Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa
File:                     3139312e352e37312e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          7uTL9RlhohlY8JTlF/Wp4d+xVLFhuxNV4OvOgZRWQVA=
Subject key identifier:   71:DC:13:EF:78:C5:F4:1F:9E:82:2A:5C:93:A5:D8:F3:9C:F7:02:BE
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       56D1DB6CB9C2427C49A879029E42826D52E79B56
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa
Signing time:             Mon 31 Aug 2026 13:38:02 +0000
ROA not before:           Mon 31 Aug 2026 13:33:02 +0000
ROA not after:            Mon 30 Aug 2027 13:38:02 +0000
asID:                     61901
IP address blocks:        191.5.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d1:db:6c:b9:c2:42:7c:49:a8:79:02:9e:42:82:6d:52:e7:9b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 31 13:33:02 2026 GMT
            Not After : Aug 30 13:38:02 2027 GMT
        Subject: CN=71DC13EF78C5F41F9E822A5C93A5D8F39CF702BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:3e:95:6c:bd:ed:9c:23:94:c1:81:04:18:
                    43:6e:fd:7b:f2:68:68:52:85:a9:4b:5e:4c:69:41:
                    8a:89:8b:e4:4c:49:3b:11:cb:26:3b:cb:6c:09:2d:
                    1e:71:0d:a8:ef:6e:b9:97:20:29:b0:55:98:35:d4:
                    3f:ee:23:a1:98:50:75:cc:84:2f:7e:05:29:50:34:
                    2a:74:9d:e2:b2:95:71:f6:53:cd:f5:9e:5f:ed:1b:
                    18:a1:03:d3:ee:54:f6:7f:9c:08:e1:10:c5:00:6f:
                    f3:33:0e:95:24:23:ae:67:d9:86:04:c2:b5:aa:f9:
                    8b:51:2e:2e:de:1e:a0:3d:ec:7b:8d:03:d3:7a:3c:
                    48:55:cf:48:38:e2:74:f6:23:a4:08:ce:8c:a2:dc:
                    d7:10:0c:e6:7f:09:c9:20:9c:97:68:9d:64:90:73:
                    c7:00:6d:12:c2:be:fd:2b:04:76:40:8a:27:33:7d:
                    c5:e0:37:87:2c:01:86:27:3e:fb:c5:73:74:9a:70:
                    7d:2f:ac:4f:6b:04:51:1a:d1:61:90:5f:77:31:96:
                    bc:9f:6c:4a:38:d9:77:82:b9:bb:32:b4:a1:46:cd:
                    72:1f:fc:01:72:6c:d3:7c:c0:87:10:e9:46:74:f6:
                    29:2e:d0:2b:9d:c6:ea:8d:30:17:1b:65:5d:26:e8:
                    ba:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:13:EF:78:C5:F4:1F:9E:82:2A:5C:93:A5:D8:F3:9C:F7:02:BE
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e37312e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:94:58:c4:96:eb:45:99:a4:3d:d8:78:57:16:47:ab:3a:
         b9:b4:ae:fd:42:c0:c5:c0:13:1b:60:2c:73:4c:7b:e9:45:8a:
         88:3b:39:2c:c8:a2:b6:25:76:5b:59:56:8d:0b:e9:03:a7:63:
         42:10:c3:16:22:ed:fd:41:f2:96:6b:9f:b1:3b:47:d6:e4:95:
         45:fb:34:cd:5b:f5:b1:e5:90:3b:6c:09:e8:ef:0d:49:b4:b4:
         0e:0e:a8:6e:4f:64:da:a3:ac:2f:d7:49:e6:d5:8d:e5:0b:10:
         a0:ad:f1:b7:83:69:4f:8d:c5:21:80:67:16:fb:23:df:51:4c:
         bf:79:b3:c6:f3:c0:6f:af:b9:bb:a8:54:7a:e1:ad:11:f6:ad:
         21:79:d7:af:1c:fc:6d:0e:b9:44:69:48:d9:69:2a:0e:66:48:
         97:a1:62:04:50:ac:3d:9e:fa:ea:67:b5:7b:e2:52:59:53:4b:
         51:56:2c:ed:e9:4a:a2:83:55:5b:4b:dc:45:23:dc:0f:1e:cd:
         4b:75:21:01:52:2a:a7:59:33:59:fb:53:e3:a9:40:ea:43:35:
         be:bc:ec:a3:55:6f:cc:13:e3:8a:20:83:22:37:e6:2e:b7:38:
         47:16:53:8e:c6:28:e0:79:b0:af:16:e2:cd:8d:ef:9d:d8:b3:
         27:42:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 14:38:44 2026 by rpki-client