Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa
File:                     3139312e362e3235312e302f32342d3234203d3e20323633333032.roa (raw, json)
Hash identifier:          LguWOxSsJQXSgIyWBw1HdWqgI8Ld2hoBSdfmQlxWoWs=
Subject key identifier:   CE:86:F0:1A:2B:AC:E1:D8:EF:29:02:F5:4E:0B:BE:A6:FB:EC:93:4C
Certificate issuer:       /CN=1592CDDE63E047C6A7E5796A49323A4255DE24B4
Certificate serial:       3BDF8F45EBB52B7D4D1489AD13B8067097811262
Authority key identifier: 15:92:CD:DE:63:E0:47:C6:A7:E5:79:6A:49:32:3A:42:55:DE:24:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa
Signing time:             Fri 13 Mar 2026 20:44:09 +0000
ROA not before:           Fri 13 Mar 2026 20:39:09 +0000
ROA not after:            Fri 12 Mar 2027 20:44:09 +0000
asID:                     263302
IP address blocks:        191.6.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.crl
                          rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:df:8f:45:eb:b5:2b:7d:4d:14:89:ad:13:b8:06:70:97:81:12:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1592CDDE63E047C6A7E5796A49323A4255DE24B4
        Validity
            Not Before: Mar 13 20:39:09 2026 GMT
            Not After : Mar 12 20:44:09 2027 GMT
        Subject: CN=CE86F01A2BACE1D8EF2902F54E0BBEA6FBEC934C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:3c:32:3f:09:22:58:ea:95:2d:88:f6:e0:
                    99:2c:15:73:1f:dd:06:e7:aa:1d:54:a0:33:9f:ba:
                    fe:41:c3:de:6e:b8:e7:45:04:99:6f:ab:19:c7:a4:
                    38:d6:9c:bd:56:e8:65:e1:b3:c3:8d:19:9e:10:26:
                    61:31:ff:f4:61:54:5a:df:08:9b:75:cc:49:1b:66:
                    49:97:f9:20:eb:11:1c:f3:b5:2e:26:0b:55:aa:28:
                    96:d7:05:c3:d6:7c:ef:61:dd:86:0e:ac:81:93:c6:
                    6c:88:9a:2e:1d:b3:df:4a:90:8b:28:14:35:c8:03:
                    23:ca:5b:59:8b:87:ef:09:4c:17:a0:dd:4a:a6:2a:
                    e0:bd:ae:c1:ae:81:01:ff:9a:00:8f:75:04:9f:09:
                    9e:2c:c6:2f:11:b7:28:ab:45:2d:4e:6d:09:e7:df:
                    d2:53:59:5d:d1:2f:45:2e:2b:50:4e:f4:15:a3:79:
                    49:31:e1:d6:f9:09:17:4e:ae:5b:4c:07:13:35:9a:
                    7d:45:58:4f:7b:58:82:b9:b0:40:13:8d:2a:49:2d:
                    6d:39:ef:c4:24:c9:e2:27:a9:b3:a2:45:0c:16:12:
                    5d:1a:1e:28:6c:5a:74:b8:44:23:1c:98:19:7b:9c:
                    75:3c:e4:b4:43:dc:10:dc:a6:11:80:3f:ee:dd:17:
                    56:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:F0:1A:2B:AC:E1:D8:EF:29:02:F5:4E:0B:BE:A6:FB:EC:93:4C
            X509v3 Authority Key Identifier:
                keyid:15:92:CD:DE:63:E0:47:C6:A7:E5:79:6A:49:32:3A:42:55:DE:24:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/1592CDDE63E047C6A7E5796A49323A4255DE24B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1592CDDE63E047C6A7E5796A49323A4255DE24B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgguhGtMvE1hAVy2NvpzCv3FL2NkVbVHLycUiscsHpbN/0/3139312e362e3235312e302f32342d3234203d3e20323633333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:be:67:dd:3c:08:3a:16:c3:eb:76:22:df:e0:cd:9e:37:
         aa:4c:cb:6b:b1:5d:46:e2:e3:2e:ee:0a:a3:38:1b:da:1d:ea:
         62:2f:90:5b:e0:18:02:50:d2:d7:07:77:99:a4:98:f3:7c:35:
         59:ea:70:80:7e:49:ad:e9:e0:7d:3b:b2:37:8b:e9:31:e1:ef:
         4b:05:4a:de:b9:f2:d6:54:f9:59:1c:73:04:48:d1:d8:0e:36:
         19:e4:0a:49:e2:73:d9:f8:5d:df:81:0e:29:a8:27:fb:08:91:
         71:71:b9:54:a4:27:46:b4:6a:c2:3b:cc:57:19:33:ae:e9:1a:
         ee:64:68:00:b2:77:3a:96:a4:bc:aa:9d:50:3a:16:8c:f8:ad:
         62:b8:e7:e7:1a:31:5f:a1:df:c4:26:76:5f:8b:8f:f3:9b:b4:
         d5:19:48:65:0d:ad:35:07:ee:63:9f:a3:ce:ba:9f:f1:6f:0d:
         69:2f:b7:73:67:5e:8f:b5:76:f9:19:aa:46:ac:f2:61:14:c4:
         1e:ed:bd:0c:62:96:0c:d3:2c:61:f1:00:74:e4:d3:3e:00:12:
         3a:cc:f7:30:72:c6:9c:29:fb:4f:73:ef:22:23:04:07:c8:6f:
         95:2d:62:4d:47:00:f0:c5:be:83:0e:52:73:bf:d8:f4:44:bc:
         47:06:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:11:07 2026 by rpki-client