Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa
File:                     3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa (raw, json)
Hash identifier:          5kLhybl24AOxKrKqNUo78ON3LjewIgoUurgRdbYZj3I=
Subject key identifier:   0A:2F:61:A3:2F:E2:A9:5A:EB:4B:EE:50:B5:BD:77:DD:D1:85:D9:36
Certificate issuer:       /CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
Certificate serial:       4C581A04CDDB8D10FBDECD67CCD0E7A3E59F1533
Authority key identifier: 44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa
Signing time:             Wed 18 Mar 2026 11:04:38 +0000
ROA not before:           Wed 18 Mar 2026 10:59:38 +0000
ROA not after:            Wed 17 Mar 2027 11:04:38 +0000
asID:                     263509
IP address blocks:        191.243.188.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl
                          rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:58:1a:04:cd:db:8d:10:fb:de:cd:67:cc:d0:e7:a3:e5:9f:15:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13
        Validity
            Not Before: Mar 18 10:59:38 2026 GMT
            Not After : Mar 17 11:04:38 2027 GMT
        Subject: CN=0A2F61A32FE2A95AEB4BEE50B5BD77DDD185D936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:b7:0b:b4:5c:8e:2f:6a:f4:80:04:cc:9c:
                    2d:5d:96:e2:4c:56:3f:4a:e0:82:db:13:ce:cf:c7:
                    a0:a5:c3:06:7b:3c:d4:d9:3f:fc:6b:b1:f8:53:a5:
                    c5:0d:5e:24:07:3a:69:62:20:7c:ae:f6:88:4c:8d:
                    0f:18:24:ae:f9:16:70:69:12:be:60:19:fe:fc:5b:
                    13:fa:4c:e3:e4:48:38:44:a1:fa:7f:a2:ec:4a:72:
                    eb:de:bf:d5:ca:04:49:f0:69:10:de:32:b5:80:3f:
                    a0:c2:94:f3:74:b8:fe:84:5e:c5:4b:3f:8d:cd:69:
                    79:52:64:4d:ae:1b:02:77:74:62:cb:0e:c0:75:47:
                    32:a4:82:76:90:16:12:61:27:5e:09:f7:40:9e:4c:
                    90:7b:7f:99:a4:9b:f6:d3:7b:65:87:aa:3c:5f:76:
                    1e:d8:24:a9:23:b8:eb:d0:f5:55:05:d0:8d:51:ae:
                    50:2d:b1:ed:37:7c:b8:e3:ef:57:72:6e:b8:fe:4a:
                    b8:87:11:72:02:89:98:a4:81:72:98:db:61:30:43:
                    df:ac:b0:13:6b:bd:91:8a:73:32:96:81:52:58:bd:
                    9a:ec:c4:d2:36:8d:a2:68:3e:7f:e6:09:7b:0e:75:
                    2c:e6:7b:69:13:d7:1d:6e:a7:02:96:97:de:2e:b8:
                    59:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:61:A3:2F:E2:A9:5A:EB:4B:EE:50:B5:BD:77:DD:D1:85:D9:36
            X509v3 Authority Key Identifier:
                keyid:44:07:DF:C1:CD:58:AD:40:09:74:B8:DC:4C:0A:31:D4:EE:5C:2A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4407DFC1CD58AD400974B8DC4C0A31D4EE5C2A13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138382e302f32322d3332203d3e20323633353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:d3:9f:3e:49:eb:e7:a9:f0:bb:15:5c:e3:ee:ec:cc:2c:
         2f:db:f6:5d:34:ce:c2:85:2e:e5:db:d5:7d:bf:12:4e:33:5d:
         73:8a:b0:32:68:e5:7e:78:b6:24:ff:57:51:6d:05:ae:f8:fe:
         42:5a:3e:12:09:ed:a8:1b:60:be:50:29:ba:4a:77:6f:20:a9:
         97:69:7d:e5:dc:b2:9e:33:39:24:13:9e:3e:5e:6b:e7:3c:20:
         33:d0:8a:ea:7d:c5:b1:7f:0f:d9:37:ae:9a:bd:5f:75:32:02:
         c6:d9:c3:be:b9:76:7f:9a:75:6e:bd:31:38:1d:2c:0c:fc:8f:
         45:b6:ff:3f:d2:f3:48:05:09:92:72:67:6f:c4:b0:9b:03:dd:
         68:f0:4e:79:52:c6:ea:1f:c2:3e:c1:43:da:14:28:1e:4f:5d:
         31:6e:15:76:36:ed:87:bc:a4:df:d2:3b:84:e9:8c:f9:31:53:
         bc:0a:5e:b5:d5:78:63:f2:a8:85:1f:4d:a6:a0:40:d3:52:12:
         6a:1d:b6:4f:db:d5:51:0a:ff:80:49:6b:e5:57:c9:74:35:44:
         ba:07:54:d8:46:8b:5b:c4:62:4c:e5:f8:82:7c:a7:23:c3:ed:
         44:64:31:2d:5c:c5:5d:2e:a1:53:2f:82:6d:d9:e0:f7:df:07:
         d7:3b:59:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:30:39 2026 by rpki-client