Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
File:                     3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa (raw, json)
Hash identifier:          NCmN3OlYgpfSl7Z/SCfYZwM+ZCGH+vbifqlvrkvuHFo=
Subject key identifier:   EE:08:9B:9D:5C:F5:2E:D0:D9:70:11:2A:38:9B:90:5C:32:39:AD:B4
Certificate issuer:       /CN=5DDC0AB4FF84A32E5E87D97B50F84AD194612E72
Certificate serial:       0D4916D687D15D2B763BC3C8C4C041647F425304
Authority key identifier: 5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa
Signing time:             Fri 08 May 2026 02:04:02 +0000
ROA not before:           Fri 08 May 2026 01:59:02 +0000
ROA not after:            Fri 07 May 2027 02:04:02 +0000
asID:                     270375
IP address blocks:        190.89.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.crl
                          rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:49:16:d6:87:d1:5d:2b:76:3b:c3:c8:c4:c0:41:64:7f:42:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDC0AB4FF84A32E5E87D97B50F84AD194612E72
        Validity
            Not Before: May  8 01:59:02 2026 GMT
            Not After : May  7 02:04:02 2027 GMT
        Subject: CN=EE089B9D5CF52ED0D970112A389B905C3239ADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:9e:41:c5:31:dd:24:3c:13:b4:1a:58:56:
                    07:aa:22:47:a4:b8:b9:89:e8:4b:9b:fc:6f:19:c9:
                    63:5f:86:a1:04:a5:23:01:73:7d:f0:1a:0c:2a:a4:
                    a5:07:6b:25:2b:2c:cd:84:18:5b:e6:09:56:11:f6:
                    32:dc:47:f7:61:f3:07:75:1b:2b:1d:29:56:06:ba:
                    69:e9:84:e9:67:08:3f:78:5d:b6:38:9f:ea:04:c4:
                    b0:30:a9:ba:87:7e:13:37:92:c7:79:21:27:c4:de:
                    d7:b8:d1:20:e7:3f:76:48:53:67:a5:0e:de:fc:d5:
                    84:d9:63:73:72:33:18:97:a4:1c:c0:a0:5f:51:ee:
                    ec:b5:50:70:ac:92:9b:2f:95:f7:07:77:1c:10:dd:
                    c2:43:91:3b:6f:5f:e3:c6:bb:55:3c:c7:69:ad:54:
                    16:06:ab:1b:63:0e:c2:94:16:e9:8c:04:aa:1b:30:
                    d8:dd:9c:91:12:f9:f4:2c:67:50:ed:9d:9a:fc:94:
                    5e:bd:3b:f8:60:54:01:1b:25:0f:b5:a7:5e:3a:88:
                    50:9f:ba:6e:5d:45:23:5e:91:65:58:85:2f:7a:ad:
                    09:49:7e:01:57:67:aa:eb:b5:11:75:20:f0:01:0a:
                    d5:09:59:59:76:71:72:1e:58:2c:71:da:e9:14:4d:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:9B:9D:5C:F5:2E:D0:D9:70:11:2A:38:9B:90:5C:32:39:AD:B4
            X509v3 Authority Key Identifier:
                keyid:5D:DC:0A:B4:FF:84:A3:2E:5E:87:D9:7B:50:F8:4A:D1:94:61:2E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDC0AB4FF84A32E5E87D97B50F84AD194612E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EtwW8C42FYNtwWFphu7awD1pS5x4ZeLnkDAmGYpwJXqB/0/3139302e38392e3135362e302f32322d3232203d3e20323730333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:a9:30:aa:0a:65:89:7f:5d:71:50:3f:8d:99:e0:c3:f0:
         0a:e8:ac:53:54:42:ec:e6:9b:24:88:ca:41:55:bd:08:91:59:
         76:14:c8:b9:74:37:ea:f2:68:df:c7:67:21:e7:38:84:a5:8b:
         8a:dc:f1:f9:bf:95:4b:eb:78:e5:d3:92:31:f2:00:6d:26:30:
         04:e5:15:b0:50:de:d2:c0:b4:c1:1f:41:fb:eb:54:a5:25:f8:
         fe:07:91:4c:b3:f4:53:0e:ff:fa:08:38:01:6b:e7:c7:f1:f4:
         29:45:35:0b:01:bc:07:bc:22:a7:39:45:8d:86:07:8d:f4:2e:
         96:2d:fd:ff:68:07:e8:a6:a1:3b:48:d7:3a:39:b9:e1:72:59:
         75:77:60:38:e7:4b:47:97:48:cd:75:4b:a8:82:25:29:c4:26:
         c2:bf:98:0d:cf:c6:b8:2d:8f:dd:fe:0c:fa:40:08:21:3f:6e:
         4f:c5:6e:fb:fa:5a:b2:46:a5:08:89:c8:8e:74:d9:ab:c2:56:
         32:a5:13:fe:2e:aa:f5:fa:87:35:d8:8e:99:be:cd:4e:d7:49:
         27:a4:32:89:63:d1:38:5e:6c:57:04:de:ee:b5:5f:4c:25:aa:
         de:6b:7b:40:57:a2:f1:f9:88:86:72:ab:e2:30:3d:62:9d:01:
         da:89:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:24:06 2026 by rpki-client