Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa
File:                     3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa (raw, json)
Hash identifier:          QcD8DBASrpdabtZDRDHueqe01vMtpmspqr1OiIuqrDE=
Subject key identifier:   77:90:71:A3:8A:56:A8:87:17:3A:01:25:3A:B8:5F:46:DC:FB:28:C5
Certificate issuer:       /CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
Certificate serial:       4A1B318FC9010D18F8BDA0228EB6012FE496F8D4
Authority key identifier: 12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa
Signing time:             Wed 15 Jul 2026 16:57:12 +0000
ROA not before:           Wed 15 Jul 2026 16:52:12 +0000
ROA not after:            Wed 14 Jul 2027 16:57:12 +0000
asID:                     270411
IP address blocks:        190.89.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl
                          rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:42:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:31:8f:c9:01:0d:18:f8:bd:a0:22:8e:b6:01:2f:e4:96:f8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C134EB24E98B21A2D6816B023560C23DA02BE0
        Validity
            Not Before: Jul 15 16:52:12 2026 GMT
            Not After : Jul 14 16:57:12 2027 GMT
        Subject: CN=779071A38A56A887173A01253AB85F46DCFB28C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:c6:7b:71:9e:20:2e:24:13:49:63:3f:81:
                    62:ff:ac:1e:34:fc:dd:4a:5f:97:3a:8a:50:53:72:
                    89:f7:79:78:76:49:65:a3:3f:fd:e2:8e:97:3e:20:
                    ef:df:25:a3:3c:4b:4f:91:7c:a8:76:ec:5f:41:60:
                    5a:b2:22:ff:bb:6b:12:96:ce:a0:38:07:13:fc:d5:
                    66:05:3f:af:ad:bd:92:64:d9:c1:38:35:65:8c:20:
                    84:e2:d5:73:b9:0d:9a:b2:38:0a:0e:20:b6:5b:67:
                    73:8d:3a:91:f2:b4:ab:c7:4c:9b:19:ce:a7:15:cf:
                    cc:3c:ca:c8:0a:ad:eb:6b:51:e6:59:7a:91:f9:85:
                    31:c6:29:e7:f9:89:5c:3f:8d:e2:e1:e5:a0:ba:eb:
                    41:21:8f:45:0b:ea:7d:d8:40:9a:01:8e:17:a7:25:
                    a5:e2:ed:e7:0d:59:1d:80:5a:07:01:e6:c8:28:0e:
                    bf:44:ac:30:43:12:5b:cc:6a:1f:58:0e:6e:26:7a:
                    38:b3:50:e6:07:19:d7:2c:18:e0:11:73:a1:21:25:
                    77:82:0d:bf:d4:d5:6c:f9:17:9e:b6:19:44:ee:73:
                    8f:7d:9d:e1:02:73:70:84:41:17:15:f9:18:47:c3:
                    5b:d5:ce:cd:c0:92:04:44:51:ba:81:d5:eb:fe:a3:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:90:71:A3:8A:56:A8:87:17:3A:01:25:3A:B8:5F:46:DC:FB:28:C5
            X509v3 Authority Key Identifier:
                keyid:12:C1:34:EB:24:E9:8B:21:A2:D6:81:6B:02:35:60:C2:3D:A0:2B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/12C134EB24E98B21A2D6816B023560C23DA02BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12C134EB24E98B21A2D6816B023560C23DA02BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXgYNwxKSrSTxEJcenyDc8qvCmFTwszhARWKG7sgkFew/0/3139302e38392e3232342e302f32332d3234203d3e20323730343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:e6:11:b7:b8:f4:91:16:51:88:07:ac:2b:23:77:15:55:
