Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3234382e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          D/Fr/ohIFXcwvoRUrA/LgIHmgD82D+INk6nCrffQZyQ=
Subject key identifier:   C9:C0:AD:C2:45:3C:6F:D8:10:1B:F4:86:5A:37:CF:AA:64:E5:3B:41
Certificate issuer:       /CN=1592CDDE63E047C6A7E5796A49323A4255DE24B4
Certificate serial:       0CB92E3F5A33E75A0D03728CF1D0F479D59752FC
Authority key identifier: 15:92:CD:DE:63:E0:47:C6:A7:E5:79:6A:49:32:3A:42:55:DE:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa
Signing time:             Fri 13 Mar 2026 20:44:10 +0000
ROA not before:           Fri 13 Mar 2026 20:39:10 +0000
ROA not after:            Fri 12 Mar 2027 20:44:10 +0000
asID:                     263302
IP address blocks:        191.6.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b9:2e:3f:5a:33:e7:5a:0d:03:72:8c:f1:d0:f4:79:d5:97:52:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1592CDDE63E047C6A7E5796A49323A4255DE24B4
        Validity
            Not Before: Mar 13 20:39:10 2026 GMT
            Not After : Mar 12 20:44:10 2027 GMT
        Subject: CN=C9C0ADC2453C6FD8101BF4865A37CFAA64E53B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:6b:1c:57:d4:d6:3c:9a:0e:3e:54:af:a4:
                    c2:4d:ca:58:93:36:32:82:0c:07:d0:e8:31:24:4d:
                    d1:95:83:a1:cd:9f:e4:ed:27:b0:39:89:5d:fb:9b:
                    a5:d6:e9:be:55:27:7b:b3:17:53:2e:3e:71:f5:0f:
                    56:cf:8e:24:09:c2:9b:5b:b4:59:89:12:a9:0f:99:
                    a7:47:d9:21:a0:bb:b9:5c:b2:86:6d:2e:25:2a:06:
                    cb:7f:b8:46:00:57:36:c7:1b:71:00:87:61:05:0f:
                    74:81:17:4c:a3:b9:d7:1f:6c:2e:b9:0d:9a:26:ad:
                    9a:e2:67:ed:67:3a:d9:53:08:de:43:56:4c:bd:59:
                    a9:ec:c8:be:c7:e1:fd:fa:82:a3:33:3f:a1:8b:f7:
                    d5:68:4b:38:9e:ad:dd:4a:dc:32:04:ea:f5:23:46:
                    99:28:ae:73:c6:3b:2a:87:b9:f2:85:2e:76:a3:0e:
                    a7:2b:6a:cb:d0:e7:f2:69:a5:cf:6b:f7:ce:30:e6:
                    01:8a:69:87:0f:06:e7:22:95:fe:5c:04:f2:5f:82:
                    0d:b3:e1:3a:b6:8e:49:15:86:80:cf:6e:56:31:aa:
                    a8:62:21:46:46:7f:6d:64:71:b1:2e:1a:6d:6b:a3:
                    ba:c6:09:d4:9b:84:46:4d:ca:ad:44:54:6a:f4:60:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C0:AD:C2:45:3C:6F:D8:10:1B:F4:86:5A:37:CF:AA:64:E5:3B:41
            X509v3 Authority Key Identifier:
                keyid:15:92:CD:DE:63:E0:47:C6:A7:E5:79:6A:49:32:3A:42:55:DE:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3234382e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:dc:69:b1:b3:87:d8:05:48:60:7c:15:0b:dc:62:d5:3c:
