Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa
File:                     AS61946.roa (raw, json)
Hash identifier:          6a/EUBNUqLy9TH609Dc1wPQR6YtgMta3IMwsW2jjQ1o=
Subject key identifier:   A5:84:20:20:53:DB:48:A5:58:AF:ED:79:DE:03:06:B4:2C:48:1D:C5
Certificate issuer:       /CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
Certificate serial:       287C8C87429373EB43B474F275EFFE2E981B47FE
Authority key identifier: 98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa
Signing time:             Sun 12 Jul 2026 19:13:59 +0000
ROA not before:           Sun 12 Jul 2026 19:08:59 +0000
ROA not after:            Sun 11 Jul 2027 19:13:59 +0000
asID:                     61946
IP address blocks:        201.139.184.0/21 maxlen: 21
                          201.139.184.0/23 maxlen: 23
                          201.139.186.0/23 maxlen: 23
                          201.139.188.0/23 maxlen: 23
                          201.139.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl
                          rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 20:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7c:8c:87:42:93:73:eb:43:b4:74:f2:75:ef:fe:2e:98:1b:47:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E922E2EBFFBA80468C170F0B053C90FD160E4
        Validity
            Not Before: Jul 12 19:08:59 2026 GMT
            Not After : Jul 11 19:13:59 2027 GMT
        Subject: CN=A584202053DB48A558AFED79DE0306B42C481DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:63:9f:fd:9e:d3:d9:7f:51:3d:fe:0f:de:
                    ab:03:65:d5:a2:2b:6b:46:e6:92:8d:2c:bd:fc:24:
                    2a:cd:96:99:4f:c2:0c:f8:7e:7d:70:5e:9f:51:26:
                    c9:ae:1e:5b:a9:d6:61:f5:44:05:e7:87:1a:c9:a9:
                    50:43:15:29:e3:81:ae:e4:9c:bd:fe:74:03:c0:4d:
                    34:99:2b:94:4c:d5:7f:6c:81:f0:0d:0e:ae:21:27:
                    98:26:22:2e:28:3e:4b:8c:9f:64:20:3b:88:53:80:
                    ca:e3:ee:d2:3f:9d:52:c6:12:22:94:33:41:ee:b7:
                    03:70:d2:45:a9:de:2b:c0:d9:71:78:7a:e5:0f:00:
                    4b:b8:f7:83:e3:c4:ee:b2:1a:a7:93:ac:01:09:0b:
                    0a:2a:c0:11:29:b5:d1:71:a0:e5:4e:7c:86:6f:cd:
                    33:98:c7:87:e1:56:f5:79:ea:70:9b:51:fa:da:17:
                    53:b8:55:b1:2c:19:c0:4f:ad:f7:d9:9b:64:93:9b:
                    13:1e:76:36:a1:27:28:7f:46:2f:a2:a6:f5:5c:1e:
                    dc:bc:da:1f:1d:89:cb:f0:4c:b6:cf:a6:9d:34:3a:
                    40:9c:c0:6b:00:a6:db:2f:43:66:4e:95:d9:be:fd:
                    67:a6:15:d8:1d:2e:c5:87:83:66:f4:b9:f8:b6:6b:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:20:20:53:DB:48:A5:58:AF:ED:79:DE:03:06:B4:2C:48:1D:C5
            X509v3 Authority Key Identifier:
                keyid:98:8E:92:2E:2E:BF:FB:A8:04:68:C1:70:F0:B0:53:C9:0F:D1:60:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/988E922E2EBFFBA80468C170F0B053C90FD160E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/1/AS61946.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:dd:42:93:fd:38:86:e7:ae:c2:4d:a5:78:5a:4c:71:eb:
         85:c3:8b:e1:1c:ea:39:ba:98:67:27:b8:b7:8b:c9:87:63:73:
         80:f0:d1:04:3d:af:4e:db:4d:b9:b4:ef:c6:0c:13:06:0d:bc:
         ed:41:14:a8:32:1e:dd:da:c8:75:0f:8d:71:79:e3:16:50:56:
         64:fe:d1:04:fa:c2:40:6e:50:cc:38:9e:74:76:1c:ab:4d:40:
         26:81:49:df:69:9c:f3:9d:81:d5:fd:1f:f7:0b:48:d6:53:8e:
         2a:d9:d4:ca:b3:b2:36:c4:43:10:39:26:42:67:e9:8a:8f:83:
         3f:7b:44:95:97:1c:ae:45:6d:4c:95:6e:65:47:21:e0:9e:c4:
         ae:0f:65:d7:49:17:af:a8:78:d0:3b:8a:07:2a:09:ff:ec:77:
         9f:6f:2a:8b:b6:24:bc:c4:e6:3b:be:01:3f:7c:70:bf:fa:c3:
         29:a2:73:34:ac:f8:e2:85:7d:ab:4c:c4:5e:79:b0:19:bd:cb:
         ea:cb:0b:cf:cd:8c:84:b5:84:65:aa:3e:8b:d5:1f:b6:8e:fd:
         a2:81:06:49:42:47:60:09:db:57:aa:93:7b:98:19:61:5d:7b:
         00:05:f1:95:6f:bd:bd:db:37:2b:56:21:9f:6c:b0:2a:aa:05:
         17:ce:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:06 2026 by rpki-client