Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33362e3232342e302f32322d3332203d3e20323633393830.roa
File:                     3139312e33362e3232342e302f32322d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          AdiFpuPTGX3Lb/ExUDFcNDV8Adzc/y/MpYFj7KbPZ7Q=
Subject key identifier:   6A:31:04:66:8B:FD:A9:FA:3B:58:CB:E2:85:04:A8:E6:0E:61:A2:B5
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       24B643E4CE7097BCFD66A43C93939CF494E0B2F1
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33362e3232342e302f32322d3332203d3e20323633393830.roa
Signing time:             Wed 19 Aug 2026 12:01:49 +0000
ROA not before:           Wed 19 Aug 2026 11:56:49 +0000
ROA not after:            Wed 18 Aug 2027 12:01:49 +0000
asID:                     263980
IP address blocks:        191.36.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 02:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b6:43:e4:ce:70:97:bc:fd:66:a4:3c:93:93:9c:f4:94:e0:b2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: Aug 19 11:56:49 2026 GMT
            Not After : Aug 18 12:01:49 2027 GMT
        Subject: CN=6A3104668BFDA9FA3B58CBE28504A8E60E61A2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:d8:f9:9c:3f:12:98:f9:ee:d4:95:a2:72:
                    7c:80:a3:7b:4d:ff:10:e0:5c:88:25:45:a1:20:85:
                    78:d6:0c:78:0a:20:2c:ac:6c:85:d5:48:47:3d:82:
                    64:1f:f8:71:5c:b6:d4:03:b1:ee:b8:29:02:34:6e:
                    d0:69:8c:d3:f9:24:38:75:16:96:72:86:83:d2:33:
                    4a:2d:d6:82:8f:1a:69:1d:33:92:90:5a:f8:5d:fa:
                    88:69:23:44:80:63:c6:83:d4:91:7a:0d:61:5e:94:
                    7f:de:9e:62:73:a9:11:c9:3a:bc:20:3e:93:a9:86:
                    fa:f5:33:8f:06:3c:15:a0:b7:f2:c3:26:08:6f:e0:
                    29:00:82:2a:96:36:75:2c:6f:43:ee:56:cd:2d:6c:
                    ac:39:d4:8d:f5:d8:96:86:2c:26:41:10:f6:ad:b9:
                    ba:5e:9b:0a:df:27:98:44:73:5b:fc:1d:eb:d7:60:
                    33:94:07:fe:29:94:ad:16:b6:7b:d3:ae:ff:fa:ec:
                    38:fc:18:9f:5d:a1:68:a5:e6:51:db:be:38:0b:a0:
                    14:ea:79:a4:8f:ec:a1:cb:fb:a3:1b:bf:21:1b:b7:
                    5e:b5:18:94:57:47:fc:5a:ab:2a:c3:90:2e:52:2e:
                    6c:84:d6:39:d5:2b:f2:7a:88:3a:0d:86:cb:c2:b7:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:31:04:66:8B:FD:A9:FA:3B:58:CB:E2:85:04:A8:E6:0E:61:A2:B5
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33362e3232342e302f32322d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:c8:9f:b5:09:1f:0d:13:9d:0b:8c:58:8c:bf:02:99:cd:
         ab:5d:c1:43:7a:7d:a9:89:ea:d5:0f:02:7d:0e:42:35:3b:53:
         8f:20:2c:ee:a3:7e:92:eb:25:da:fd:4c:72:6c:43:fd:e1:11:
         f4:9b:f0:f5:2b:fc:8a:f3:89:3e:ab:b2:4c:d1:01:8b:eb:5c:
         26:dc:18:c8:87:ee:a8:32:64:b1:b7:9e:3b:84:cf:02:83:ab:
         28:2f:7a:ef:40:d0:84:13:b9:ff:db:fb:cd:21:97:fd:7a:da:
         70:2e:06:b1:cc:a5:9b:99:b8:a2:30:5c:41:78:9f:2f:27:f9:
         51:7c:82:19:f8:dc:c9:3a:09:fd:20:24:f5:6b:6b:2c:66:a7:
         0c:a8:31:1d:78:92:a6:a5:40:10:e1:54:82:76:8b:c8:14:dc:
         9f:54:4b:bd:8a:d5:87:78:76:b3:e1:47:01:91:37:a1:ac:d1:
         35:2e:b0:a1:50:db:82:dd:51:0b:e3:a2:cd:23:ee:bb:f2:62:
         dd:21:2c:9b:8c:fe:1d:e1:07:90:9a:13:0d:48:ba:f0:84:be:
         76:26:11:a0:92:ae:82:20:c9:66:8e:37:62:61:6f:75:52:be:
         ef:a6:66:ca:e1:7a:16:0b:ac:c2:b0:17:d1:c7:b0:0a:9e:a5:
         16:61:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:49:59 2026 by rpki-client