Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233392e302f32342d3234203d3e20323633343834.roa
File:                     3139312e3234322e3233392e302f32342d3234203d3e20323633343834.roa (raw, json)
Hash identifier:          UAlLvzvuDxZRYXonLuntNIUjx5/JhQGg3y9CD0BeIus=
Subject key identifier:   1A:B9:91:F0:4E:C1:9A:56:77:6C:96:20:13:59:BF:7D:60:A2:33:A2
Certificate issuer:       /CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
Certificate serial:       76F206BEBF86817945859B605C7B509A995AC9A3
Authority key identifier: 77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233392e302f32342d3234203d3e20323633343834.roa
Signing time:             Thu 05 Mar 2026 13:52:20 +0000
ROA not before:           Thu 05 Mar 2026 13:47:20 +0000
ROA not after:            Thu 04 Mar 2027 13:52:20 +0000
asID:                     263484
IP address blocks:        191.242.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl
                          rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f2:06:be:bf:86:81:79:45:85:9b:60:5c:7b:50:9a:99:5a:c9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD
        Validity
            Not Before: Mar  5 13:47:20 2026 GMT
            Not After : Mar  4 13:52:20 2027 GMT
        Subject: CN=1AB991F04EC19A56776C96201359BF7D60A233A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:dd:e5:10:f7:4a:21:48:c7:79:33:4c:cc:8d:
                    d8:a2:1a:c1:9f:12:f0:1c:7e:48:41:ba:5c:0d:fd:
                    41:8a:63:1e:2d:ed:c8:57:43:09:e2:17:41:91:51:
                    15:56:6a:8b:f0:55:39:04:2f:ce:ca:34:c8:e1:9b:
                    19:0a:cb:fb:5e:42:e4:f5:af:8f:da:f5:d5:63:a1:
                    e5:64:5d:41:f2:d4:b0:f5:46:02:48:20:fc:b3:d9:
                    73:e4:81:2f:1c:7d:1e:74:5a:f5:31:81:36:ec:d9:
                    0e:ad:33:8b:33:48:3f:3f:b3:95:4f:38:0e:8c:6a:
                    53:dc:d6:71:d9:37:ba:31:b9:1d:20:f3:55:62:29:
                    a2:14:89:c9:f7:18:9b:49:a4:26:b3:91:f3:24:0e:
                    f5:df:19:84:7b:0e:f5:21:53:75:0f:82:3e:6b:db:
                    09:86:5f:ea:bf:d7:7b:d7:ef:26:12:5d:4d:2f:a0:
                    57:9a:67:ff:d7:04:48:14:56:78:10:53:e9:f9:18:
                    ea:40:a2:13:1e:5b:25:de:11:02:59:78:11:02:de:
                    a2:fc:fd:d3:1c:1b:55:18:42:4c:5e:57:53:a7:81:
                    69:0b:51:7f:93:15:e8:fa:88:ae:ac:1f:b8:a7:65:
                    e9:dc:54:0d:8a:47:fd:66:8e:19:8f:bf:6d:a5:68:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:91:F0:4E:C1:9A:56:77:6C:96:20:13:59:BF:7D:60:A2:33:A2
            X509v3 Authority Key Identifier:
