Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa
File:                     3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa (raw, json)
Hash identifier:          MTXzRzx9eWPQGuMrvp9aHbj6hANaYRgh1dxgQCA7+2U=
Subject key identifier:   79:61:67:EB:4C:52:CE:E5:5D:4B:09:3B:01:F6:86:E4:75:70:9F:1E
Certificate issuer:       /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial:       548BA1DFC06ABE0D211341333BC34A3C8A5CD73D
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa
Signing time:             Thu 05 Mar 2026 14:07:26 +0000
ROA not before:           Thu 05 Mar 2026 14:02:26 +0000
ROA not after:            Thu 04 Mar 2027 14:07:26 +0000
asID:                     270690
IP address blocks:        190.120.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
                          rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 04:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8b:a1:df:c0:6a:be:0d:21:13:41:33:3b:c3:4a:3c:8a:5c:d7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
        Validity
            Not Before: Mar  5 14:02:26 2026 GMT
            Not After : Mar  4 14:07:26 2027 GMT
        Subject: CN=796167EB4C52CEE55D4B093B01F686E475709F1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:58:11:55:04:4f:ba:b4:b1:84:5b:bc:58:
                    56:43:bf:77:88:92:55:a3:6a:ec:8a:00:0d:16:9e:
                    96:3e:26:64:33:95:5c:64:ff:e1:70:a7:7e:d7:cf:
                    17:8b:f1:3b:cd:37:a6:f5:3d:01:25:a3:f8:0c:f4:
                    24:fd:81:cd:43:4d:b8:1c:c1:c9:8f:d8:9f:f4:2d:
                    f1:25:c6:97:cc:e2:56:0d:3f:86:9b:5a:34:2c:ff:
                    54:fd:57:4a:9c:d1:82:7e:b0:29:4a:a0:06:c4:fb:
                    1e:23:4c:86:57:92:96:96:35:7f:b5:ba:58:3f:39:
                    89:eb:f5:21:24:6e:5d:8c:3d:5b:02:13:d3:22:e0:
                    12:0f:d6:2e:7b:dd:47:be:c1:55:24:ea:c5:e9:2c:
                    d7:26:2f:dd:87:fc:6b:68:68:02:6b:be:ce:b7:71:
                    3b:52:76:c1:9e:a1:7d:59:7d:d6:9f:c0:c7:e6:08:
                    40:32:2e:72:71:b8:6e:64:58:22:52:b5:4b:0e:04:
                    a9:11:33:c1:cf:4a:a6:50:fc:4e:8b:20:1d:5c:e1:
                    c4:1a:0e:dc:c8:50:16:1c:b2:bf:f7:83:1a:b3:b5:
                    83:dd:6c:b6:52:ba:07:d6:c0:e1:e3:f1:1f:05:1b:
                    3d:d8:96:0b:8f:ef:19:2b:95:0e:2d:78:19:8a:02:
                    35:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:61:67:EB:4C:52:CE:E5:5D:4B:09:3B:01:F6:86:E4:75:70:9F:1E
            X509v3 Authority Key Identifier:
                keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/3139302e3132302e33332e302f32342d3234203d3e20323730363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c3:6c:5e:18:27:cb:21:a4:40:4d:08:6a:91:94:91:a9:25:
         58:d0:c7:67:d5:a4:d1:8c:2d:84:f0:96:9e:36:04:d1:c4:22:
         bb:30:03:80:47:b4:43:a3:10:91:d1:0c:7a:23:cf:f8:a8:ed:
         75:49:fd:e2:7a:d2:49:4e:e4:a5:4e:d1:c8:f0:ab:2e:c1:28:
         78:97:25:cc:74:59:60:eb:c3:06:ae:e0:28:07:87:57:ea:fc:
         18:a2:6f:38:5b:00:0a:91:60:d0:ec:e0:62:7b:31:bd:5c:98:
         ca:ee:d7:18:d9:40:f3:fb:7c:58:a4:bf:43:39:98:4f:83:c9:
         24:d7:f4:ae:78:13:f1:99:53:c4:fd:f2:81:02:5f:e3:d6:df:
         1c:1b:5c:f8:d0:95:f1:eb:01:a8:f4:2e:d2:3d:04:b0:5d:c2:
         a4:4f:09:4a:69:d6:6a:2f:62:d2:ee:3d:40:de:ed:4e:30:af:
         36:88:dc:f2:d5:6c:45:6d:33:7a:5c:8a:20:12:09:31:b7:9a:
         9c:07:ae:73:95:c8:d3:28:e0:e3:16:31:9d:8e:0b:12:1d:82:
         31:5f:4e:5c:c3:bc:7c:6f:1c:eb:c8:5f:ca:67:78:84:9f:68:
         a8:e4:ed:0b:57:1d:20:0f:7c:d5:30:f7:8e:d9:73:56:9c:35:
         bd:8b:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:34:09 2026 by rpki-client