Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa
File:                     3139302e332e3136362e302f32342d3234203d3e20323731363033.roa (raw, json)
Hash identifier:          BZt/5hksVQz2a5+732phEHgo0f7KUBQq5Rfq0ZWp9Tw=
Subject key identifier:   85:7C:7A:7F:95:44:CB:4E:21:A9:45:F3:D9:DC:49:83:A5:52:AD:EE
Certificate issuer:       /CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
Certificate serial:       1ADB03BF08AD696067EBDC666936318BD1CFE1B7
Authority key identifier: 97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa
Signing time:             Sat 25 Apr 2026 00:45:35 +0000
ROA not before:           Sat 25 Apr 2026 00:40:35 +0000
ROA not after:            Sat 24 Apr 2027 00:45:35 +0000
asID:                     271603
IP address blocks:        190.3.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl
                          rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:db:03:bf:08:ad:69:60:67:eb:dc:66:69:36:31:8b:d1:cf:e1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9704E382DEE096259FE06F431ECDCFE7EC256C6A
        Validity
            Not Before: Apr 25 00:40:35 2026 GMT
            Not After : Apr 24 00:45:35 2027 GMT
        Subject: CN=857C7A7F9544CB4E21A945F3D9DC4983A552ADEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:15:65:27:55:71:98:5d:79:b5:46:58:d3:
                    49:1d:19:6c:ac:74:2a:63:6e:fd:92:60:ff:a1:ff:
                    41:42:82:a7:f0:53:ff:16:69:5f:a2:c8:27:84:71:
                    7c:54:ef:77:f4:94:6e:bc:55:db:fa:5d:f5:59:ce:
                    f3:fa:42:de:02:6e:38:ec:29:a7:fc:9e:35:15:07:
                    17:0d:78:ac:f2:c3:b2:a0:ea:f8:6b:52:79:dd:f2:
                    fd:04:ab:10:35:68:b8:c0:a5:75:99:f6:9e:3e:cb:
                    52:d6:85:9d:dc:fd:13:a5:bc:dd:0a:87:ff:45:4c:
                    8f:60:1a:a7:21:ce:ef:7c:ef:54:28:bc:e9:25:21:
                    41:3d:f4:6f:05:f0:a5:cd:39:39:d3:ff:df:a5:dc:
                    da:31:1f:b3:ab:c9:7f:55:59:d3:70:70:20:cc:bb:
                    23:01:42:38:06:00:42:ca:f5:6e:51:0c:f4:90:bc:
                    df:c5:8f:16:d9:ec:d5:b9:11:28:96:d2:f9:ac:a8:
                    6f:0c:55:f0:ca:61:1b:8e:e0:ca:fe:37:34:09:ed:
                    e4:d4:66:17:56:fc:66:d2:c5:c7:b7:fd:6d:63:3f:
                    c0:85:7e:7a:18:5f:1c:22:88:e3:26:ba:c3:50:93:
                    4e:b6:d8:94:d1:04:d2:9c:85:e6:df:44:6f:39:24:
                    0f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7C:7A:7F:95:44:CB:4E:21:A9:45:F3:D9:DC:49:83:A5:52:AD:EE
            X509v3 Authority Key Identifier:
                keyid:97:04:E3:82:DE:E0:96:25:9F:E0:6F:43:1E:CD:CF:E7:EC:25:6C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/9704E382DEE096259FE06F431ECDCFE7EC256C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9704E382DEE096259FE06F431ECDCFE7EC256C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RdJn5EfmmgbHnZLC8FZiWuVj6xHDax3MwnWYTaUawyK/0/3139302e332e3136362e302f32342d3234203d3e20323731363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:91:df:49:9b:3c:0d:39:6d:0e:f3:07:19:cc:11:9f:1e:
         3c:7d:74:50:b7:b4:3d:08:c9:29:d3:6b:8e:00:36:be:ea:6d:
         f3:e9:6a:5d:dd:87:34:f7:a9:de:7a:f8:7f:0d:1f:d8:b9:c5:
         8d:4f:a9:67:b3:9f:46:97:5b:e9:cf:95:88:b5:a0:d3:1b:73:
         2a:57:6f:35:31:fd:8f:88:0b:eb:ab:83:16:3b:1f:f9:e9:f3:
         05:4d:7f:81:ae:7f:dc:52:f2:a0:29:05:83:b1:0f:78:34:e2:
         be:a7:73:74:b7:ae:fc:52:20:12:69:e7:26:b0:f3:24:b1:eb:
         a7:9b:29:e2:16:d3:05:34:a5:48:46:c5:83:03:64:8a:56:a1:
         99:1d:fe:b8:8d:e7:ca:b1:78:73:f0:89:4c:97:65:99:a6:60:
         e2:3a:3a:c0:0e:62:3f:9c:e6:d9:f4:c0:e0:d7:8b:a5:e6:ab:
         86:ad:d5:1b:30:ef:d3:97:02:76:eb:fd:f3:b2:2d:05:7e:69:
         71:48:01:dc:fb:bb:2f:01:55:66:34:49:cf:e1:b6:a3:14:01:
         3b:85:35:73:d4:9f:1a:ca:a9:85:59:75:74:a0:87:72:56:32:
         0f:69:d0:38:80:87:9a:2e:ae:0e:3d:7e:76:9d:aa:61:85:8e:
         4c:a9:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:24 2026 by rpki-client