                keyid:77:7B:D5:D5:BE:4C:99:13:C3:CB:81:E6:7F:E7:7C:31:43:C1:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/777BD5D5BE4C9913C3CB81E67FE77C3143C1C1DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsFirMsKYkNhFDbnVru1zhhrRvGEgq95xZcNkHp4CvYR/0/3139312e3234322e3233392e302f32342d3234203d3e20323633343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f5:14:73:0b:83:21:a2:5e:c3:33:b3:fa:e4:03:a6:50:a8:
         08:d0:03:f1:9f:fb:db:6a:95:e8:7e:53:7d:f5:43:34:95:96:
         27:02:9a:cd:5e:b8:f3:01:1c:b8:b2:2a:fd:96:e7:44:91:e3:
         0f:8f:5d:a4:6b:d3:f6:b8:0e:2f:74:f1:50:0f:30:96:86:e4:
         85:8d:19:f3:61:de:70:60:0b:53:57:c3:68:c7:7c:e5:56:16:
         ee:58:0f:8f:9f:97:3a:11:36:77:87:61:0f:eb:79:21:75:b1:
         35:da:bc:c6:e2:df:19:d5:58:80:8a:c1:a1:20:ac:6b:2b:05:
         92:4d:b4:80:8c:06:58:1e:73:14:ce:7f:82:b8:88:bb:65:68:
         3c:76:d5:52:67:5b:a4:26:7d:a4:5c:ea:d1:49:fc:40:29:bf:
         38:00:4f:89:6c:d5:f2:b8:a4:7d:6a:8a:9c:d5:1c:6b:16:6d:
         85:b3:44:a2:46:38:d6:d5:87:8f:1c:4f:4e:ac:cb:ed:3f:77:
         a3:c6:af:6a:ac:23:a1:61:e5:c8:21:d1:16:3c:89:d6:32:a8:
         97:aa:2c:0e:49:56:0c:30:3f:d7:14:c6:89:34:53:5c:23:81:
         7c:bf:cb:89:a5:9d:29:90:24:b9:0b:38:22:3f:f5:26:96:c5:
         b8:54:e6:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdvIGvr+GgXlFhZtgXHtQmplayaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3QkQ1RDVCRTRDOTkxM0MzQ0I4MUU2N0ZFNzdDMzE0
M0MxQzFERDAeFw0yNjAzMDUxMzQ3MjBaFw0yNzAzMDQxMzUyMjBaMDMxMTAvBgNV
BAMTKDFBQjk5MUYwNEVDMTlBNTY3NzZDOTYyMDEzNTlCRjdENjBBMjMzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu3eUQ90ohSMd5M0zMjdiiGsGf
EvAcfkhBulwN/UGKYx4t7chXQwniF0GRURVWaovwVTkEL87KNMjhmxkKy/teQuT1
r4/a9dVjoeVkXUHy1LD1RgJIIPyz2XPkgS8cfR50WvUxgTbs2Q6tM4szSD8/s5VP
OA6MalPc1nHZN7oxuR0g81ViKaIUicn3GJtJpCazkfMkDvXfGYR7DvUhU3UPgj5r
2wmGX+q/13vX7yYSXU0voFeaZ//XBEgUVngQU+n5GOpAohMeWyXeEQJZeBEC3qL8
/dMcG1UYQkxeV1OngWkLUX+TFej6iK6sH7inZencVA2KR/1mjhmPv22laAJZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUGrmR8E7BmlZ3bJYgE1m/fWCiM6IwHwYDVR0j
BBgwFoAUd3vV1b5MmRPDy4Hmf+d8MUPBwd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNGaXJNc0tZa05oRkRiblZydTF6aGhyUnZHRWdxOTV4WmNOa0hwNEN2
WVIvMC83NzdCRDVENUJFNEM5OTEzQzNDQjgxRTY3RkU3N0MzMTQzQzFDMURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3N0JENUQ1QkU0Qzk5MTND
M0NCODFFNjdGRTc3QzMxNDNDMUMxREQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzRmlyTXNLWWtOaEZEYm5WcnUxemhoclJ2R0VncTk1eFpjTmtIcDRDdllSLzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/y7zANBgkqhkiG9w0BAQsFAAOCAQEATvUU
cwuDIaJewzOz+uQDplCoCNAD8Z/722qV6H5TffVDNJWWJwKazV648wEcuLIq/Zbn
RJHjD49dpGvT9rgOL3TxUA8wlobkhY0Z82HecGALU1fDaMd85VYW7lgPj5+XOhE2
d4dhD+t5IXWxNdq8xuLfGdVYgIrBoSCsaysFkk20gIwGWB5zFM5/griIu2VoPHbV
UmdbpCZ9pFzq0Un8QCm/OABPiWzV8rikfWqKnNUcaxZthbNEokY41tWHjxxPTqzL
7T93o8avaqwjoWHlyCHRFjyJ1jKol6osDklWDDA/1xTGiTRTXCOBfL/LiaWdKZAk
uQs4Ij/1JpbFuFTm6Q==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:53:10 2026 by rpki-client