Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32342d3234203d3e20323633343936.roa
File:                     3139312e3234332e36302e302f32342d3234203d3e20323633343936.roa (raw, json)
Hash identifier:          yS1LR9Cx2Ej2bZBFQ+z1iQRmwCkg9MnTxN++pcg4ds0=
Subject key identifier:   ED:A8:C5:C8:C1:1C:E2:E9:58:62:DF:91:23:79:A4:7D:BE:63:F8:D2
Certificate issuer:       /CN=226AFB968DD1DE00BA091347D5C472E194110650
Certificate serial:       5F0563DAD7A724F51C798643431C74357047B54C
Authority key identifier: 22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32342d3234203d3e20323633343936.roa
Signing time:             Tue 21 Jul 2026 17:32:35 +0000
ROA not before:           Tue 21 Jul 2026 17:27:35 +0000
ROA not after:            Tue 20 Jul 2027 17:32:35 +0000
asID:                     263496
IP address blocks:        191.243.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl
                          rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:05:63:da:d7:a7:24:f5:1c:79:86:43:43:1c:74:35:70:47:b5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226AFB968DD1DE00BA091347D5C472E194110650
        Validity
            Not Before: Jul 21 17:27:35 2026 GMT
            Not After : Jul 20 17:32:35 2027 GMT
        Subject: CN=EDA8C5C8C11CE2E95862DF912379A47DBE63F8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:12:fe:9e:51:50:73:f6:dd:67:51:a6:94:
                    b2:ec:52:eb:d2:df:ac:4b:c4:07:56:8e:6c:0f:89:
                    b0:f4:cf:be:c4:61:9c:e6:7c:c5:75:c7:16:ef:96:
                    3d:f7:42:4f:6b:a3:87:f1:9f:ce:f6:43:c6:47:6f:
                    a5:22:33:f7:b1:e1:26:fa:35:a3:22:2f:1a:7f:1f:
                    e3:42:9f:b9:eb:b0:43:c4:50:4b:f8:29:57:7d:89:
                    ae:60:7d:98:8b:65:5b:72:3a:85:98:c2:ae:18:0a:
                    4b:c5:1e:86:1d:32:69:a7:f2:a0:c0:3f:65:9e:67:
                    c6:6b:13:d0:18:eb:34:be:b2:7e:27:3b:e3:c6:22:
                    3e:32:a4:1b:e1:63:31:73:4a:50:a9:e6:40:1e:39:
                    b8:9e:e2:94:6f:de:00:91:98:cc:ce:d2:48:49:e7:
                    65:4e:11:d2:8b:e8:24:17:5a:85:38:2f:02:fe:20:
                    50:fa:5d:24:0c:06:03:e8:b8:aa:84:92:42:b7:fc:
                    e3:7d:05:ae:aa:8a:9f:be:81:59:b2:ac:13:c5:a7:
                    99:d0:e3:ef:68:c8:46:99:c4:ca:43:63:21:ac:5b:
                    81:d4:bb:e6:13:31:98:2e:7f:3b:13:c6:23:93:bf:
                    68:7f:6b:6b:a1:8d:7f:2d:c9:e2:ff:d1:eb:c1:7b:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A8:C5:C8:C1:1C:E2:E9:58:62:DF:91:23:79:A4:7D:BE:63:F8:D2
            X509v3 Authority Key Identifier:
                keyid:22:6A:FB:96:8D:D1:DE:00:BA:09:13:47:D5:C4:72:E1:94:11:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/226AFB968DD1DE00BA091347D5C472E194110650.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/226AFB968DD1DE00BA091347D5C472E194110650.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/0/3139312e3234332e36302e302f32342d3234203d3e20323633343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:24:79:1d:b2:36:86:da:27:43:b3:22:b5:a4:2a:ad:b9:
         81:ae:5c:47:0a:e9:10:94:53:4b:05:93:d3:6f:a2:89:ca:e7:
         85:fe:63:a4:39:9e:aa:bb:16:75:9e:2a:4d:e9:19:18:74:64:
         df:e1:65:67:8d:b5:0c:47:d4:35:2f:4e:66:3d:c3:b3:8e:22:
         d5:88:30:ba:f3:d0:e7:4e:09:46:04:2a:f0:e7:00:e7:7e:09:
         e3:41:07:8a:77:b9:53:d7:6a:7e:05:c6:c8:3d:7a:6e:c7:ab:
         7e:3f:c9:90:47:2f:25:98:1a:47:14:2b:d0:bd:f6:01:81:d7:
         2c:38:74:c7:51:bd:df:b2:2a:34:e2:7a:d3:97:85:1f:30:f9:
         b6:3e:a0:80:e3:56:57:f0:94:6e:88:b3:f3:cf:b4:2e:e9:52:
         1f:f7:cb:1b:cf:37:b1:f7:13:4b:a5:d8:69:c3:b4:e9:a0:70:
         d6:43:0e:f1:96:f0:b1:24:f5:a1:05:2a:1c:6c:62:c3:f1:fd:
         3e:ef:49:86:c6:f0:d2:37:d2:b0:8a:aa:68:c0:16:3e:aa:d9:
         1d:63:14:a5:e7:fc:e7:5b:bc:80:79:e1:b0:da:28:3e:db:e7:
         cb:51:ab:99:cd:de:81:c4:b2:1b:23:27:f5:bc:6f:4a:bb:6b:
         ee:7b:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:50 2026 by rpki-client