Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa
File:                     3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          PnlRhvcAbWpprsjTQ+t1SYUVrs72aNfkdI9Tn6VRsSc=
Subject key identifier:   D6:7C:C7:C2:C4:78:CB:DD:E8:EC:79:19:D0:7E:E6:5F:72:3F:37:88
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       43B740A3109F88C70D9C9477931CC0BF0745AAF7
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa
Signing time:             Wed 18 Mar 2026 11:04:38 +0000
ROA not before:           Wed 18 Mar 2026 10:59:38 +0000
ROA not after:            Wed 17 Mar 2027 11:04:38 +0000
asID:                     263509
IP address blocks:        191.243.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b7:40:a3:10:9f:88:c7:0d:9c:94:77:93:1c:c0:bf:07:45:aa:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Mar 18 10:59:38 2026 GMT
            Not After : Mar 17 11:04:38 2027 GMT
        Subject: CN=D67CC7C2C478CBDDE8EC7919D07EE65F723F3788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:b8:40:24:14:3c:f7:3c:da:48:27:e0:8b:
                    fe:bf:41:1f:93:b1:8c:63:d6:14:7c:10:0d:a8:1c:
                    31:36:a8:7f:e2:2f:0a:56:a5:21:d5:83:76:c7:56:
                    6a:78:32:44:da:06:77:24:6d:27:19:32:90:af:68:
                    dc:0f:ec:30:6b:dd:bf:3e:67:10:f4:ef:b9:ae:6c:
                    5e:4c:b3:d6:8d:08:2a:6a:5f:96:c8:d8:de:cf:e6:
                    7a:28:24:77:af:b6:80:dd:e2:8a:57:b2:ad:31:c0:
                    69:de:e3:7a:bb:cb:37:3c:32:4f:1a:0a:b5:6d:d1:
                    f8:23:f4:d6:c8:58:aa:42:a5:c1:ac:64:f6:e9:1e:
                    cb:d5:52:e4:de:36:93:91:09:bd:23:4c:af:65:39:
                    f2:ee:0f:28:6a:fe:2c:e0:fe:4e:66:44:12:26:a3:
                    c0:3c:99:d3:6a:dd:52:1f:f0:e4:c5:52:54:37:3e:
                    bd:09:b7:f7:77:8e:87:3f:49:e7:92:76:10:b8:8a:
                    98:7e:46:d9:d7:b6:71:77:55:d9:0f:88:1a:67:10:
                    ac:3a:ad:7f:4b:f6:e1:0a:b8:04:cd:f4:96:9b:89:
                    ea:57:5d:09:94:eb:99:a4:05:57:bf:b1:71:31:a6:
                    59:3d:71:45:5e:4b:0d:32:fd:59:14:d3:3f:b3:2c:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7C:C7:C2:C4:78:CB:DD:E8:EC:79:19:D0:7E:E6:5F:72:3F:37:88
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:c2:d6:29:92:2b:36:61:d2:cd:8a:7a:db:5e:c3:c4:6a:
         4e:40:ab:49:60:55:8c:20:83:2d:6a:5b:65:1c:43:27:df:6c:
         38:22:2b:69:6a:ae:a7:3b:c0:b1:88:14:0e:62:62:f0:c9:25:
         08:db:c1:85:31:e4:58:c4:d3:33:58:5a:26:b2:ae:1e:91:9a:
         e5:62:14:65:a8:63:53:3e:69:eb:16:f1:00:a9:f3:da:fd:60:
         dc:ad:01:8c:34:92:98:42:03:0c:fa:19:33:85:e8:e0:ed:34:
         19:52:ac:5c:2e:12:c4:de:8e:61:6e:ea:14:ad:32:44:ae:4e:
         c2:89:37:5e:1c:5d:fe:76:60:69:be:6b:73:79:85:4a:63:96:
         4e:7c:75:8c:8d:37:e3:c2:cd:3b:43:ac:fe:1c:7e:44:cd:70:
         36:1a:ee:0a:2c:84:48:6a:32:1f:7a:df:8f:2f:b5:96:ab:53:
         64:a0:ef:fe:1d:8e:b8:85:59:67:a2:0e:6a:5c:1a:59:6b:47:
         2a:a1:f9:f7:ad:64:85:fc:65:e5:22:08:aa:8e:10:df:37:23:
         1a:3c:b9:bc:3c:00:cb:9e:38:e3:f4:fc:68:4c:1c:6a:f9:d9:
         1f:6a:ed:a1:27:a1:2c:7a:0d:26:c4:a7:78:0b:b2:d2:b9:2c:
         75:88:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:14:37 2026 by rpki-client