Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
File:                     3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa (raw, json)
Hash identifier:          WhHGh2fi9HDyEkU+VhlJPRc2z9Ygq12Qk+YQqmNo4pY=
Subject key identifier:   78:AA:A6:4B:F5:A2:85:0C:B3:97:09:7D:B2:78:60:4E:DA:A0:6A:71
Certificate issuer:       /CN=1D1B24018D6EAA1A8D365203389A27054F1AFE3C
Certificate serial:       482BC5B1B220979EF0209161EE7D7DFE1D0AC456
Authority key identifier: 1D:1B:24:01:8D:6E:AA:1A:8D:36:52:03:38:9A:27:05:4F:1A:FE:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa
Signing time:             Tue 17 Mar 2026 12:57:47 +0000
ROA not before:           Tue 17 Mar 2026 12:52:47 +0000
ROA not after:            Tue 16 Mar 2027 12:57:47 +0000
asID:                     263483
IP address blocks:        191.242.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.crl
                          rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 08:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2b:c5:b1:b2:20:97:9e:f0:20:91:61:ee:7d:7d:fe:1d:0a:c4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B24018D6EAA1A8D365203389A27054F1AFE3C
        Validity
            Not Before: Mar 17 12:52:47 2026 GMT
            Not After : Mar 16 12:57:47 2027 GMT
        Subject: CN=78AAA64BF5A2850CB397097DB278604EDAA06A71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:c8:c5:9a:19:3f:b8:6f:fb:30:64:8f:f7:
                    47:ef:34:35:c2:37:c5:68:33:6f:16:19:3f:7a:95:
                    44:71:66:8f:2f:41:9b:d5:48:80:ec:a3:36:72:f3:
                    27:a6:38:28:ea:2b:98:9c:77:8b:4e:91:e9:e8:54:
                    58:ca:da:8f:db:4b:bd:a4:3e:cd:88:0f:b2:b3:c4:
                    b1:8e:10:6e:ca:55:0e:d3:fd:4a:92:10:41:bd:91:
                    88:df:a8:d0:4f:9e:0b:2f:80:39:8f:5a:39:96:61:
                    6e:19:8f:ba:af:d1:86:9a:9d:dd:bc:89:a1:79:b9:
                    ce:15:18:64:66:db:71:b6:7a:83:7c:2c:65:e2:f4:
                    ee:74:28:4c:41:07:91:79:37:19:3e:60:82:04:14:
                    3f:08:52:ea:7d:2a:46:5e:a6:35:f8:ab:58:89:33:
                    91:0b:03:12:47:ab:52:c2:b3:59:30:be:83:44:3e:
                    27:b3:7d:73:03:b0:58:3d:26:a3:69:96:65:c9:84:
                    c8:7b:5c:14:4a:87:68:7e:f8:99:c0:c6:63:2a:47:
                    3a:13:70:5a:72:78:e3:71:bd:33:51:c6:27:26:f3:
                    06:c6:cb:6e:63:11:7d:63:5e:4a:1c:64:4f:68:7c:
                    ae:f8:49:83:34:97:2c:fc:1b:4b:7c:42:c3:98:00:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:A6:4B:F5:A2:85:0C:B3:97:09:7D:B2:78:60:4E:DA:A0:6A:71
            X509v3 Authority Key Identifier:
                keyid:1D:1B:24:01:8D:6E:AA:1A:8D:36:52:03:38:9A:27:05:4F:1A:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/3139312e3234322e3232342e302f32322d3332203d3e20323633343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:36:f3:2a:f2:23:25:67:a1:bd:f0:c8:31:66:b0:de:b6:
         93:2a:e8:4f:45:66:a6:e8:6b:81:30:22:ba:ed:17:fd:99:71:
         c8:45:2a:7b:ca:17:e8:d9:22:09:a6:92:3c:fd:03:a3:39:77:
         19:d1:9c:0a:0e:38:d2:4e:44:51:e2:10:14:29:5a:ed:ec:14:
         93:a6:dc:6c:70:da:9c:e1:5e:5f:f7:16:bd:5e:32:47:89:e6:
         fe:5f:97:4e:e2:18:54:5a:6d:9f:ec:b0:a8:80:e8:a0:28:04:
         61:49:5c:df:97:14:9d:bf:13:37:3e:8d:f9:c3:59:ee:07:42:
         bb:57:57:a9:ee:ae:f1:9b:92:cc:3e:29:94:29:fb:9c:d7:51:
         5e:e9:b1:d1:70:17:20:e7:57:0f:e9:7a:86:57:c7:16:b1:0f:
         9d:c7:c5:7a:a5:bc:c3:87:ad:81:0a:53:14:12:26:18:f1:c2:
         9f:db:4d:d1:67:87:30:5d:f9:91:72:b5:7a:dd:03:a3:2b:eb:
         a1:40:77:ad:32:3b:d1:6e:d4:61:8d:f7:50:0d:d0:0d:09:aa:
         47:bb:28:1a:8a:78:88:7a:44:02:a7:3b:a3:d8:1a:05:b5:0c:
         56:2b:85:b0:d6:35:ef:7a:58:ac:cc:f8:3b:b0:6a:40:f5:ae:
         5d:40:75:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:30 2026 by rpki-client