Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa
File:                     3139312e33372e31322e302f32322d3332203d3e20323633333530.roa (raw, json)
Hash identifier:          fxbhY0S4Tvg608qPTFNszn7wtgbi3Z/Yj0gduN6uTzM=
Subject key identifier:   50:B5:4E:CC:D5:35:C2:81:6F:2A:E9:83:85:2B:6A:4C:8F:93:36:45
Certificate issuer:       /CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
Certificate serial:       569F2E4603273DF16DCD359006EC04E8BA0375C8
Authority key identifier: 65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa
Signing time:             Wed 19 Aug 2026 18:48:55 +0000
ROA not before:           Wed 19 Aug 2026 18:43:55 +0000
ROA not after:            Wed 18 Aug 2027 18:48:55 +0000
asID:                     263350
IP address blocks:        191.37.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl
                          rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 13:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9f:2e:46:03:27:3d:f1:6d:cd:35:90:06:ec:04:e8:ba:03:75:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
        Validity
            Not Before: Aug 19 18:43:55 2026 GMT
            Not After : Aug 18 18:48:55 2027 GMT
        Subject: CN=50B54ECCD535C2816F2AE983852B6A4C8F933645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:c2:70:37:a5:58:c5:00:8b:84:f4:d5:92:
                    24:13:03:33:c0:9b:bc:b6:f0:a6:dc:97:e4:63:f0:
                    02:7a:25:c1:92:2e:30:73:e8:18:e8:9a:f1:ed:4d:
                    26:7d:5e:d3:13:51:4c:5a:e6:3a:67:5c:91:d2:d3:
                    24:12:15:0c:6b:f0:13:0d:6a:0d:f7:d9:56:6a:30:
                    28:59:e5:fd:41:95:fd:c7:c2:22:9f:37:3f:0c:4b:
                    2a:fd:64:7e:d3:a1:29:b3:86:a4:66:dd:c4:09:d5:
                    f7:6a:32:8b:d3:46:0b:c7:41:08:a5:f8:74:d4:66:
                    80:1f:1c:50:4b:5d:33:ce:a8:f4:88:79:3c:63:7d:
                    82:c2:28:ff:99:c1:86:0d:fa:08:19:85:4c:1b:76:
                    94:63:a2:f4:27:98:21:48:c3:17:bf:c6:ef:d0:96:
                    51:e4:34:39:2a:5b:e0:69:8e:51:09:14:1b:88:92:
                    fa:dd:0c:6d:e0:bd:11:3e:e6:de:38:8d:0d:e3:b0:
                    a5:50:d7:2e:95:2b:20:22:1b:b0:e9:82:52:5f:a3:
                    31:8e:c9:55:b5:54:bc:b4:4b:51:df:94:aa:f9:7c:
                    54:cd:1b:7e:a4:90:34:b1:e7:3c:53:4f:fd:78:1c:
                    02:5c:e6:bf:73:82:bd:7e:4e:f1:83:d3:d8:57:0e:
                    d7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B5:4E:CC:D5:35:C2:81:6F:2A:E9:83:85:2B:6A:4C:8F:93:36:45
            X509v3 Authority Key Identifier:
                keyid:65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/3139312e33372e31322e302f32322d3332203d3e20323633333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:2f:1d:68:f2:8e:02:4d:e2:64:da:58:a8:42:50:3a:d4:0d:
         55:d8:72:7e:2b:2b:ed:3a:16:7c:17:fb:46:66:15:1c:99:8c:
         fb:a2:17:2b:ff:f0:8f:2f:2f:da:d5:a3:21:e3:b9:8d:6c:d5:
         b5:5d:32:6c:eb:9f:ba:00:21:fd:85:59:ae:b3:5f:f7:0a:9d:
         e1:c0:38:27:ad:3d:78:ab:59:c5:ee:9d:37:21:c1:fa:63:51:
         a0:55:b1:5a:2e:e6:78:00:86:44:1a:2d:cb:64:b9:87:21:db:
         c8:08:de:28:47:14:6f:b5:73:0d:94:96:50:30:15:e5:99:45:
         cc:73:77:0a:86:8f:c3:f0:65:95:c7:13:d6:1f:50:26:ac:32:
         25:79:d5:96:66:81:b8:ea:8a:ec:b8:37:cc:97:ae:85:b1:4a:
         44:56:82:34:bf:a7:fa:8c:98:d7:5e:7a:70:a1:e4:8e:20:5f:
         34:07:f2:5e:1b:90:84:0d:2c:fc:0a:b8:f5:f0:a1:77:bf:1a:
         91:09:69:6f:77:f4:8d:cc:0f:44:82:86:5b:3a:68:7c:86:97:
         af:ea:14:ba:6f:25:19:08:ba:8e:41:95:e8:5c:8b:5f:87:19:
         0f:9c:bb:10:a4:57:d3:7b:25:06:3a:4c:97:cd:84:b3:9f:cc:
         8d:c9:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:35:45 2026 by rpki-client