Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
File:                     3139302e392e38382e302f32322d3332203d3e20323731353739.roa (raw, json)
Hash identifier:          xcIe+P8TlY6FyTFyTtdoqHT0yGb2FY3xKELPTbyY5Q8=
Subject key identifier:   A1:FB:E2:C2:39:3B:DB:15:6B:26:C6:23:63:9B:9D:7D:63:B0:9B:1F
Certificate issuer:       /CN=933741FECC86D83F16218875E8CEBD815DB63DC3
Certificate serial:       3F29D25FF0B8C81F7EAEE0D3BE0E9A8B6448DC52
Authority key identifier: 93:37:41:FE:CC:86:D8:3F:16:21:88:75:E8:CE:BD:81:5D:B6:3D:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa
Signing time:             Thu 03 Sep 2026 12:22:00 +0000
ROA not before:           Thu 03 Sep 2026 12:17:00 +0000
ROA not after:            Thu 02 Sep 2027 12:22:00 +0000
asID:                     271579
IP address blocks:        190.9.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.crl
                          rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:29:d2:5f:f0:b8:c8:1f:7e:ae:e0:d3:be:0e:9a:8b:64:48:dc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933741FECC86D83F16218875E8CEBD815DB63DC3
        Validity
            Not Before: Sep  3 12:17:00 2026 GMT
            Not After : Sep  2 12:22:00 2027 GMT
        Subject: CN=A1FBE2C2393BDB156B26C623639B9D7D63B09B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0d:45:0a:ac:ee:aa:6d:5e:f3:1f:66:e3:6b:
                    53:45:d3:d4:2b:95:91:fb:b0:57:04:0c:cd:21:93:
                    3c:05:91:73:3b:a8:b6:60:c4:52:a1:1c:38:38:43:
                    40:58:a4:5b:4b:fd:7e:3e:95:61:64:da:1a:a1:34:
                    e6:34:38:57:c5:01:a7:aa:87:54:85:21:9e:e1:28:
                    25:3c:2f:72:95:26:57:2b:70:39:f5:db:06:5a:98:
                    62:a1:9e:f5:5e:44:ed:59:b8:5c:8a:80:86:f1:de:
                    47:80:95:24:b8:d9:c8:c2:39:02:b0:1d:97:1c:eb:
                    40:b8:45:83:9a:27:63:f9:88:44:6b:6b:ac:4e:0a:
                    87:e5:f1:55:04:b7:0a:f4:6d:56:c5:da:5e:06:b7:
                    3a:df:56:63:56:cf:7d:ce:dd:9b:e8:07:0f:6a:8b:
                    0b:25:a3:7a:cb:31:ff:27:73:ba:14:51:38:3f:e9:
                    77:0e:4e:b0:7a:49:53:24:05:f8:38:30:17:1a:6b:
                    a8:79:8d:fa:02:3c:59:fc:c9:c7:ab:a1:2d:94:ed:
                    f7:e6:72:ab:cf:a6:33:82:c6:9b:c2:91:98:01:b2:
                    a9:18:9a:2d:e9:3c:c4:7d:f2:df:9f:22:6b:ad:29:
                    00:24:66:f6:f4:78:02:81:f9:1a:d2:09:cd:1f:9b:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FB:E2:C2:39:3B:DB:15:6B:26:C6:23:63:9B:9D:7D:63:B0:9B:1F
            X509v3 Authority Key Identifier:
                keyid:93:37:41:FE:CC:86:D8:3F:16:21:88:75:E8:CE:BD:81:5D:B6:3D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/933741FECC86D83F16218875E8CEBD815DB63DC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933741FECC86D83F16218875E8CEBD815DB63DC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3MZ5yPv9TiFWToF6V1hgVLT5eH56MS2M3mEzH6rrc9d/0/3139302e392e38382e302f32322d3332203d3e20323731353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:85:26:42:fb:c5:61:9a:95:d9:a9:65:80:08:dd:d9:84:
         99:22:6a:50:e6:14:e3:d4:ea:02:a1:9b:69:0a:c2:bf:b7:52:
         4f:da:56:85:72:ae:69:71:c6:86:a7:39:a1:65:2d:3f:03:17:
         5c:b9:22:ea:ba:3f:10:5f:92:9f:49:84:0c:b3:a7:b3:8f:b4:
         c9:e5:87:b7:d3:1c:5d:18:be:6a:1a:d1:52:01:14:cc:29:55:
         56:79:ae:7c:99:6e:f5:61:05:75:19:14:95:6f:b2:66:dd:09:
         ee:d7:0d:ae:e2:9a:18:c5:7f:23:c5:fc:24:85:d7:81:29:e9:
         bd:25:85:05:5d:af:02:28:94:01:68:d2:f6:0e:d7:dd:99:01:
         ce:dc:11:44:72:15:03:a1:1e:0d:c5:f5:63:ee:31:11:40:96:
         06:66:d2:b3:09:46:12:03:38:5a:8d:75:d5:4d:c0:55:42:e0:
         de:24:35:45:21:be:6f:04:a1:5a:a7:b5:70:e1:29:76:89:85:
         07:92:dc:9e:5c:26:98:08:a3:5e:82:ca:14:8b:a6:de:e9:13:
         91:a5:17:4f:38:37:32:de:cb:52:6c:aa:0d:36:28:3d:1c:20:
         fe:6f:72:3c:29:4e:da:03:0f:d5:60:38:28:80:9a:9a:43:4f:
         b1:f6:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:54:47 2026 by rpki-client