Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233382e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233382e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          7qmun24vnL2gPdVLO7GlBk/XWb9KnD+lRM8Bf4UaBYc=
Subject key identifier:   28:D7:14:96:36:AD:20:9E:1E:DE:BA:3C:80:38:0C:FB:F5:D8:3E:6A
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       02781A5FE8911F89F0DBE4379F69CB84A4597720
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233382e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 05 Mar 2026 13:52:19 +0000
ROA not before:           Thu 05 Mar 2026 13:47:19 +0000
ROA not after:            Thu 04 Mar 2027 13:52:19 +0000
asID:                     263484
IP address blocks:        191.242.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:78:1a:5f:e8:91:1f:89:f0:db:e4:37:9f:69:cb:84:a4:59:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Mar  5 13:47:19 2026 GMT
            Not After : Mar  4 13:52:19 2027 GMT
        Subject: CN=28D7149636AD209E1EDEBA3C80380CFBF5D83E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:e3:6d:40:72:07:c4:70:4a:d2:0e:d4:8e:
                    78:b9:66:88:4e:45:07:ed:dd:fb:79:5e:c7:9f:c0:
                    69:51:cb:94:9c:ef:96:ed:fe:7d:ad:25:a3:c4:0d:
                    76:c1:c5:7a:19:d5:56:ac:41:8f:5c:a3:fc:3b:33:
                    3a:ec:df:25:47:4e:6e:be:4b:dc:b4:21:de:55:40:
                    0a:a1:43:b2:80:7d:71:aa:d8:9a:91:7c:85:cf:71:
                    d0:15:8d:01:18:17:22:f1:26:a3:9c:bd:a5:a6:b1:
                    57:0c:11:b3:7d:5d:bc:c6:80:b7:85:b3:61:e1:a8:
                    aa:7d:45:45:f4:bc:cd:ea:81:83:11:b3:8c:5b:9b:
                    08:a6:a2:5e:ce:2e:fe:98:c9:dc:eb:76:fe:f2:6f:
                    61:48:ea:2a:72:d0:d0:0d:82:ee:f7:46:6f:22:05:
                    81:c8:d5:cc:e1:16:99:77:52:81:e7:da:4e:d2:9a:
                    c1:36:4f:d8:19:d6:8c:de:5b:72:2e:d0:77:2b:f9:
                    4d:b8:95:ce:57:13:ad:52:01:61:18:6b:71:d5:6c:
                    20:82:0a:53:99:07:94:f0:61:5b:b4:75:ad:34:6a:
                    c0:a7:30:b9:97:2a:35:33:a3:38:ba:cd:ce:ff:10:
                    dc:ff:b7:71:63:ab:f9:db:64:6e:81:9e:ae:0f:97:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:14:96:36:AD:20:9E:1E:DE:BA:3C:80:38:0C:FB:F5:D8:3E:6A
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233382e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:57:dd:c2:97:3d:ab:5f:47:d0:59:58:30:d0:5c:f1:38:72:
         74:5b:ff:3d:1d:8c:f8:d1:39:92:eb:fa:67:09:15:10:a3:d7:
         f7:3b:3c:c2:66:d7:ae:6f:8d:7c:5d:e7:cf:86:d1:3a:9d:17:
         d3:b6:99:13:3f:29:20:c2:a6:e2:21:e9:f7:f4:2d:46:3d:e1:
         fa:f7:4c:e4:7e:03:f1:86:ef:9f:23:c2:80:52:ba:eb:04:e9:
         fc:ed:99:76:5b:ec:9b:81:c4:eb:e4:0f:e3:a2:c6:36:74:15:
         53:38:5f:f2:da:9e:70:37:f3:fc:5b:cf:fa:c2:e3:80:62:3d:
         02:60:da:37:04:53:3d:95:33:07:00:9b:6f:0f:df:a1:d3:2a:
         f3:7a:f0:bd:f2:57:d9:94:03:14:97:ca:75:41:c9:1a:80:83:
         f0:52:3e:5e:e7:fc:fa:bb:b7:b4:b8:16:be:09:b9:51:fd:ee:
         fa:05:c0:81:99:39:85:8e:5e:4e:22:69:27:19:8e:f7:d6:31:
         5a:e4:86:34:a8:66:63:85:35:62:f0:00:f8:50:46:dc:fe:10:
         e0:10:e7:59:8e:7f:b5:61:a9:ea:0d:57:fc:7f:ff:d1:f9:8e:
         39:be:b3:e9:db:20:66:11:b0:f8:2a:94:a5:26:a8:55:25:96:
         23:b6:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:44:58 2026 by rpki-client