         ff:79:76:62:7c:15:5c:24:cd:4d:e7:f7:7e:04:62:51:6c:56:
         cd:3c:6b:7d:f0:f6:1b:45:6a:82:97:7b:28:c6:68:d9:27:62:
         f2:04:44:d2:f7:59:71:51:1b:57:cb:b0:d4:08:a8:f2:c5:05:
         37:34:56:0a:30:ee:b0:e7:96:c2:97:96:34:21:aa:4d:4b:8e:
         f2:ad:76:d1:d1:03:8e:45:2a:ce:3d:e3:b6:07:08:cd:a1:2e:
         be:a0:a0:cc:0b:a7:6e:d5:cf:1a:b4:56:51:35:8e:9e:d3:33:
         f2:b4:78:68:28:08:66:40:3b:41:a0:0d:d3:5b:f9:9f:b3:41:
         40:77:ed:00:0f:99:ed:5b:96:78:4b:b5:93:84:da:2a:02:3d:
         10:c1:5b:09:12:57:6c:5f:72:be:bc:0a:27:ea:31:4a:91:f2:
         0e:d5:e1:4a:27:cc:48:45:ec:32:cf:9f:37:92:00:e7:89:7d:
         41:5d:c9:ff:8c:bc:d0:62:04:c5:b5:a8:04:0b:8c:bd:1e:9d:
         62:fa:3b:5a:88:35:8b:43:66:43:5a:a4:4b:aa:3e:b9:f1:87:
         85:c9:b6:ab:1e:60:02:49:f6:67:41:d4:2e:c5:e9:25:50:11:
         3f:31:e8:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUShsxj8kBDRj4vaAijrYBL+SW+NQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJDMTM0RUIyNEU5OEIyMUEyRDY4MTZCMDIzNTYwQzIz
REEwMkJFMDAeFw0yNjA3MTUxNjUyMTJaFw0yNzA3MTQxNjU3MTJaMDMxMTAvBgNV
BAMTKDc3OTA3MUEzOEE1NkE4ODcxNzNBMDEyNTNBQjg1RjQ2RENGQjI4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBM8Z7cZ4gLiQTSWM/gWL/rB40
/N1KX5c6ilBTcon3eXh2SWWjP/3ijpc+IO/fJaM8S0+RfKh27F9BYFqyIv+7axKW
zqA4BxP81WYFP6+tvZJk2cE4NWWMIITi1XO5DZqyOAoOILZbZ3ONOpHytKvHTJsZ
zqcVz8w8ysgKretrUeZZepH5hTHGKef5iVw/jeLh5aC660Ehj0UL6n3YQJoBjhen
JaXi7ecNWR2AWgcB5sgoDr9ErDBDElvMah9YDm4mejizUOYHGdcsGOARc6EhJXeC
Db/U1Wz5F562GUTuc499neECc3CEQRcV+RhHw1vVzs3AkgREUbqB1ev+o8zTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd5Bxo4pWqIcXOgElOrhfRtz7KMUwHwYDVR0j
BBgwFoAUEsE06yTpiyGi1oFrAjVgwj2gK+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFhnWU53eEtTclNUeEVKY2VueURjOHF2Q21GVHdzemhBUldLRzdzZ2tG
ZXcvMC8xMkMxMzRFQjI0RTk4QjIxQTJENjgxNkIwMjM1NjBDMjNEQTAyQkUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEyQzEzNEVCMjRFOThCMjFB
MkQ2ODE2QjAyMzU2MEMyM0RBMDJCRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RYZ1lOd3hLU3JTVHhFSmNlbnlEYzhxdkNtRlR3c3poQVJXS0c3c2drRmV3LzAv
MzEzOTMwMmUzODM5MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG+WeAwDQYJKoZIhvcNAQELBQADggEBAGX65hG3
uPSRFlGIB6wrI3cVVf95dmJ8FVwkzU3n934EYlFsVs08a33w9htFaoKXeyjGaNkn
YvIERNL3WXFRG1fLsNQIqPLFBTc0Vgow7rDnlsKXljQhqk1LjvKtdtHRA45FKs49
47YHCM2hLr6goMwLp27Vzxq0VlE1jp7TM/K0eGgoCGZAO0GgDdNb+Z+zQUB37QAP
me1blnhLtZOE2ioCPRDBWwkSV2xfcr68CifqMUqR8g7V4UonzEhF7DLPnzeSAOeJ
fUFdyf+MvNBiBMW1qAQLjL0enWL6O1qINYtDZkNapEuqPrnxh4XJtqseYAJJ9mdB
1C7F6SVQET8x6FM=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:16:22 2026 by rpki-client