         30:85:57:80:77:27:1b:8e:8b:76:f8:90:6f:f7:60:36:b7:40:
         b0:7c:60:0f:f6:16:cb:93:bf:a1:b2:65:d8:06:a6:6b:aa:c3:
         66:af:0d:7f:03:9c:db:95:04:f1:e3:b2:a6:be:c2:38:da:c6:
         4b:27:c2:87:c9:11:0f:fb:69:8c:dd:85:b8:cc:13:9f:6a:04:
         d7:88:da:2b:6a:6f:bb:44:91:fa:f8:3a:75:be:b9:1f:47:5d:
         ea:a7:83:13:b5:56:51:3b:c7:84:a6:4c:5c:f7:ea:76:75:14:
         c3:85:e8:bc:09:78:a3:f5:6e:14:95:64:9f:bc:54:5c:f1:77:
         f9:71:34:51:ef:87:aa:f3:a1:2e:72:6d:0f:17:03:31:6c:c3:
         69:be:36:bb:5c:cb:cc:87:75:53:13:79:bc:f0:14:28:7a:36:
         c8:d9:52:5e:5c:a2:74:59:b3:7a:7d:64:41:4d:1c:24:f4:50:
         f9:73:a7:f1:dd:8b:f3:80:f5:25:bb:01:2e:79:18:cc:78:2b:
         f7:5d:06:47:25:8f:9f:2a:19:95:b5:86:f8:24:62:ec:f4:09:
         b0:b4:33:69:30:43:0c:37:e5:22:c4:b3:ac:14:18:d7:05:68:
         0d:0f:27:b2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDLkuP1oz51oNA3KM8dD0edWXUvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU5MkNEREU2M0UwNDdDNkE3RTU3OTZBNDkzMjNBNDI1
NURFMjRCNDAeFw0yNjAzMTMyMDM5MTBaFw0yNzAzMTIyMDQ0MTBaMDMxMTAvBgNV
BAMTKEM5QzBBREMyNDUzQzZGRDgxMDFCRjQ4NjVBMzdDRkFBNjRFNTNCNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ImscV9TWPJoOPlSvpMJNyliT
NjKCDAfQ6DEkTdGVg6HNn+TtJ7A5iV37m6XW6b5VJ3uzF1MuPnH1D1bPjiQJwptb
tFmJEqkPmadH2SGgu7lcsoZtLiUqBst/uEYAVzbHG3EAh2EFD3SBF0yjudcfbC65
DZomrZriZ+1nOtlTCN5DVky9WansyL7H4f36gqMzP6GL99VoSzierd1K3DIE6vUj
RpkornPGOyqHufKFLnajDqcrasvQ5/Jppc9r984w5gGKaYcPBucilf5cBPJfgg2z
4Tq2jkkVhoDPblYxqqhiIUZGf21kcbEuGm1ro7rGCdSbhEZNyq1EVGr0YIB9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUycCtwkU8b9gQG/SGWjfPqmTlO0EwHwYDVR0j
BBgwFoAUFZLN3mPgR8an5XlqSTI6QlXeJLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2dndWhHdE12RTFoQVZ5Mk52cHpDdjNGTDJOa1ZiVkhMeWNVaXNjc0hw
Yk4vMC8xNTkyQ0RERTYzRTA0N0M2QTdFNTc5NkE0OTMyM0E0MjU1REUyNEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1OTJDRERFNjNFMDQ3QzZB
N0U1Nzk2QTQ5MzIzQTQyNTVERTI0QjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NnZ3VoR3RNdkUxaEFWeTJOdnB6Q3YzRkwyTmtWYlZITHljVWlzY3NIcGJOLzAv
MzEzOTMxMmUzNjJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwb4MA0GCSqGSIb3DQEBCwUAA4IBAQC3ptxpsbOH
2AVIYHwVC9xi1TwwhVeAdycbjot2+JBv92A2t0CwfGAP9hbLk7+hsmXYBqZrqsNm
rw1/A5zblQTx47KmvsI42sZLJ8KHyREP+2mM3YW4zBOfagTXiNoram+7RJH6+Dp1
vrkfR13qp4MTtVZRO8eEpkxc9+p2dRTDhei8CXij9W4UlWSfvFRc8Xf5cTRR74eq
86Eucm0PFwMxbMNpvja7XMvMh3VTE3m88BQoejbI2VJeXKJ0WbN6fWRBTRwk9FD5
c6fx3YvzgPUluwEueRjMeCv3XQZHJY+fKhmVtYb4JGLs9AmwtDNpMEMMN+UixLOs
FBjXBWgNDyey
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:27 2026 by rpki-client