Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa
File:                     3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa (raw, json)
Hash identifier:          iD8njkNi1+SywWFxKBhuzbzW8A2DGeqSj/w6gEbhJDU=
Subject key identifier:   89:85:B6:C4:5C:E0:C7:15:5F:27:86:13:19:49:0A:53:44:3A:49:C7
Certificate issuer:       /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial:       5A1BD527D3BEB6E6BD19043BAFADDCFC80FF83B5
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa
Signing time:             Mon 11 May 2026 20:00:00 +0000
ROA not before:           Mon 11 May 2026 19:55:00 +0000
ROA not after:            Mon 10 May 2027 20:00:00 +0000
asID:                     274667
IP address blocks:        192.141.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
                          rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1b:d5:27:d3:be:b6:e6:bd:19:04:3b:af:ad:dc:fc:80:ff:83:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
        Validity
            Not Before: May 11 19:55:00 2026 GMT
            Not After : May 10 20:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:01:c2:be:eb:cd:b9:e3:67:94:fa:73:df:
                    58:b7:1d:d2:f9:0e:7e:3b:8c:98:75:04:04:e9:1d:
                    b4:93:23:a3:18:2d:d9:7e:c8:1f:90:67:25:f1:76:
                    29:a5:fe:2e:f4:d4:8c:97:2a:3a:f2:b8:11:5b:9f:
                    3e:ea:4d:d5:bb:8f:bd:cf:c3:37:2b:4c:76:84:9b:
                    6d:8f:d1:63:65:8d:80:4a:52:23:6f:de:9b:0d:c2:
                    7c:bd:09:25:1e:e7:53:eb:f3:d3:c5:09:89:e8:aa:
                    2a:d9:a3:78:04:96:35:fa:ca:ef:28:41:25:a8:31:
                    cf:d3:88:ef:27:78:2c:00:bb:de:91:05:07:d5:ba:
                    8d:f3:3b:9c:3b:15:46:39:5f:78:ff:8e:2d:fd:b0:
                    fb:ae:f4:80:2e:29:34:2e:93:ef:95:96:ba:13:a5:
                    a4:f6:75:f6:d7:49:d9:e4:37:7e:06:04:5f:b6:76:
                    85:ff:ce:f0:7f:59:27:95:7f:8e:34:ce:95:47:fa:
                    08:91:db:01:ec:aa:4d:6b:e0:55:57:c3:70:40:e7:
                    d1:28:1b:83:d1:82:6b:2b:6c:5d:d9:aa:6f:c1:66:
                    ba:1f:29:11:da:0d:24:1f:4d:5e:ba:70:44:f1:ba:
                    89:57:e6:19:d1:39:cc:13:0b:1e:47:8e:cd:79:b5:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:85:B6:C4:5C:E0:C7:15:5F:27:86:13:19:49:0A:53:44:3A:49:C7
            X509v3 Authority Key Identifier:
                keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/3139322e3134312e3136302e302f32342d3234203d3e20323734363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:31:4c:a0:7d:1e:d6:14:b7:21:d7:f2:10:ef:48:58:0b:
         6d:9b:cf:ef:7b:3e:05:f5:77:f6:85:7e:08:1b:69:d6:27:1d:
         b9:ea:58:14:83:c3:f9:12:39:14:a4:b9:97:30:93:c2:2b:1b:
         83:b5:aa:a3:6e:05:78:8c:b8:bd:de:71:99:a7:c1:cf:c4:a4:
         f4:45:c5:f8:dc:7d:8c:1c:e8:94:89:a1:df:56:cd:81:c4:ff:
         eb:15:f7:ec:f0:ac:e3:bd:5d:38:3f:0f:50:3c:d0:4b:92:df:
         1f:ba:11:e6:1f:2c:50:8f:8d:2d:29:2e:2d:ab:bf:58:fe:f0:
         63:0e:e1:53:52:e9:61:d4:84:50:53:94:00:09:2e:5a:2c:d0:
         20:be:59:94:35:3d:f0:e8:89:f8:0a:c9:dc:67:a0:50:1e:ed:
         d3:92:d7:df:78:ca:58:78:b4:8b:f8:2c:ee:23:42:a5:a8:e6:
         3e:fb:c3:8e:cf:7b:38:26:27:bd:c6:0b:ff:02:d7:5d:d5:7a:
         df:93:bb:45:2c:76:53:8c:4e:d8:a1:4a:6e:27:83:5d:70:f5:
         71:38:c6:df:2b:82:50:d4:5f:85:28:09:84:8a:7a:4a:e3:03:
         30:4c:5c:37:92:27:31:db:bf:b8:49:a4:8a:16:8e:f3:8d:44:
         60:5d:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:32:22 2026 by rpki-client