Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3139302e38392e3232302e302f32322d3332203d3e20323637353032.roa
File:                     3139302e38392e3232302e302f32322d3332203d3e20323637353032.roa (raw, json)
Hash identifier:          dRA5u+N9RAqXrfRVnSNRBGHlpMD03Jb47V3JqpYYPNk=
Subject key identifier:   72:51:EB:95:33:DF:02:98:43:D9:6A:6B:FC:B3:BC:6D:C1:9C:89:C8
Certificate issuer:       /CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
Certificate serial:       477918D3E7BCB198942A1996C9B21DB8A8718D7C
Authority key identifier: 84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3139302e38392e3232302e302f32322d3332203d3e20323637353032.roa
Signing time:             Wed 22 Apr 2026 13:22:56 +0000
ROA not before:           Wed 22 Apr 2026 13:17:56 +0000
ROA not after:            Wed 21 Apr 2027 13:22:56 +0000
asID:                     267502
IP address blocks:        190.89.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl
                          rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:79:18:d3:e7:bc:b1:98:94:2a:19:96:c9:b2:1d:b8:a8:71:8d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
        Validity
            Not Before: Apr 22 13:17:56 2026 GMT
            Not After : Apr 21 13:22:56 2027 GMT
        Subject: CN=7251EB9533DF029843D96A6BFCB3BC6DC19C89C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:3f:7f:ee:65:a6:f5:6e:40:6f:96:32:33:
                    cd:f5:48:1e:5e:34:2e:17:ec:19:ee:32:49:4e:ed:
                    72:5b:70:e4:25:f7:1b:99:4e:1b:44:71:4b:1e:81:
                    0e:15:1f:99:5b:96:50:a7:e9:3c:d4:62:f3:bf:8d:
                    f6:e7:b2:83:92:ef:e1:de:19:81:f9:af:60:70:6f:
                    f0:bc:b0:4e:7c:16:da:62:9e:c6:b5:a5:df:42:2a:
                    44:3b:28:7f:ce:60:ff:ac:7e:55:b0:4e:bf:97:34:
                    31:30:0c:79:74:98:03:28:19:fe:68:90:54:c4:e3:
                    19:e4:99:7a:d0:e6:0e:7f:73:c1:3c:b2:f1:7c:fe:
                    f6:0f:2f:a9:c7:a6:39:5f:c7:1a:6c:3b:bb:63:45:
                    cf:38:d4:0a:9e:56:75:db:1a:77:df:9e:3c:05:e7:
                    01:d5:22:43:6f:b9:0a:11:48:9c:f1:50:ca:e8:e7:
                    a0:fd:b0:f2:a4:3a:6a:22:38:5a:f8:62:25:15:a3:
                    cc:62:aa:2f:13:21:f8:27:49:f8:d2:60:42:8f:5e:
                    9b:0a:e6:e0:d9:55:e0:59:5b:8a:96:e9:5d:c5:b7:
                    34:e6:eb:e8:84:30:4a:98:f2:38:46:8b:fe:0e:9d:
                    dd:2a:ff:2c:ee:ef:49:5d:5d:d9:b7:bb:95:3a:56:
                    3e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:EB:95:33:DF:02:98:43:D9:6A:6B:FC:B3:BC:6D:C1:9C:89:C8
            X509v3 Authority Key Identifier:
                keyid:84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3139302e38392e3232302e302f32322d3332203d3e20323637353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:06:42:be:b8:9a:a6:ce:ea:af:3e:8f:dc:d8:83:0c:53:
         13:bd:db:64:9c:6d:14:55:a9:93:78:2b:c9:f3:fd:6d:97:da:
         45:01:2c:ec:fd:0a:ff:f0:40:6a:b3:9b:cb:b6:1d:45:13:a1:
         5e:a5:0b:c4:de:5f:60:7d:8d:ef:32:40:df:90:aa:42:e1:f7:
         e1:5f:b3:cc:36:0a:fa:e5:71:57:e4:0d:92:e6:44:ec:70:74:
         79:92:17:46:6d:98:0a:e4:44:98:4a:5a:98:15:09:d0:b2:e3:
         7c:4f:98:91:39:0c:8f:f6:31:84:17:9b:51:42:1c:89:cb:77:
         6c:d3:6c:da:9e:7d:36:52:97:fe:f3:83:9c:15:3e:4b:94:4c:
         27:3f:b1:63:4a:97:d4:15:85:16:8b:84:6c:ce:0b:1e:cc:04:
         0b:40:f9:49:50:14:65:46:80:88:16:40:ba:c8:f3:7c:b8:f4:
         18:d1:0c:c6:4e:eb:7e:08:0d:21:0a:8d:fe:a0:ac:1c:80:14:
         c1:6f:d2:56:b5:4d:e9:cb:81:05:c6:63:7f:29:d0:2c:2b:74:
         a7:47:7b:6f:13:6f:ca:2e:6e:2b:2b:80:fa:50:55:6b:53:72:
         5d:06:fc:1b:2f:19:59:37:1e:00:53:49:36:e9:df:50:56:2c:
         d5:4e:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:21 2026 by rpki-client