Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa
File:                     3139312e33362e3136302e302f32312d3234203d3e203238313235.roa (raw, json)
Hash identifier:          VA8pzE5OVgeOHI4/E96ByKMfrJmZfBV0/FG8eshvKiU=
Subject key identifier:   FD:AC:F3:8B:42:C3:80:7B:52:CD:DA:EB:CE:AF:F2:EF:68:32:42:F6
Certificate issuer:       /CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
Certificate serial:       1C34F561B432F837BEC578AA6E99F2C5F14B150F
Authority key identifier: 04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa
Signing time:             Mon 23 Mar 2026 13:24:35 +0000
ROA not before:           Mon 23 Mar 2026 13:19:35 +0000
ROA not after:            Mon 22 Mar 2027 13:24:35 +0000
asID:                     28125
IP address blocks:        191.36.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl
                          rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:34:f5:61:b4:32:f8:37:be:c5:78:aa:6e:99:f2:c5:f1:4b:15:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040A99E102503B9DD68DAF74A5564601C25CBFF1
        Validity
            Not Before: Mar 23 13:19:35 2026 GMT
            Not After : Mar 22 13:24:35 2027 GMT
        Subject: CN=FDACF38B42C3807B52CDDAEBCEAFF2EF683242F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:40:f2:3d:fa:ec:97:27:f1:f4:4c:ab:3a:
                    57:80:2a:59:6e:af:ed:f3:b9:27:61:4c:dd:24:ca:
                    d5:da:2b:49:59:e8:63:d2:fc:94:7e:b0:5e:bc:7f:
                    8b:e0:69:75:cf:3e:57:08:11:84:b3:e4:6f:4e:0f:
                    1c:d8:a8:b3:d6:4c:4a:69:a7:53:90:39:c4:7a:a1:
                    6d:5b:f8:64:79:55:ae:27:a6:3d:3b:47:77:2d:0f:
                    25:ae:28:52:61:f1:c5:bb:a0:4e:61:ef:5f:d2:96:
                    4e:65:d0:ef:33:a8:05:9f:71:0c:6c:6a:5e:17:03:
                    d5:8b:68:2f:17:86:a7:3e:b5:00:48:45:36:2f:99:
                    9e:13:0b:52:27:32:e6:26:bc:10:6c:6a:72:1d:9b:
                    7f:96:fa:e4:25:9c:ca:bf:6e:4d:07:16:c2:67:e1:
                    23:a2:5a:19:25:c6:8a:05:6b:1c:19:90:56:10:45:
                    df:97:e7:2f:88:13:28:dc:f8:93:d5:00:27:8c:71:
                    05:31:e9:1a:21:c1:2b:0b:20:48:bf:53:bc:50:48:
                    c9:39:a4:e0:0b:16:8d:8d:89:60:09:14:16:ef:31:
                    75:e3:3e:18:5e:27:fb:d3:7a:8c:7a:85:98:e1:e2:
                    bc:56:44:13:24:d1:0d:ea:c5:48:1a:4e:31:09:59:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AC:F3:8B:42:C3:80:7B:52:CD:DA:EB:CE:AF:F2:EF:68:32:42:F6
            X509v3 Authority Key Identifier:
                keyid:04:0A:99:E1:02:50:3B:9D:D6:8D:AF:74:A5:56:46:01:C2:5C:BF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/040A99E102503B9DD68DAF74A5564601C25CBFF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/040A99E102503B9DD68DAF74A5564601C25CBFF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/3139312e33362e3136302e302f32312d3234203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:94:6e:c8:5f:56:c2:19:4a:db:93:e0:c4:91:8d:5e:e4:a7:
