Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
File:                     3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa (raw, json)
Hash identifier:          e2/wMGLagTWclcO3oBWx0Xl71MCxhhN3gnF9jg3so+M=
Subject key identifier:   5F:B1:FE:CF:63:87:C0:F0:61:80:D6:59:99:98:E5:34:2A:41:6D:B8
Certificate issuer:       /CN=AB3D57D8618744FD32C81A0505DE4011EF3EE3DC
Certificate serial:       2F61F80B46E2577FB43A42CDBDC190E053B8B157
Authority key identifier: AB:3D:57:D8:61:87:44:FD:32:C8:1A:05:05:DE:40:11:EF:3E:E3:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa
Signing time:             Sat 25 Apr 2026 03:45:44 +0000
ROA not before:           Sat 25 Apr 2026 03:40:44 +0000
ROA not after:            Sat 24 Apr 2027 03:45:44 +0000
asID:                     271280
IP address blocks:        190.12.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:61:f8:0b:46:e2:57:7f:b4:3a:42:cd:bd:c1:90:e0:53:b8:b1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3D57D8618744FD32C81A0505DE4011EF3EE3DC
        Validity
            Not Before: Apr 25 03:40:44 2026 GMT
            Not After : Apr 24 03:45:44 2027 GMT
        Subject: CN=5FB1FECF6387C0F06180D6599998E5342A416DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:3f:04:86:46:06:e5:57:69:ef:fc:b4:7d:
                    bd:a2:f7:c0:c2:10:42:6a:25:f6:b9:34:f4:f2:2c:
                    40:05:bb:58:31:b9:6b:04:17:0e:dd:ce:d4:4f:0c:
                    ac:1f:a5:6a:38:06:0c:41:a4:3a:b8:5c:2e:d6:0b:
                    ec:09:d8:3d:5a:56:fb:45:79:12:ad:6b:19:f8:53:
                    ea:85:50:45:c5:92:54:1c:74:56:c0:2d:32:ad:c4:
                    6f:7e:7e:e0:23:08:c3:e3:bb:47:f9:e6:a2:3a:3d:
                    27:1f:32:5f:ad:a8:62:0e:1f:b3:63:ad:da:6b:75:
                    89:83:c4:0d:f9:3d:e2:01:93:19:b0:aa:68:0f:84:
                    5b:ab:ef:02:ec:09:d0:42:08:c6:2a:b5:57:be:48:
                    a4:69:02:d0:02:95:a0:e6:7e:2f:69:63:91:2c:4d:
                    2e:a6:30:63:1b:fc:c0:e0:49:19:5d:d9:bf:37:f3:
                    66:3e:20:96:c7:26:5f:13:35:13:65:54:40:ff:d8:
                    3a:48:08:fd:2c:4f:f5:c1:f2:7c:e5:32:c9:e3:35:
                    26:c9:7a:6b:d7:8f:b7:1e:ec:c5:66:99:b6:0b:88:
                    07:e0:ad:df:67:2f:b5:31:d9:a6:5c:f0:a6:aa:ec:
                    d5:e0:97:41:eb:23:41:a8:da:7d:f2:19:a5:64:16:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B1:FE:CF:63:87:C0:F0:61:80:D6:59:99:98:E5:34:2A:41:6D:B8
            X509v3 Authority Key Identifier:
                keyid:AB:3D:57:D8:61:87:44:FD:32:C8:1A:05:05:DE:40:11:EF:3E:E3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB3D57D8618744FD32C81A0505DE4011EF3EE3DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/3139302e31322e3135322e302f32322d3332203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:48:b9:f6:51:c7:9a:3b:f4:5a:fd:76:17:7c:e9:f7:a6:
         b5:e8:53:7c:b1:4f:e0:2e:5d:fc:8d:d9:80:cd:c3:c4:a0:3f:
         c2:a8:5c:6d:36:b0:71:b0:22:42:30:2e:6a:13:01:9b:1a:86:
         92:48:c1:d7:af:b0:20:01:f3:3a:42:19:2e:bb:f5:9e:6a:f7:
         d8:2b:a0:25:a2:df:35:28:31:9d:62:b9:b5:f2:42:09:95:c6:
         78:c8:60:11:9f:3c:98:18:a7:0c:f7:7f:7e:62:0a:f3:60:9e:
         4d:67:32:c5:33:ed:88:de:5b:b7:3d:e2:34:89:aa:c0:32:4a:
         38:8c:0a:8b:17:e2:d0:c7:6c:2b:a3:b9:a0:33:d8:85:23:9f:
         1f:c7:9b:82:0a:a8:9f:e8:32:41:a3:d9:98:5e:15:af:61:6d:
         5e:c7:d2:35:7e:2b:00:16:f6:2d:c3:52:f5:5a:d4:ed:47:96:
         96:b0:8f:28:af:19:ff:da:1e:07:43:d8:66:03:64:9b:c6:53:
         14:9f:ec:73:d8:1a:cd:8c:6b:45:3a:07:b2:4d:7f:19:25:e0:
         07:e5:75:96:8c:ff:cf:70:fe:91:b3:4f:1d:52:c4:a4:9e:1f:
         44:5a:18:c3:ae:b6:04:e2:10:52:0e:c1:4c:d7:ba:c8:22:06:
         f4:fe:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:23 2026 by rpki-client