Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/3139312e3234312e32342e302f32312d3332203d3e20323633363634.roa
File:                     3139312e3234312e32342e302f32312d3332203d3e20323633363634.roa (raw, json)
Hash identifier:          P29yRUoZs/jW9lvo2vRsx4GNFtgBKjAeUghhqzA67hY=
Subject key identifier:   67:CF:EA:DD:91:69:11:A4:07:D8:57:E6:CA:2E:D5:CD:15:E7:C9:4A
Certificate issuer:       /CN=96E772C2DA56252E8F7A2456BC003F8849C694E0
Certificate serial:       01F7B619C8F48CA314B9FFA20865383CFBAD1FE6
Authority key identifier: 96:E7:72:C2:DA:56:25:2E:8F:7A:24:56:BC:00:3F:88:49:C6:94:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/3139312e3234312e32342e302f32312d3332203d3e20323633363634.roa
Signing time:             Tue 21 Jul 2026 20:52:01 +0000
ROA not before:           Tue 21 Jul 2026 20:47:01 +0000
ROA not after:            Tue 20 Jul 2027 20:52:01 +0000
asID:                     263664
IP address blocks:        191.241.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.crl
                          rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f7:b6:19:c8:f4:8c:a3:14:b9:ff:a2:08:65:38:3c:fb:ad:1f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E772C2DA56252E8F7A2456BC003F8849C694E0
        Validity
            Not Before: Jul 21 20:47:01 2026 GMT
            Not After : Jul 20 20:52:01 2027 GMT
        Subject: CN=67CFEADD916911A407D857E6CA2ED5CD15E7C94A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e5:56:e7:8e:49:b4:6d:b0:d9:6b:d0:85:05:
                    43:73:b2:ed:77:3c:66:b6:b5:37:f9:d3:fb:4a:d9:
                    36:d2:c8:b9:37:c9:86:24:cb:ac:31:a2:ba:cf:e9:
                    a0:e1:75:d2:a9:44:05:c9:33:76:ec:3a:fb:9c:f0:
                    42:12:a5:06:78:a4:cd:cb:f3:6d:f1:3c:90:07:9b:
                    47:3f:3e:cc:d3:71:c7:0a:13:f0:58:85:02:2f:c4:
                    56:2a:65:08:8c:a0:ab:2a:24:56:a9:34:cd:8d:3e:
                    a3:4b:bb:5f:30:b6:67:41:87:cc:b5:d4:2c:ca:dd:
                    fa:1f:b6:bf:bc:1d:20:3c:e4:9c:ca:80:fe:69:2a:
                    87:8c:82:f6:5f:37:d7:05:d8:21:fa:9d:c1:89:c9:
                    74:2e:ec:a9:d2:a7:9b:e9:de:01:79:93:73:29:ab:
                    23:ec:f3:80:2e:d2:40:3c:85:f0:39:92:6e:1b:64:
                    71:65:07:09:9c:96:60:78:4f:da:a1:4b:46:f1:98:
                    58:53:dc:b9:b0:91:3c:9e:46:d1:c6:2c:25:c5:1a:
                    a3:de:65:c9:08:bf:ac:19:f4:9b:26:ed:67:fb:cf:
                    58:a2:0f:20:a4:f8:b1:1f:c8:b2:82:75:ec:38:77:
                    89:ca:f1:97:fb:fe:17:f7:18:f7:78:b7:34:c8:3f:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CF:EA:DD:91:69:11:A4:07:D8:57:E6:CA:2E:D5:CD:15:E7:C9:4A
            X509v3 Authority Key Identifier:
                keyid:96:E7:72:C2:DA:56:25:2E:8F:7A:24:56:BC:00:3F:88:49:C6:94:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/96E772C2DA56252E8F7A2456BC003F8849C694E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96E772C2DA56252E8F7A2456BC003F8849C694E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DCYg434rQvczU684HXy2ywyEpsT7o2CstarJwHV1KvBM/2/3139312e3234312e32342e302f32312d3332203d3e20323633363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:b0:76:51:d6:6d:62:c5:58:45:1f:7a:ee:c1:f3:ef:8a:
         8f:8c:a2:ac:e5:72:c4:48:39:c5:1a:50:2d:92:30:4d:30:03:
         fe:f6:4e:5a:0e:b6:91:1b:c6:d3:c4:7e:3b:b1:9b:dd:d4:dc:
         58:59:0a:64:ff:f0:dd:38:1b:91:12:87:4c:cc:19:39:59:59:
         0b:c5:b9:6d:49:ac:a6:4c:78:4b:1f:78:fc:63:97:54:53:04:
         65:72:f2:0b:8c:7c:b3:a7:74:97:00:8b:a9:28:b2:73:48:81:
         19:e2:53:14:9d:35:b1:fc:97:73:b0:61:b8:4a:7f:ce:48:5f:
         cb:2d:3e:7d:aa:b5:13:d9:c5:73:bc:5f:64:98:41:48:86:04:
         c0:1a:97:bd:d2:b1:45:e5:f2:ac:7f:d1:dc:60:e2:5c:b8:4e:
         f5:28:9b:45:0d:c8:c6:0d:a3:6b:d7:03:39:6a:5c:1f:f9:1a:
         8c:99:84:6b:bc:07:c5:34:3e:a2:74:37:a1:9f:78:29:22:54:
         ad:12:ae:c3:94:d6:a1:a9:f7:7b:17:55:9b:06:c0:2f:3c:6a:
         45:98:4a:19:25:25:f2:e2:cc:e0:88:8d:2d:51:24:1c:34:1f:
         c7:b5:21:85:4a:2f:50:07:9b:96:25:f9:95:2a:07:c7:04:f1:
         c0:6b:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:19:03 2026 by rpki-client