Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          HjtBgc07OuIdDeqAphLcWxeTczTfuzk/kVKYPpxZAME=
Subject key identifier:   E1:83:C4:94:79:8E:35:C9:A8:43:FA:C4:47:32:58:73:72:25:7B:1A
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       33B6660C3F45574822C501A1923FF55D187B8DEE
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 05 Mar 2026 13:52:22 +0000
ROA not before:           Thu 05 Mar 2026 13:47:22 +0000
ROA not after:            Thu 04 Mar 2027 13:52:22 +0000
asID:                     263484
IP address blocks:        191.242.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b6:66:0c:3f:45:57:48:22:c5:01:a1:92:3f:f5:5d:18:7b:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Mar  5 13:47:22 2026 GMT
            Not After : Mar  4 13:52:22 2027 GMT
        Subject: CN=E183C494798E35C9A843FAC44732587372257B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:57:d8:78:4e:de:9d:6a:b1:80:be:d3:f0:
                    56:5c:cc:f5:50:78:0a:83:f5:37:dd:48:d1:00:81:
                    74:43:ee:f3:cd:9e:5b:a9:9a:54:9a:cc:3b:c4:d1:
                    82:0f:aa:00:c0:7f:5f:7e:42:94:20:12:2a:c9:ee:
                    37:0f:a1:b6:75:58:80:07:fb:29:44:17:c6:39:9d:
                    4b:6c:5c:de:ce:ac:d8:0f:dd:5e:5f:b3:2a:cc:69:
                    40:a0:b4:ed:4c:fc:81:26:d2:c3:d6:1d:1c:cd:fd:
                    94:83:c8:e1:2c:94:a9:1e:f7:58:2f:ad:8e:eb:3d:
                    fc:89:60:a9:7c:ee:77:87:a2:d1:31:06:12:65:dc:
                    f8:db:fd:d5:1d:17:60:6b:12:c5:87:9b:57:6f:04:
                    fb:25:17:98:0d:8d:da:d0:1b:df:74:41:7f:d4:d6:
                    3d:8e:01:b1:e9:8a:4a:c2:2e:93:b6:2b:73:da:d7:
                    27:cb:25:0f:82:23:69:0f:91:8a:34:77:19:1c:95:
                    44:2c:66:00:83:16:58:c6:ef:d6:6c:e4:72:62:ca:
                    34:77:f6:55:1e:02:9f:90:9b:9a:bb:0a:ec:1c:7f:
                    4b:67:a7:77:26:f7:9e:e5:00:e1:c3:9e:a3:2e:10:
                    ac:5e:e2:00:8d:1e:20:68:2a:ef:f0:f0:82:36:79:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:83:C4:94:79:8E:35:C9:A8:43:FA:C4:47:32:58:73:72:25:7B:1A
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233362e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:70:45:3d:79:6e:54:72:67:f6:fa:db:c7:d4:54:72:a2:
         5c:e2:c8:8c:67:dc:1f:ee:da:4e:43:3b:54:71:8a:9b:24:86:
         46:7f:1b:d1:04:6c:07:32:78:f0:6a:43:af:ab:0d:84:27:84:
         c1:64:27:7a:af:6f:67:03:8a:1f:fd:c4:11:c5:75:70:f5:9d:
         97:d7:c5:14:b8:d7:f9:6a:ab:61:77:28:0c:2c:e7:df:b7:05:
         5a:81:f3:fd:7d:fe:4e:9c:48:ea:fb:2f:65:c8:74:67:2b:cb:
         7b:90:fd:fe:dd:a3:bd:3c:85:ac:64:0b:56:48:bb:50:10:6a:
         62:43:22:d1:b6:45:d2:0b:a9:70:dc:70:13:38:df:df:a0:84:
         9f:eb:39:9d:80:d2:27:68:70:b7:41:ff:46:96:bc:50:44:9a:
         41:ba:2c:e7:2c:d1:b7:2d:2d:ba:0b:6d:26:95:58:14:b1:48:
         b6:64:c8:09:a5:0a:f3:40:78:df:03:d7:58:df:bf:73:d4:fe:
         a9:e2:9a:63:65:26:c6:ce:e5:f6:ad:32:83:7c:6d:e3:4b:36:
         be:73:94:c6:1b:4b:11:54:2b:3f:0d:7e:ab:44:83:54:49:4d:
         76:47:0d:db:c5:bc:06:67:3e:a9:84:f0:43:5e:0c:59:8b:0c:
         64:20:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 09:06:09 2026 by rpki-client