Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
File:                     3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          ZIrz1nDyOgw9DL/Cn4VcYzDTXSlfJne+sphMDrtPGvI=
Subject key identifier:   4D:EE:1A:53:2E:AF:85:FA:D0:CD:66:DB:19:C3:3D:B9:77:3D:43:95
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       5D68F0E0707423B27857CC6C38D44F7A3F892C27
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa
Signing time:             Fri 13 Mar 2026 20:20:03 +0000
ROA not before:           Fri 13 Mar 2026 20:15:03 +0000
ROA not after:            Fri 12 Mar 2027 20:20:03 +0000
asID:                     263509
IP address blocks:        191.243.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:68:f0:e0:70:74:23:b2:78:57:cc:6c:38:d4:4f:7a:3f:89:2c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Mar 13 20:15:03 2026 GMT
            Not After : Mar 12 20:20:03 2027 GMT
        Subject: CN=4DEE1A532EAF85FAD0CD66DB19C33DB9773D4395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:60:30:2b:ab:17:4a:70:a6:37:25:c5:48:
                    03:c0:29:16:fe:58:42:d5:75:6f:59:f6:f2:ce:24:
                    61:5c:40:73:9a:c0:d4:c6:86:cf:b0:da:5b:8a:a0:
                    89:8d:90:a0:28:6a:ba:b7:4c:21:af:88:c5:98:57:
                    d6:c9:6a:6e:e7:b4:64:04:13:3c:05:71:6e:bf:fe:
                    05:c2:dd:94:32:d5:e4:21:b1:a7:b2:b0:21:9e:65:
                    f3:1f:3a:71:bb:af:d5:c8:87:8a:5a:3c:7d:7b:41:
                    04:d4:49:78:fe:99:37:9d:d3:32:7a:0b:2e:4f:4e:
                    42:c6:d8:a8:82:0e:0b:cd:eb:d2:f0:24:13:2c:3a:
                    3a:e0:80:29:e8:df:45:66:d1:cb:a3:85:43:32:48:
                    ab:ef:6f:ff:79:34:4f:6c:2a:d2:3a:85:64:62:b3:
                    d4:b8:6a:3b:4c:2d:a6:94:11:35:07:b8:f1:54:5f:
                    90:3f:16:9c:c0:50:67:d5:c9:e1:59:1a:b7:fe:89:
                    65:c2:55:00:c4:97:ad:5f:2b:ed:76:26:d1:54:17:
                    28:be:e1:29:96:31:44:3b:03:38:b7:fc:10:2c:7d:
                    42:26:a3:b4:f5:cf:32:61:0e:ef:45:84:10:b0:57:
                    d9:74:40:cc:fa:5c:ac:5e:c8:46:20:33:f9:b2:46:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:1A:53:2E:AF:85:FA:D0:CD:66:DB:19:C3:3D:B9:77:3D:43:95
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3137362e302f32302d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:b1:0e:1e:98:40:7d:e0:54:11:8e:bf:8d:8c:bc:70:c4:
         05:83:e3:8a:7b:d1:ff:e5:99:a6:ce:3c:18:df:49:8b:79:26:
         56:da:29:6a:02:4d:60:7e:13:73:98:2c:46:54:88:e6:55:38:
         96:66:ee:45:73:ad:a4:ed:3d:d5:b3:a9:b9:c2:cb:73:e5:8d:
         8c:a4:39:d5:fc:3e:13:79:71:9d:f8:3e:67:fb:7c:84:e6:e1:
         91:fc:55:f5:76:b2:ce:8a:f3:03:77:15:ed:08:ee:b1:6c:49:
         c0:65:16:04:86:15:c5:16:d1:32:39:9c:ed:9b:fd:ab:78:48:
         58:63:2a:b6:1e:94:fe:90:30:f6:6e:27:ae:32:81:10:29:8f:
         70:41:48:3e:64:cb:63:44:3b:08:97:76:73:22:d8:f4:fc:c9:
         1f:28:82:03:02:3e:56:bb:9d:d9:d9:2b:47:8b:63:0d:5a:ac:
         bb:4f:13:77:4e:6e:34:2f:45:73:53:0e:d9:53:ef:3f:ae:78:
         94:de:9f:08:dd:02:e9:f6:07:c6:29:5a:b1:83:80:00:4d:aa:
         ad:7d:6c:c1:cc:2d:8c:3f:6a:64:f0:47:c9:f3:09:e0:a4:e7:
         b0:ed:3a:a1:3d:8a:59:bb:68:bc:c5:d9:91:a7:0d:1b:f2:09:
         ed:ab:c2:09
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXWjw4HB0I7J4V8xsONRPej+JLCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQwN0RGQzFDRDU4QUQ0MDA5NzRCOERDNEMwQTMxRDRF
RTVDMkExMzAeFw0yNjAzMTMyMDE1MDNaFw0yNzAzMTIyMDIwMDNaMDMxMTAvBgNV
BAMTKDRERUUxQTUzMkVBRjg1RkFEMENENjZEQjE5QzMzREI5NzczRDQzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUWAwK6sXSnCmNyXFSAPAKRb+
WELVdW9Z9vLOJGFcQHOawNTGhs+w2luKoImNkKAoarq3TCGviMWYV9bJam7ntGQE
EzwFcW6//gXC3ZQy1eQhsaeysCGeZfMfOnG7r9XIh4paPH17QQTUSXj+mTed0zJ6
Cy5PTkLG2KiCDgvN69LwJBMsOjrggCno30Vm0cujhUMySKvvb/95NE9sKtI6hWRi
s9S4ajtMLaaUETUHuPFUX5A/FpzAUGfVyeFZGrf+iWXCVQDEl61fK+12JtFUFyi+
4SmWMUQ7Azi3/BAsfUImo7T1zzJhDu9FhBCwV9l0QMz6XKxeyEYgM/myRtFxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTe4aUy6vhfrQzWbbGcM9uXc9Q5UwHwYDVR0j
BBgwFoAURAffwc1YrUAJdLjcTAox1O5cKhMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzFVZmlqWlVyVHp2QzJBc2VzUVNrVmtGMXpTdm9oRzhacTFNUHFHQnlI
VGkvMC80NDA3REZDMUNENThBRDQwMDk3NEI4REM0QzBBMzFENEVFNUMyQTEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0MDdERkMxQ0Q1OEFENDAw
OTc0QjhEQzRDMEEzMUQ0RUU1QzJBMTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MxVWZpalpVclR6dkMyQXNlc1FTa1ZrRjF6U3ZvaEc4WnExTVBxR0J5SFRpLzAv
MzEzOTMxMmUzMjM0MzMyZTMxMzczNjJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMy
MzYzMzM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL/zsDANBgkqhkiG9w0BAQsFAAOCAQEAg6Kx
Dh6YQH3gVBGOv42MvHDEBYPjinvR/+WZps48GN9Ji3kmVtopagJNYH4Tc5gsRlSI
5lU4lmbuRXOtpO091bOpucLLc+WNjKQ51fw+E3lxnfg+Z/t8hObhkfxV9Xayzorz
A3cV7QjusWxJwGUWBIYVxRbRMjmc7Zv9q3hIWGMqth6U/pAw9m4nrjKBECmPcEFI
PmTLY0Q7CJd2cyLY9PzJHyiCAwI+Vrud2dkrR4tjDVqsu08Td05uNC9Fc1MO2VPv
P654lN6fCN0C6fYHxilasYOAAE2qrX1swcwtjD9qZPBHyfMJ4KTnsO06oT2KWbto
vMXZkacNG/IJ7avCCQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 07:12:11 2026 by rpki-client