Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa
File:                     3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa (raw, json)
Hash identifier:          xhrC/HAhJCwKufnng6tOfznxmm3z68RJOuBPW0Rf1ds=
Subject key identifier:   DE:CF:4F:1E:F2:D6:5C:7B:5F:42:9B:1A:0A:BC:EE:F1:29:00:11:14
Certificate issuer:       /CN=8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3
Certificate serial:       6AAE2CA87A260ACF4547EE8E9F546D8874C0C694
Authority key identifier: 84:79:CC:1B:EA:BB:7C:B5:EC:34:DF:DF:CB:0E:4F:73:AF:71:B0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa
Signing time:             Thu 01 Oct 2026 21:26:44 +0000
ROA not before:           Thu 01 Oct 2026 21:21:44 +0000
ROA not after:            Thu 30 Sep 2027 21:26:44 +0000
asID:                     263480
IP address blocks:        191.242.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.crl
                          rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ae:2c:a8:7a:26:0a:cf:45:47:ee:8e:9f:54:6d:88:74:c0:c6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3
        Validity
            Not Before: Oct  1 21:21:44 2026 GMT
            Not After : Sep 30 21:26:44 2027 GMT
        Subject: CN=DECF4F1EF2D65C7B5F429B1A0ABCEEF129001114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:9d:20:70:1c:d5:a6:fe:e7:11:06:37:0d:
                    ec:4c:1e:35:d1:04:51:7c:e1:37:2f:9f:77:ef:f1:
                    d8:62:96:19:65:ad:12:b2:a7:45:b6:f0:6d:61:d5:
                    d4:01:01:36:dd:b1:c4:d2:8b:34:60:32:f5:6d:2b:
                    a3:a9:c7:04:a9:e7:aa:a8:78:b0:0e:13:e0:40:c4:
                    53:49:c2:45:67:a7:b4:00:ce:4e:09:b4:b4:58:80:
                    23:34:ac:40:0b:6a:a0:a5:df:dc:a4:d3:f0:0f:03:
                    fb:e2:4c:36:8c:89:68:e5:12:71:d8:f8:65:20:86:
                    e7:74:b4:5e:86:ad:3f:6d:f8:83:4a:03:cc:f4:17:
                    53:b4:d2:87:c1:0d:30:af:48:1f:75:22:da:74:4b:
                    65:6b:60:c2:47:31:bd:43:17:90:81:8e:61:f7:5c:
                    97:e0:0b:5a:1b:dd:3b:cc:fd:9d:ff:d4:5b:d3:a5:
                    67:35:15:4f:f2:de:9e:0e:e8:9f:ae:40:09:04:73:
                    2b:59:13:1c:1e:96:97:e1:d4:f9:a8:26:7d:8b:54:
                    62:10:89:1d:43:78:7e:c5:5f:c2:34:19:05:2c:fa:
                    d7:b0:c0:db:3d:a2:a5:69:4f:f7:23:71:9f:0a:3d:
                    4e:eb:24:43:99:ac:e0:f8:53:a8:58:7a:ce:ac:7e:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:CF:4F:1E:F2:D6:5C:7B:5F:42:9B:1A:0A:BC:EE:F1:29:00:11:14
            X509v3 Authority Key Identifier:
                keyid:84:79:CC:1B:EA:BB:7C:B5:EC:34:DF:DF:CB:0E:4F:73:AF:71:B0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8479CC1BEABB7CB5EC34DFDFCB0E4F73AF71B0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/nHrvp39p4eRcDZp8FQheonjzGAkqkdrv4Z3riTcEF6J/0/3139312e3234322e3230342e302f32322d3232203d3e20323633343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:be:58:50:38:85:98:0c:7b:41:21:12:86:09:be:90:f2:db:
         ea:7a:ce:bd:58:7e:8c:d5:06:65:1e:51:97:6e:18:af:d1:7c:
         36:24:de:40:f3:43:e9:eb:79:57:ae:1e:4b:bc:c1:5d:6e:07:
         27:e7:63:c8:03:48:14:ae:cc:82:c7:58:d0:0e:49:2a:be:fb:
         50:99:b3:64:43:26:c8:25:7a:a7:0f:bf:98:e4:b3:7e:13:0f:
         e1:ec:30:c6:eb:98:6c:db:53:27:9d:92:b2:a7:2c:b7:d8:8d:
         95:ce:3b:d6:c0:5b:02:35:d5:96:8c:38:9b:a2:26:e8:18:b9:
         b5:25:dc:c4:b9:be:13:b3:d9:9f:88:8f:eb:0f:aa:12:28:d5:
         0d:09:7b:97:c6:5f:78:ae:02:f7:24:58:56:0b:d0:0d:57:f7:
         d7:08:e5:33:76:5d:7d:82:60:63:14:ea:e2:82:3b:56:ff:1a:
         ce:0f:98:c9:14:dd:d8:9d:49:fb:5c:c5:aa:8f:f0:40:7c:5a:
         55:a9:62:30:94:c0:d2:a6:4b:41:d7:d4:02:e5:a8:cb:6a:82:
         2e:a7:f8:14:21:23:d4:c4:3e:37:46:9d:5a:71:ea:94:4e:5f:
         d9:fc:0e:28:b7:88:8b:86:00:90:e6:ec:09:2e:c2:ed:a6:fa:
         c3:db:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 16:05:57 2026 by rpki-client