Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
File:                     3139302e38392e32312e302f32342d3234203d3e20323730333530.roa (raw, json)
Hash identifier:          AetysQh8GXDSU32kOli1LJXI3MgqKttBIh8znbNpglw=
Subject key identifier:   C3:CB:65:CC:DB:98:2A:B8:DA:83:86:11:34:07:D1:45:D5:37:A1:CE
Certificate issuer:       /CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
Certificate serial:       4F9B4C8A60D07CB46031B40B69D014179592DDCA
Authority key identifier: 18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa
Signing time:             Fri 27 Mar 2026 21:11:11 +0000
ROA not before:           Fri 27 Mar 2026 21:06:11 +0000
ROA not after:            Fri 26 Mar 2027 21:11:11 +0000
asID:                     270350
IP address blocks:        190.89.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl
                          rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 06:37:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9b:4c:8a:60:d0:7c:b4:60:31:b4:0b:69:d0:14:17:95:92:dd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181D32E62BCCBB8FAE3072330C0A8788FB6F23CC
        Validity
            Not Before: Mar 27 21:06:11 2026 GMT
            Not After : Mar 26 21:11:11 2027 GMT
        Subject: CN=C3CB65CCDB982AB8DA8386113407D145D537A1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:26:ba:16:e6:48:36:78:f8:d8:27:f1:c9:
                    bb:6e:8a:b0:a3:03:0b:2b:28:4c:7b:83:ad:c6:1a:
                    6d:77:fe:dc:6f:e5:18:b8:6f:c4:32:89:8d:30:26:
                    15:f0:60:fe:b3:e0:a4:a1:bd:5f:74:30:6e:29:ca:
                    44:43:6d:82:8d:28:cb:7b:56:f4:de:6c:dc:a7:1f:
                    cc:c7:05:e6:2b:60:27:b8:21:9c:1e:dd:1c:7b:60:
                    ca:28:c9:4e:92:3f:a7:e0:4a:ff:66:d2:72:f0:c7:
                    e9:a4:6b:cc:90:23:96:a9:71:c4:15:88:3a:e2:77:
                    d3:62:84:97:44:16:64:de:43:33:36:84:ae:a8:63:
                    43:37:99:3f:50:76:9c:61:2b:83:11:e7:ea:1e:3f:
                    0b:18:a6:74:d2:e9:8f:60:6f:ce:ff:e5:c9:bb:a2:
                    21:30:40:60:0d:59:c2:b0:4f:bd:01:99:8e:92:19:
                    1d:79:db:85:e7:85:f2:67:83:af:6e:e6:61:da:87:
                    85:12:e0:e0:49:4e:0a:c1:25:27:c3:db:5a:e8:5c:
                    4d:0b:8c:47:7e:d3:b6:46:02:b1:69:dd:73:26:3b:
                    90:45:16:1a:15:de:98:b1:0e:f5:56:31:9f:b3:50:
                    6b:60:81:cb:bd:e1:e3:fb:cf:6e:82:5a:56:4b:a3:
                    42:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CB:65:CC:DB:98:2A:B8:DA:83:86:11:34:07:D1:45:D5:37:A1:CE
            X509v3 Authority Key Identifier:
                keyid:18:1D:32:E6:2B:CC:BB:8F:AE:30:72:33:0C:0A:87:88:FB:6F:23:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181D32E62BCCBB8FAE3072330C0A8788FB6F23CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BmoWSGphkUoNrrnBnif5cLaRgmJEEv5cNaubLjpyS2Kn/0/3139302e38392e32312e302f32342d3234203d3e20323730333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bd:71:d2:c5:40:7e:6b:a7:26:96:25:7d:20:8b:a3:9f:b0:
         c0:90:6e:82:0c:a1:2c:79:28:1e:3d:09:e9:0e:f5:06:af:51:
         90:4b:89:20:81:16:67:f0:8f:1d:15:29:58:83:33:2f:b4:26:
         01:67:cc:a7:f4:18:2c:bd:fb:df:1f:2c:96:9a:13:7c:17:a9:
         80:84:67:10:3b:40:4a:96:c8:d1:8e:24:1b:1d:59:c2:36:a9:
         27:93:f5:51:a6:c2:4c:de:80:cb:ed:eb:fb:30:6c:5c:18:d3:
         c4:f6:b7:d5:de:cd:e7:68:79:42:7d:1b:79:d8:fc:5c:13:36:
         e6:9a:76:62:c4:b4:51:c6:c5:7f:5f:31:f2:30:8c:37:cc:52:
         8b:9e:fa:cf:cf:1b:2e:10:5b:62:bd:ed:54:d6:ee:46:a8:08:
         e4:55:e3:4c:04:10:5c:8c:ca:ef:6e:a4:48:d0:00:3a:fd:61:
         1d:1e:88:31:d3:ff:86:74:21:6d:46:f2:e4:e1:50:2f:91:9a:
         1a:b1:ea:29:fb:3d:4c:d1:14:a6:b1:eb:42:8c:a9:fa:55:62:
         63:6c:0e:9a:f6:0a:d5:32:a2:39:e8:66:3a:92:15:f5:db:5a:
         0d:fa:c9:9e:9f:9e:92:90:fb:d1:0c:44:db:4c:07:48:90:5e:
         bf:9b:d6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 12:22:22 2026 by rpki-client