c1:53:54:95:26:
                    6f:99:ae:ca:51:6a:98:53:7c:04:d9:87:cf:88:c9:
                    40:eb:60:4e:1b:9d:b7:d3:99:67:a2:f5:53:65:70:
                    e8:e1:04:20:80:0e:e6:73:51:2d:ec:2c:eb:cf:f1:
                    74:3e:e8:47:69:35:7c:a3:06:3a:bb:41:93:f5:eb:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0F:7B:9C:84:18:44:76:1E:FE:A8:56:12:A5:E0:F9:6F:44:65:EB
            X509v3 Authority Key Identifier:
                keyid:CA:7A:1F:58:E1:0C:61:CD:F9:AA:91:7F:1B:71:68:A9:BA:99:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA7A1F58E10C61CDF9AA917F1B7168A9BA99804D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:84:53:69:b4:12:4f:4e:3a:8d:4f:95:bc:d5:2e:74:76:ba:
         9d:30:81:8f:fe:72:b6:22:7a:65:fb:e1:eb:91:fc:de:0a:1f:
         dd:27:b4:e1:43:5e:57:11:05:6c:e3:8b:53:1c:c7:cc:26:d2:
         68:f3:18:3a:6b:43:75:39:80:d4:0a:73:16:a6:cf:21:e7:1b:
         3c:96:02:ed:7d:2c:c0:3d:8a:c9:df:b7:ed:d6:8f:9f:42:eb:
         d5:af:c1:9a:8a:e7:a5:2a:46:de:71:38:eb:83:e7:09:78:60:
         61:a3:16:27:48:c8:a7:7d:7b:4d:42:45:34:50:44:cb:a9:d8:
         1f:39:05:0e:90:b4:71:1f:f5:d1:00:db:09:a5:03:a1:6c:ad:
         b6:c2:95:ec:5f:f0:3e:54:50:e4:2b:a1:36:db:a3:1f:94:3a:
         31:b1:13:40:db:85:a0:1b:78:91:7e:10:63:7b:16:a7:19:bd:
         6a:da:b3:8b:e1:7b:6c:44:5e:36:8f:e6:4d:5f:5a:fd:29:6a:
         5d:82:0b:4a:6d:59:de:4b:e2:3d:38:d7:89:1d:0c:11:03:d2:
         a6:75:82:f8:9d:49:93:ca:04:77:26:fc:7e:bc:c4:1f:0b:e4:
         37:10:ce:33:b5:9c:0f:ae:54:7e:df:27:3e:b6:bf:2e:08:57:
         63:6f:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:24 2026 by rpki-client