Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/3139312e3234312e3133322e302f32342d3234203d3e20323633363731.roa
File:                     3139312e3234312e3133322e302f32342d3234203d3e20323633363731.roa (raw, json)
Hash identifier:          wXRiRGZkSiJFtSuCJdk0NBPA91ny2LT72It+ojtO+ew=
Subject key identifier:   C6:1F:9A:1F:6D:40:8A:D2:DA:F1:81:90:87:7B:03:EC:68:3A:C5:52
Certificate issuer:       /CN=55180815E6FE7BA900BFCA930E2CAF038F91CF39
Certificate serial:       3590A325CE747704F9862B44723BFF7B73A11974
Authority key identifier: 55:18:08:15:E6:FE:7B:A9:00:BF:CA:93:0E:2C:AF:03:8F:91:CF:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55180815E6FE7BA900BFCA930E2CAF038F91CF39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/3139312e3234312e3133322e302f32342d3234203d3e20323633363731.roa
Signing time:             Fri 13 Mar 2026 13:10:07 +0000
ROA not before:           Fri 13 Mar 2026 13:05:07 +0000
ROA not after:            Fri 12 Mar 2027 13:10:07 +0000
asID:                     263671
IP address blocks:        191.241.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/55180815E6FE7BA900BFCA930E2CAF038F91CF39.crl
                          rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/55180815E6FE7BA900BFCA930E2CAF038F91CF39.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55180815E6FE7BA900BFCA930E2CAF038F91CF39.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:90:a3:25:ce:74:77:04:f9:86:2b:44:72:3b:ff:7b:73:a1:19:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55180815E6FE7BA900BFCA930E2CAF038F91CF39
        Validity
            Not Before: Mar 13 13:05:07 2026 GMT
            Not After : Mar 12 13:10:07 2027 GMT
        Subject: CN=C61F9A1F6D408AD2DAF18190877B03EC683AC552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:c4:a4:17:5a:33:33:ee:8e:30:59:4a:c0:
                    c6:b8:ec:6e:94:08:2f:74:9a:dc:31:b1:a9:18:9b:
                    34:1d:82:0e:78:65:43:18:5a:a4:cf:19:af:55:26:
                    79:84:fb:41:c8:2e:81:8c:29:57:90:da:82:54:c1:
                    60:25:12:85:99:1a:c1:a7:fd:83:2f:40:13:70:8d:
                    b6:23:f0:31:b9:18:f2:6e:49:06:97:25:84:e4:1c:
                    04:20:cc:64:91:06:0e:43:d9:ba:e2:6c:fe:62:69:
                    fa:81:46:ad:05:9f:0a:c6:6d:76:97:46:20:e6:7b:
                    8e:b8:a8:89:37:65:83:0a:fc:04:e7:84:09:8f:6c:
                    b0:4b:e7:fa:eb:80:f8:60:af:e6:23:39:30:85:97:
                    f1:be:b7:92:92:ac:db:2f:e9:30:5c:3b:4d:e3:85:
                    3e:91:f4:c4:6b:08:85:60:f0:61:1b:88:08:13:04:
                    a9:82:f8:e2:49:47:51:eb:51:13:d6:4f:01:ef:5a:
                    80:d9:e9:ec:34:e0:3c:17:23:91:ad:8d:31:97:84:
                    3c:5d:28:66:40:cb:5d:37:e3:26:e8:d7:12:e1:22:
                    54:a8:38:85:92:c2:6f:16:5b:f2:e7:81:87:e4:7f:
                    41:12:f0:88:91:68:27:7e:7b:42:4f:bd:ab:2d:89:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1F:9A:1F:6D:40:8A:D2:DA:F1:81:90:87:7B:03:EC:68:3A:C5:52
            X509v3 Authority Key Identifier:
                keyid:55:18:08:15:E6:FE:7B:A9:00:BF:CA:93:0E:2C:AF:03:8F:91:CF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/55180815E6FE7BA900BFCA930E2CAF038F91CF39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55180815E6FE7BA900BFCA930E2CAF038F91CF39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq48uwa998JRJf9LWBFi1i8RZk2yiigdrfY8FipqLbV/0/3139312e3234312e3133322e302f32342d3234203d3e20323633363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:20:d0:d1:22:db:47:51:2c:ef:83:11:ff:80:aa:e7:8b:ff:
         45:ca:77:0e:2b:b8:88:66:ac:ed:62:a6:a8:14:ff:81:6f:c6:
         71:1a:f0:d2:6e:96:42:3e:26:9b:7c:e2:c6:d6:f8:fe:bc:a3:
         b8:ef:e2:71:85:64:a6:8a:81:c1:6a:c9:fc:86:19:96:59:ab:
         14:13:ca:a7:2e:7d:0f:bf:ea:f6:bf:f3:19:f5:fa:fb:b3:ea:
         7e:b4:fe:65:ec:f8:c7:76:81:3d:66:f6:3d:67:de:65:18:9b:
         6b:52:35:14:91:84:41:29:b5:86:cf:2e:4c:18:82:2c:5e:5c:
         98:17:aa:65:52:28:53:24:68:d9:30:5b:13:39:d8:be:39:a6:
         75:3e:bd:92:b2:68:ed:d7:04:54:77:75:07:3c:f5:08:2f:7a:
         b5:2b:d2:95:23:88:c3:44:5d:c2:5e:a0:94:85:c6:f2:62:bb:
         1c:48:2a:63:3f:39:9c:bd:a7:50:72:c8:a5:95:8f:7d:c7:ad:
         ba:87:a9:bc:37:37:89:37:1c:b0:58:d6:f0:4a:b5:24:1c:06:
         a8:29:de:bd:e8:11:a5:37:f8:bc:f5:b6:03:34:f4:c4:eb:61:
         9c:8b:f0:f3:71:92:ed:11:8b:3c:63:c7:b3:71:fc:39:a4:f5:
         00:b2:c3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:01 2026 by rpki-client