Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa
File:                     3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa (raw, json)
Hash identifier:          Iyf8dqnrj2feYb6R2SUQ4bMZw6BcJSpMcqtPYmnbkHI=
Subject key identifier:   04:79:03:C3:84:EC:6B:AE:89:12:CB:DC:90:8C:CB:5C:3F:60:14:40
Certificate issuer:       /CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7
Certificate serial:       4C388E64793C1899D2C0AC6701088084B98AE992
Authority key identifier: 35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa
Signing time:             Wed 01 Jul 2026 21:09:35 +0000
ROA not before:           Wed 01 Jul 2026 21:04:35 +0000
ROA not after:            Wed 30 Jun 2027 21:09:35 +0000
asID:                     267468
IP address blocks:        192.141.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl
                          rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:38:8e:64:79:3c:18:99:d2:c0:ac:67:01:08:80:84:b9:8a:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7
        Validity
            Not Before: Jul  1 21:04:35 2026 GMT
            Not After : Jun 30 21:09:35 2027 GMT
        Subject: CN=047903C384EC6BAE8912CBDC908CCB5C3F601440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:99:d9:b8:9f:d7:59:57:b1:d6:41:ec:fd:
                    4e:f1:d8:9e:4c:ae:87:e9:52:c2:0f:c0:e4:2e:cb:
                    34:80:20:87:10:84:88:16:39:55:c6:34:f1:2b:6f:
                    b1:0d:dc:7e:34:22:14:90:05:eb:52:21:3b:57:f1:
                    ae:c1:d5:a5:a9:f1:24:2d:58:07:aa:f8:39:f6:9b:
                    ff:41:0a:f5:a7:4c:60:2f:6c:f6:30:3b:34:8c:ad:
                    48:11:91:e8:7c:58:67:e0:11:99:b7:3d:bd:c5:f0:
                    fd:93:93:44:b0:26:35:d0:c6:3e:38:f7:8c:14:55:
                    c1:ef:57:94:d0:8b:8b:90:90:c7:93:f4:22:b9:ee:
                    a2:92:52:bc:21:cd:67:d8:4b:90:0a:e3:26:5f:3a:
                    f4:61:97:37:8d:7d:b0:0e:b8:91:38:44:5c:b2:e9:
                    35:7e:5d:5f:28:1b:0c:56:a7:ee:a8:71:57:2d:fc:
                    80:ff:1f:71:b9:e2:b2:b6:12:f3:d0:82:43:f3:4a:
                    76:28:ec:74:a6:ee:a7:99:64:52:a0:d6:57:08:f3:
                    57:a6:64:1b:8b:93:e3:71:e9:dc:92:c1:f1:93:92:
                    2b:6b:2b:2d:f1:8b:1f:7e:69:65:eb:4c:c2:e2:a2:
                    65:24:86:f7:c7:3b:87:0e:f0:36:e2:f8:f5:31:d5:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:03:C3:84:EC:6B:AE:89:12:CB:DC:90:8C:CB:5C:3F:60:14:40
            X509v3 Authority Key Identifier:
                keyid:35:B8:F6:D7:DA:45:A0:F5:35:60:A7:E3:72:2A:FF:E1:1D:0C:F6:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35B8F6D7DA45A0F53560A7E3722AFFE11D0CF6D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhTLMTXrKLLyis19UcURqL5BaEb7n2AXjKnTFFEXgbVZ/0/3139322e3134312e3134302e302f32322d3234203d3e20323637343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:5f:28:bb:76:3a:8f:e4:63:a8:5c:fd:bb:85:fa:0e:3f:
         fe:5b:2d:d5:d9:19:8c:f7:77:31:56:44:08:d2:cd:b4:41:17:
         7f:98:e6:08:a8:fb:33:77:f0:d7:43:97:51:c2:ae:02:16:ce:
         aa:6f:ca:49:4f:01:fe:a1:92:f3:02:a1:3e:45:05:d0:a6:98:
         39:23:f8:34:24:bc:c1:99:dc:e3:5c:73:7b:db:9a:7a:c0:c7:
         8c:42:74:d3:4b:da:ed:95:69:ce:cf:5c:15:16:a2:04:7f:4a:
         cf:b4:5f:f6:bb:e0:94:50:58:ae:ec:68:7b:6a:ff:d6:49:7c:
         d4:d3:14:dd:37:b1:3e:f6:d4:88:ed:d3:28:45:ab:8f:ce:fc:
         4c:4a:80:f4:48:0b:7d:08:3a:48:6b:4f:f9:0e:98:0e:fe:ee:
         48:c7:3d:41:71:4f:69:7a:e6:bc:b8:55:23:60:78:e7:66:ab:
         f0:c2:7a:87:ca:c4:52:69:18:cb:78:42:7c:36:43:25:59:f2:
         5e:0a:0f:74:6b:58:66:f1:88:1b:4c:bd:47:b7:5d:44:17:ef:
         24:8d:7d:49:c7:54:09:c8:44:bc:67:1e:7e:aa:e9:79:e5:9a:
         3a:d8:6c:21:ba:87:55:b1:a1:19:e7:04:49:19:7f:d8:09:d7:
         fd:e4:d8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:54:16 2026 by rpki-client