Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa
File:                     3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa (raw, json)
Hash identifier:          Le/8VCjrz8KtaEiQCWKsQaXF5YbA02sF1cvGXI/We1A=
Subject key identifier:   65:78:82:D7:D5:98:57:21:C3:57:36:9F:E7:3F:05:66:4B:6E:15:7C
Certificate issuer:       /CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
Certificate serial:       0C29435CE3A7260A27F100A4972AB6EA10795500
Authority key identifier: 18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa
Signing time:             Thu 26 Mar 2026 14:19:11 +0000
ROA not before:           Thu 26 Mar 2026 14:14:11 +0000
ROA not after:            Thu 25 Mar 2027 14:19:11 +0000
asID:                     267461
IP address blocks:        192.141.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl
                          rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:29:43:5c:e3:a7:26:0a:27:f1:00:a4:97:2a:b6:ea:10:79:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
        Validity
            Not Before: Mar 26 14:14:11 2026 GMT
            Not After : Mar 25 14:19:11 2027 GMT
        Subject: CN=657882D7D5985721C357369FE73F05664B6E157C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:2d:f3:2e:76:16:ec:27:cd:2b:75:ae:38:
                    d3:32:3d:e6:52:5c:98:90:01:41:8a:aa:03:a8:c6:
                    b9:3d:6e:fc:70:f5:73:bb:63:b2:2d:80:75:83:6b:
                    33:d9:81:3d:4d:b9:91:b9:e1:82:c0:5b:6d:5d:47:
                    01:ae:00:30:de:ce:f7:de:b4:7a:f4:54:e6:fb:40:
                    fe:2c:fd:c7:4f:7d:9c:d1:ec:b6:b7:d4:21:55:f3:
                    95:15:2a:2d:4c:fd:06:87:23:41:15:21:2b:91:2f:
                    4e:61:aa:7c:34:5e:e0:95:32:87:71:10:b0:91:af:
                    e3:26:b1:5b:d1:e1:02:21:f8:5f:cb:cf:e4:76:1d:
                    fe:16:f3:56:49:b5:69:e2:0b:0a:dc:9e:70:74:7c:
                    91:1a:77:3e:8c:ab:4b:32:3e:fe:d5:33:47:2d:ac:
                    68:35:c0:71:02:bf:9e:4c:bf:3b:c8:42:b8:f4:6b:
                    1b:3a:0d:3d:88:db:8f:af:51:4b:c4:34:79:38:f2:
                    1a:a5:e8:51:ca:6d:25:1e:58:7a:71:4e:b8:e3:bf:
                    43:e1:29:a3:1b:17:10:1f:ca:4c:92:c3:27:a2:75:
                    8b:2c:2a:d4:a6:65:82:39:1a:79:87:0c:04:06:85:
                    76:6a:64:35:82:80:ce:aa:8f:90:dc:64:7d:02:d3:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:78:82:D7:D5:98:57:21:C3:57:36:9F:E7:3F:05:66:4B:6E:15:7C
            X509v3 Authority Key Identifier:
                keyid:18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3233203d3e20323637343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:73:9d:35:91:76:a1:a1:05:4b:63:8a:f1:3b:d4:18:1b:c0:
         ef:f4:98:04:e1:7e:d4:0c:81:64:b3:fe:36:60:69:8a:b0:5c:
         4c:cf:03:df:0e:e1:23:c9:0f:b2:91:e1:8f:9c:3f:8c:17:da:
         9f:5c:b1:a0:51:d8:f4:c2:2f:b8:ff:44:16:89:e4:b6:43:46:
         37:ef:71:30:24:8e:8d:d7:45:56:a3:eb:26:9e:ad:63:c5:46:
         6d:74:ae:f4:88:99:f7:82:af:e6:0c:73:92:1f:7a:90:aa:50:
         cc:ad:7f:f8:37:45:bf:9e:99:59:68:95:19:30:15:85:69:cc:
         d8:d1:8e:15:3f:ee:7a:50:13:b9:22:12:bf:b8:0b:53:d6:e6:
         02:45:de:bf:b2:7d:62:00:49:8e:15:80:3e:60:6d:4b:04:fd:
         c9:3b:a9:e4:c5:0c:ab:b6:61:ff:be:29:cf:1b:b3:28:a8:7a:
         71:82:4b:1b:a5:86:c2:5e:dc:e1:ee:f5:97:e4:ed:c8:01:5a:
         cb:49:f1:1a:a6:58:4b:78:7f:9b:93:b7:0c:2a:c4:43:e4:fa:
         7d:ac:5e:d9:76:c8:83:f1:f1:87:dc:d2:57:3b:c6:b6:fd:bf:
         6c:14:3b:af:8a:82:ee:af:e7:19:3f:dc:87:3c:93:4f:56:56:
         89:f2:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:00:28 2026 by rpki-client