Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136352e302f32342d3234203d3e20323731363033.roa
File:                     3139302e332e3136352e302f32342d3234203d3e20323731363033.roa (raw, json)
Hash identifier:          IVcoliR+yAPoeS8RnDVVLAqUnl7Hm6UT2jyw3PG0l6o=
Subject key identifier:   CB:1E:C9:84:20:1C:49:1E:50:7C:43:45:16:48:DB:93:FF:2F:14:1A
Certificate issuer:       /CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
Certificate serial:       1245BCE6A995B22DD88378EC8C5CFA536AFE5D64
Authority key identifier: 97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136352e302f32342d3234203d3e20323731363033.roa
Signing time:             Sat 25 Apr 2026 00:49:38 +0000
ROA not before:           Sat 25 Apr 2026 00:44:38 +0000
ROA not after:            Sat 24 Apr 2027 00:49:38 +0000
asID:                     271603
IP address blocks:        190.3.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 19:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:45:bc:e6:a9:95:b2:2d:d8:83:78:ec:8c:5c:fa:53:6a:fe:5d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
        Validity
            Not Before: Apr 25 00:44:38 2026 GMT
            Not After : Apr 24 00:49:38 2027 GMT
        Subject: CN=CB1EC984201C491E507C43451648DB93FF2F141A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:6e:f8:fa:8a:1a:95:2f:89:ea:be:dd:66:
                    06:b4:3d:42:f5:40:b7:3f:12:3a:2b:77:56:ae:08:
                    f8:2c:66:f7:54:1d:7d:df:b1:e2:81:a6:ec:2d:d9:
                    64:3e:15:a9:7a:4d:36:2d:71:41:64:0a:c6:60:12:
                    80:e2:6d:03:22:27:24:ff:89:4a:6f:d1:8f:e0:32:
                    d1:82:f1:b1:98:05:11:3c:fd:a6:b9:92:52:39:01:
                    92:27:98:42:2a:d8:a8:f3:69:86:dd:e0:8a:56:5b:
                    7e:12:3c:f1:8e:c4:29:46:23:4c:99:33:e0:b7:3a:
                    57:8c:33:88:33:13:91:e3:4a:7e:dc:4f:cb:8a:ee:
                    99:42:53:cb:e3:82:23:51:0d:3c:67:ab:c4:03:8e:
                    ab:d5:15:07:26:fc:e6:ab:8e:ff:f0:dc:dc:ea:76:
                    36:1a:12:a2:16:dd:17:41:b3:96:c0:a1:08:3e:0f:
                    c4:ba:a7:c2:b1:b3:f9:e9:5e:8f:5c:98:8a:fa:87:
                    75:19:4e:21:2a:7e:af:7c:d7:fa:25:6c:a1:3f:35:
                    a3:03:eb:b2:20:82:97:58:34:2c:c4:6e:33:83:fd:
                    95:c2:e6:a4:57:55:99:b6:10:40:a2:c8:17:23:1e:
                    64:19:f4:14:e0:fa:fa:d2:21:42:82:ce:30:6e:55:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:C9:84:20:1C:49:1E:50:7C:43:45:16:48:DB:93:FF:2F:14:1A
            X509v3 Authority Key Identifier:
                keyid:97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136352e302f32342d3234203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:33:91:ce:aa:f3:75:14:d2:bd:df:6e:b0:e3:fe:f9:d6:d7:
         38:a0:b6:2c:6e:ec:44:d6:5f:df:eb:26:7f:71:81:73:28:42:
         b6:f8:e8:1c:92:3a:b9:1c:a3:97:48:87:f7:2a:fe:45:ae:5c:
         db:f6:3a:fe:08:9e:0f:94:24:6d:c7:f5:c4:24:9a:27:2a:18:
         1c:ec:43:8b:e3:f5:cd:0c:9f:98:2d:aa:00:3a:52:ad:6f:9e:
         f6:47:ee:e3:60:48:9b:2a:37:56:5f:f6:94:dc:7a:ce:11:43:
         a9:22:38:bb:3e:0a:74:fc:d6:c4:58:df:46:7c:47:e3:a5:ad:
         0e:f5:57:bc:b6:0f:a5:04:3f:c0:ef:5c:ba:18:ae:9e:f1:8a:
         db:e9:fd:50:db:1b:17:ce:58:93:e6:14:56:79:d7:f4:8a:29:
         53:f0:c8:78:ed:18:4c:33:01:d3:b7:8b:4e:72:09:82:aa:e9:
         43:12:2a:60:11:42:53:9f:58:81:59:34:ff:30:a1:53:6c:42:
         17:fd:8e:59:66:de:f8:bc:45:d9:23:14:96:af:ee:63:e2:0d:
         82:b5:fc:f8:fa:d0:0a:a3:27:bc:16:d8:cc:62:7d:c8:72:9c:
         1e:35:1c:fe:1f:e3:86:18:7e:89:1a:10:d1:4b:3c:dc:ec:33:
         c7:e2:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:50:59 2026 by rpki-client