Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa
File:                     3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa (raw, json)
Hash identifier:          KJm+Qfzopviq4Jk502gQSCBAC3k6Bt0i0mwWTcHJ+5k=
Subject key identifier:   AA:A8:CA:BA:FD:CB:2B:A9:1F:1B:2C:90:58:68:68:38:42:F0:18:F4
Certificate issuer:       /CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
Certificate serial:       018F9BC7B7D65A12B9A536A982B027331466B527
Authority key identifier: 25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa
Signing time:             Tue 28 Apr 2026 20:58:40 +0000
ROA not before:           Tue 28 Apr 2026 20:53:40 +0000
ROA not after:            Tue 27 Apr 2027 20:58:40 +0000
asID:                     263143
IP address blocks:        191.242.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl
                          rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:c7:b7:d6:5a:12:b9:a5:36:a9:82:b0:27:33:14:66:b5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D
        Validity
            Not Before: Apr 28 20:53:40 2026 GMT
            Not After : Apr 27 20:58:40 2027 GMT
        Subject: CN=AAA8CABAFDCB2BA91F1B2C905868683842F018F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:8d:5f:da:78:54:2d:a0:f7:f2:f7:36:78:5d:
                    72:63:92:88:65:b8:d2:c8:df:9e:ed:c8:e6:03:3c:
                    f6:ba:5c:95:ed:78:7a:53:02:ed:b9:56:c5:1a:b0:
                    44:42:c4:2c:26:b6:e9:a0:8a:51:16:c6:95:5a:aa:
                    f1:39:35:09:a3:4d:37:a7:fd:5e:f6:a0:6a:94:49:
                    89:9d:a4:85:9a:f5:bd:53:4c:e3:aa:0a:8e:eb:63:
                    58:f9:2b:10:5f:dc:f3:3b:3d:82:5e:4c:fd:85:dc:
                    b4:f9:54:9f:d4:f4:a0:d1:fb:3a:1b:dc:0a:2a:31:
                    e3:60:d0:be:e5:6b:48:9f:e2:30:df:87:ed:ba:f0:
                    f5:f9:44:f2:47:d0:e9:79:09:92:40:87:ee:b2:e9:
                    70:59:57:13:34:2a:b7:39:b6:b6:21:cc:87:a1:20:
                    9f:ce:cc:d5:bb:a9:3a:a0:31:81:b6:30:1d:6e:99:
                    86:19:35:d3:6a:65:5f:ea:f8:99:bb:43:a1:c3:93:
                    3e:c6:a0:b8:2f:ce:40:c4:9f:7e:16:a2:3d:8b:f1:
                    47:68:9e:3a:9a:c7:7d:98:97:f0:19:b8:46:b5:84:
                    67:a1:4a:44:e4:a7:cb:d9:89:b0:46:7c:e0:4e:a7:
                    83:13:b8:fc:b8:1c:f9:a6:06:d0:f0:b5:d3:c6:01:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:CA:BA:FD:CB:2B:A9:1F:1B:2C:90:58:68:68:38:42:F0:18:F4
            X509v3 Authority Key Identifier:
                keyid:25:0B:0A:D6:5A:4B:78:C6:4D:D4:D5:68:A2:5D:2C:2B:B2:7C:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/250B0AD65A4B78C64DD4D568A25D2C2BB27CF86D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xpQugU6YWWXSw7bH46Qnxoq5Hi9PHrH1hAYGU2erjRw/1/3139312e3234322e3139362e302f32332d3233203d3e20323633313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:1e:45:17:a9:af:9f:5d:5d:bf:c1:ef:03:dd:b2:77:42:
         2a:65:31:90:0f:5c:6f:52:8b:cd:63:93:7f:0d:ef:87:c5:b9:
         35:1b:6c:37:47:cb:11:43:da:f4:63:e8:c2:00:e5:85:53:00:
         e7:c5:07:f6:97:15:c0:3f:3f:19:7b:d7:b1:b2:3b:02:a8:9d:
         5a:78:0d:e9:12:ae:a0:e5:21:54:dc:8b:6a:e7:fd:d6:3b:38:
         d7:a0:bd:89:fb:e2:b5:b7:9d:04:0d:f0:8f:1c:d6:67:29:e6:
         97:f6:9a:cf:d8:54:5a:46:f5:e9:f6:fc:72:99:d1:12:9a:86:
         c4:c6:ad:56:98:cc:ee:a0:84:03:1b:6a:d3:69:b3:86:55:67:
         32:e1:b1:b4:e7:52:0d:94:bf:de:61:03:b9:9a:d1:69:eb:07:
         1c:af:6e:b9:3b:e4:d4:41:14:d0:7b:3c:d3:b8:b2:31:ae:e6:
         b7:e7:da:3d:75:08:db:06:87:5a:5b:86:4b:e8:c6:20:13:6e:
         ff:52:37:8e:a5:72:35:d9:fe:81:0c:aa:8e:2b:e0:58:07:24:
         22:c1:ab:38:92:81:98:f8:b4:9d:fa:51:7a:c9:0b:e2:81:8f:
         b8:0c:26:6e:96:16:71:1b:1e:55:9b:91:7b:03:f0:c6:d3:b7:
         52:5d:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:33:45 2026 by rpki-client