         64:d8:22:9b:e8:4e:29:d8:89:78:5a:a9:79:44:0f:b9:70:7d:
         64:3d:32:b0:ab:c7:b5:09:97:80:40:07:b2:dc:84:8b:bb:10:
         6a:bc:ad:76:cf:3a:4b:f1:93:47:ed:eb:b9:d0:5f:b2:bd:b5:
         f0:ef:f4:54:a9:f5:e4:c1:f2:62:5b:79:27:bb:92:43:4a:30:
         cb:99:9d:56:d6:f0:dd:18:0e:d5:c1:63:12:91:de:b8:e5:d1:
         25:ce:c4:60:09:29:d5:7e:6f:3a:1d:60:0c:e8:25:4a:ae:ca:
         cf:b1:04:8a:61:b1:f0:82:eb:61:41:71:18:a3:cf:9a:cb:08:
         b5:95:df:bf:fd:cf:7f:df:78:92:4e:a7:83:24:fe:18:67:73:
         48:c8:3b:3b:b6:93:d9:39:8e:10:e2:0e:70:52:bd:02:b7:74:
         82:a0:ac:ac:13:97:aa:8d:76:6e:6d:3b:99:c6:09:5b:a6:7e:
         9f:36:88:bd:ae:e3:2f:83:95:d6:1f:51:14:4f:31:04:ff:a8:
         b4:46:cb:0f:43:e4:4d:4e:49:e3:03:6a:e5:47:68:1d:ef:b9:
         92:bd:d6:e5:4c:f7:bc:9a:21:48:39:03:ad:98:af:0c:79:c2:
         1e:0f:0c:8d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHDT1YbQy+De+xXiqbpnyxfFLFQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQwQTk5RTEwMjUwM0I5REQ2OERBRjc0QTU1NjQ2MDFD
MjVDQkZGMTAeFw0yNjAzMjMxMzE5MzVaFw0yNzAzMjIxMzI0MzVaMDMxMTAvBgNV
BAMTKEZEQUNGMzhCNDJDMzgwN0I1MkNEREFFQkNFQUZGMkVGNjgzMjQyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfUDyPfrslyfx9EyrOleAKllu
r+3zuSdhTN0kytXaK0lZ6GPS/JR+sF68f4vgaXXPPlcIEYSz5G9ODxzYqLPWTEpp
p1OQOcR6oW1b+GR5Va4npj07R3ctDyWuKFJh8cW7oE5h71/Slk5l0O8zqAWfcQxs
al4XA9WLaC8Xhqc+tQBIRTYvmZ4TC1InMuYmvBBsanIdm3+W+uQlnMq/bk0HFsJn
4SOiWhklxooFaxwZkFYQRd+X5y+IEyjc+JPVACeMcQUx6RohwSsLIEi/U7xQSMk5
pOALFo2NiWAJFBbvMXXjPhheJ/vTeox6hZjh4rxWRBMk0Q3qxUgaTjEJWbPLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/azzi0LDgHtSzdrrzq/y72gyQvYwHwYDVR0j
BBgwFoAUBAqZ4QJQO53Wja90pVZGAcJcv/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJYeDFtWmJSZ3dEcTF3Qjk5SkJjRmRzWVJZOGFKNmFMS1h4MldxNnRl
aE4vMC8wNDBBOTlFMTAyNTAzQjlERDY4REFGNzRBNTU2NDYwMUMyNUNCRkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MEE5OUUxMDI1MDNCOURE
NjhEQUY3NEE1NTY0NjAxQzI1Q0JGRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCWHgxbVpiUmd3RHExd0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAv
MzEzOTMxMmUzMzM2MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM4
MzEzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvySgMA0GCSqGSIb3DQEBCwUAA4IBAQAWlG7IX1bC
GUrbk+DEkY1e5Kdk2CKb6E4p2Il4Wql5RA+5cH1kPTKwq8e1CZeAQAey3ISLuxBq
vK12zzpL8ZNH7eu50F+yvbXw7/RUqfXkwfJiW3knu5JDSjDLmZ1W1vDdGA7VwWMS
kd645dElzsRgCSnVfm86HWAM6CVKrsrPsQSKYbHwguthQXEYo8+aywi1ld+//c9/
33iSTqeDJP4YZ3NIyDs7tpPZOY4Q4g5wUr0Ct3SCoKysE5eqjXZubTuZxglbpn6f
Noi9ruMvg5XWH1EUTzEE/6i0RssPQ+RNTknjA2rlR2gd77mSvdblTPe8miFIOQOt
mK8MecIeDwyN
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:19:43 2026 by rpki-client