Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/3139312e352e37322e302f32312d3234203d3e20323734333532.roa
File:                     3139312e352e37322e302f32312d3234203d3e20323734333532.roa (raw, json)
Hash identifier:          nt5YXKMO69cPE2bCmml4hPIzM0NL9blbe10cuEIK9wA=
Subject key identifier:   2A:FA:25:5A:91:27:61:E9:EC:CF:2D:5B:4D:6F:52:5E:20:EA:18:63
Certificate issuer:       /CN=75541DAF46E07ED1BD47753D204B41116FA05B26
Certificate serial:       1E5CC59CE9A85FF571B9B1D11C2B44D57F08A6CF
Authority key identifier: 75:54:1D:AF:46:E0:7E:D1:BD:47:75:3D:20:4B:41:11:6F:A0:5B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75541DAF46E07ED1BD47753D204B41116FA05B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/3139312e352e37322e302f32312d3234203d3e20323734333532.roa
Signing time:             Tue 10 Mar 2026 17:39:33 +0000
ROA not before:           Tue 10 Mar 2026 17:34:33 +0000
ROA not after:            Tue 09 Mar 2027 17:39:33 +0000
asID:                     274352
IP address blocks:        191.5.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/75541DAF46E07ED1BD47753D204B41116FA05B26.crl
                          rsync://rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/75541DAF46E07ED1BD47753D204B41116FA05B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75541DAF46E07ED1BD47753D204B41116FA05B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 03:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5c:c5:9c:e9:a8:5f:f5:71:b9:b1:d1:1c:2b:44:d5:7f:08:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75541DAF46E07ED1BD47753D204B41116FA05B26
        Validity
            Not Before: Mar 10 17:34:33 2026 GMT
            Not After : Mar  9 17:39:33 2027 GMT
        Subject: CN=2AFA255A912761E9ECCF2D5B4D6F525E20EA1863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:d2:fd:a2:ea:73:2a:63:76:62:10:2c:aa:
                    5f:75:49:8b:67:3b:75:8f:95:84:25:4b:20:6a:04:
                    bb:53:56:e9:11:60:3e:81:88:9b:db:86:3f:af:66:
                    ed:ce:08:a4:a0:82:c7:50:41:56:69:16:48:44:db:
                    c3:34:e9:ed:d5:cb:05:3f:3c:0c:51:1a:31:04:c6:
                    13:13:8c:36:30:52:d8:2b:2b:69:65:8f:45:9f:74:
                    d2:4c:05:1a:6e:a0:cc:1d:a3:ac:5e:f8:10:fe:cd:
                    02:7a:8d:e2:8f:b7:a5:67:85:84:59:cc:f9:1b:b7:
                    d7:a8:1a:00:00:ed:3e:20:8e:d5:4f:2d:ba:19:b6:
                    fa:3c:d3:eb:e6:3c:75:20:ea:ff:ec:f2:89:a8:ee:
                    43:a1:84:2f:b1:6d:aa:e5:d7:c4:f4:ef:e6:e1:90:
                    6a:39:95:d4:1d:23:5d:b1:96:6a:06:60:98:a4:2e:
                    6e:12:65:35:3c:43:89:e1:06:ae:dc:e4:cb:e3:0c:
                    0f:2b:df:4c:08:b4:3b:aa:69:38:95:eb:ee:da:ee:
                    17:14:46:a3:e2:6e:5a:79:61:0f:17:76:04:0a:09:
                    97:10:05:51:a4:84:7c:73:f1:57:1d:b3:49:24:22:
                    32:27:f6:f1:e7:5b:85:66:18:ee:02:39:53:d3:b6:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FA:25:5A:91:27:61:E9:EC:CF:2D:5B:4D:6F:52:5E:20:EA:18:63
            X509v3 Authority Key Identifier:
                keyid:75:54:1D:AF:46:E0:7E:D1:BD:47:75:3D:20:4B:41:11:6F:A0:5B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/75541DAF46E07ED1BD47753D204B41116FA05B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75541DAF46E07ED1BD47753D204B41116FA05B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/L61W7nsb9ErVWrtcrQMQhJuJ2RjReRrju1g8tf1d4MQ/0/3139312e352e37322e302f32312d3234203d3e20323734333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:a4:5e:0d:27:ac:aa:d2:53:3c:de:c1:95:a4:40:30:25:
         90:77:4b:04:88:60:70:5e:54:f4:db:5e:ff:a0:94:eb:fc:53:
         57:e8:8c:77:8a:6d:03:25:37:c9:26:49:e9:cd:c7:0f:73:79:
         f8:e4:02:a9:5f:b2:17:76:ec:d2:ab:25:55:82:bc:cf:68:e5:
         09:b2:5c:a7:52:0a:23:0a:d2:52:3d:a7:a0:de:fc:86:1a:36:
         81:e3:05:93:22:04:e8:0b:98:f5:35:e7:d7:a5:d7:57:2f:2c:
         93:27:bf:2c:a6:dd:b8:e1:eb:d0:f2:2b:13:60:17:47:52:c7:
         f5:57:a3:36:06:74:41:6d:71:ce:09:36:02:7f:96:c1:3c:81:
         fd:07:a1:70:41:95:00:d6:6c:4f:30:86:e9:10:db:7f:52:32:
         77:b0:60:fd:bc:66:23:a9:74:e9:73:a1:95:1d:34:cf:92:50:
         2c:11:c2:d8:03:e2:3d:11:d3:12:c9:be:85:25:82:ec:84:de:
         df:f0:dc:b3:e2:e7:cb:a5:e2:60:43:c3:48:67:91:e5:27:ab:
         8d:b9:83:ce:c2:ed:7a:53:f5:94:14:1c:8f:cf:c3:80:ac:8a:
         f1:01:9f:2a:d3:cd:ea:51:8f:d2:fc:e2:01:5e:ed:ff:bc:08:
         db:c6:11:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:40:09 2026 by rpki-client