Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          le5GSqUByMNWHP+wZPnVauRqrYuk9zbH+tN0BOEqadE=
Subject key identifier:   D4:C4:C0:11:1E:97:1F:FE:9C:23:5D:2F:00:05:9D:13:52:8D:F2:74
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       4C55B53BFFCD07B2B400770744F5A154FAE8DF10
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 05 Mar 2026 13:52:19 +0000
ROA not before:           Thu 05 Mar 2026 13:47:19 +0000
ROA not after:            Thu 04 Mar 2027 13:52:19 +0000
asID:                     263484
IP address blocks:        191.242.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:55:b5:3b:ff:cd:07:b2:b4:00:77:07:44:f5:a1:54:fa:e8:df:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Mar  5 13:47:19 2026 GMT
            Not After : Mar  4 13:52:19 2027 GMT
        Subject: CN=D4C4C0111E971FFE9C235D2F00059D13528DF274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:0e:be:65:cd:e9:94:4a:ff:8c:09:de:ad:
                    87:6a:d7:87:f0:f2:65:05:0c:c6:73:cb:52:71:2d:
                    d0:44:2d:55:d2:14:52:f7:39:3a:57:57:e4:a9:44:
                    6a:b7:e6:1c:54:30:af:a3:e6:e3:6a:73:ab:fe:04:
                    1c:ea:aa:5a:99:ce:d2:36:50:7b:97:cf:ec:e7:3f:
                    f0:f1:0c:40:06:7e:78:75:7a:30:d5:94:25:e5:b5:
                    a7:4d:f4:c5:9a:10:a2:87:f7:ce:03:59:19:b5:08:
                    4c:d2:5e:ad:9e:30:b4:b1:7f:62:c4:07:7b:9c:ee:
                    ee:8b:51:ad:9b:1d:e3:fe:bc:01:f9:18:5e:ca:32:
                    88:1b:9f:4b:23:49:61:48:ef:65:d0:57:ef:e3:58:
                    e0:64:03:f2:53:f5:5c:07:dd:c7:31:5a:57:ef:2d:
                    eb:94:7a:92:c5:26:be:7c:5b:5d:92:99:95:e0:b0:
                    54:33:12:a3:cf:a7:98:b7:f0:82:8d:3e:0f:75:bd:
                    f2:f4:bc:5a:7e:09:10:ed:e5:f2:e5:16:1a:da:39:
                    76:86:51:01:56:70:77:b2:78:78:38:40:7a:0d:cc:
                    31:51:20:42:22:d8:88:61:e2:4a:0b:15:0f:3e:90:
                    e6:d5:15:dc:5f:96:64:af:09:d4:86:33:83:89:b1:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C4:C0:11:1E:97:1F:FE:9C:23:5D:2F:00:05:9D:13:52:8D:F2:74
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233372e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d0:86:14:46:da:5e:0a:d7:4f:a0:aa:70:6d:1d:11:ae:e2:
         51:e1:72:33:11:39:c8:25:72:e4:63:f3:55:80:c8:cb:e6:94:
         4d:fc:10:84:81:4a:b9:87:a4:da:93:6f:55:a3:cd:fc:25:83:
         c6:73:99:ba:3f:0b:47:41:d8:cb:71:22:a7:7f:4c:29:e1:b0:
         8b:e1:39:a5:e8:e8:e5:41:2e:94:30:b2:10:58:0b:43:2d:90:
         fe:39:10:2d:73:c9:00:69:f7:fa:20:1a:b2:ee:36:ce:6b:f4:
         cd:14:ee:45:56:83:99:75:e8:77:9d:4e:22:cf:be:d1:a0:97:
         92:48:5c:a0:79:51:2e:f5:b6:e3:c8:f8:47:61:99:8e:99:da:
         ad:4a:c5:07:b4:8d:e9:13:77:43:ee:41:df:8a:e0:9f:3e:cf:
         88:83:86:27:05:1d:25:0a:f9:c9:48:71:87:e7:60:1d:94:22:
         a9:29:74:27:88:c4:87:f9:ce:03:20:5c:a0:cb:c1:b2:52:8d:
         6b:63:f0:7e:65:f9:83:89:0f:bb:56:64:45:f3:a2:e7:6b:cf:
         0c:ad:93:8d:21:74:0c:fc:f0:aa:16:02:b8:26:cb:2d:5a:53:
         aa:8e:2b:9a:fa:19:6b:5c:e1:4e:09:01:5c:3e:51:20:fa:81:
         68:16:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:44:53 2026 by rpki-client