Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e302e302f32332d3332203d3e20323633393830.roa
File:                     3139312e33372e302e302f32332d3332203d3e20323633393830.roa (raw, json)
Hash identifier:          fsd/IuXl6LVWpVHgixckG6LpN5II08eoR6A1KdNfjuk=
Subject key identifier:   8F:E2:BC:4C:43:03:8D:EB:11:9D:2C:3C:DA:2D:9D:ED:E5:30:FD:FD
Certificate issuer:       /CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
Certificate serial:       71C61FB4BA1F8B45393EC37D8CC1C1BE4A20E306
Authority key identifier: 2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e302e302f32332d3332203d3e20323633393830.roa
Signing time:             Mon 18 May 2026 14:31:28 +0000
ROA not before:           Mon 18 May 2026 14:26:28 +0000
ROA not after:            Mon 17 May 2027 14:31:28 +0000
asID:                     263980
IP address blocks:        191.37.0.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl
                          rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c6:1f:b4:ba:1f:8b:45:39:3e:c3:7d:8c:c1:c1:be:4a:20:e3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2
        Validity
            Not Before: May 18 14:26:28 2026 GMT
            Not After : May 17 14:31:28 2027 GMT
        Subject: CN=8FE2BC4C43038DEB119D2C3CDA2D9DEDE530FDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:06:b0:a7:5e:ae:4c:b7:48:fd:6d:ad:c2:
                    33:c1:29:e6:16:4d:68:58:1b:62:19:8b:47:6d:79:
                    db:23:cb:75:c0:9d:c4:dd:d2:34:dc:5f:35:7a:9f:
                    27:7a:77:d2:ca:5e:be:ee:94:59:8a:5b:b6:53:07:
                    37:fd:c7:a2:6e:42:0f:71:31:3d:98:04:59:84:cc:
                    8c:80:54:ad:fa:98:1e:eb:7c:fa:37:db:06:79:d8:
                    ea:5a:2f:4d:0e:df:7f:75:e1:05:79:82:e4:bb:84:
                    44:97:30:0a:4c:3d:70:1d:48:3f:2a:db:33:3b:6e:
                    82:32:e5:47:62:90:a4:0e:17:c2:6f:bb:d0:af:71:
                    e6:4a:50:cb:96:87:9a:f9:93:b4:96:2c:01:b1:2c:
                    a0:8e:5f:1c:c4:eb:0a:aa:f5:ef:da:8a:55:c4:06:
                    a2:07:43:51:6a:0e:e2:9f:3c:83:b0:0d:9f:c9:9c:
                    61:72:e5:07:21:60:00:47:96:a1:79:0d:77:91:5c:
                    09:a9:43:3c:a6:98:68:95:1a:f1:42:1e:91:69:2e:
                    ca:93:81:0f:9f:1b:53:4e:68:7c:4d:ae:14:30:3a:
                    e0:9f:9f:01:28:02:29:db:ae:dd:fd:61:6d:cd:41:
                    05:28:e8:b6:c2:6e:71:54:29:97:02:da:fc:01:a0:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E2:BC:4C:43:03:8D:EB:11:9D:2C:3C:DA:2D:9D:ED:E5:30:FD:FD
            X509v3 Authority Key Identifier:
                keyid:2A:07:55:CD:A1:0D:BE:BB:A6:A8:24:11:2F:67:CD:AE:61:44:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A0755CDA10DBEBBA6A824112F67CDAE6144A1E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/3139312e33372e302e302f32332d3332203d3e20323633393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:b3:a7:e8:21:5b:c0:28:19:67:c7:71:48:a1:bb:2a:b4:
         ab:7b:ac:73:3e:a9:08:4e:35:15:8a:6d:44:f3:c4:8f:7a:68:
         b6:54:f0:9c:65:e0:d4:dc:d3:65:69:b1:cf:bc:e3:bf:f5:03:
         db:3f:5d:b0:3f:4a:20:b4:26:5d:ae:99:96:08:dc:ed:7d:33:
         ed:df:9e:fd:ab:5b:d1:06:fc:eb:75:e4:9c:88:ec:d3:ea:e1:
         31:fb:4b:99:06:e8:5b:1b:9f:3f:6a:58:45:07:06:10:3e:05:
         7d:42:bb:14:46:0c:8e:18:8f:d5:3c:fd:58:ba:d5:35:35:e1:
         91:0d:fb:26:b0:5c:f8:e8:b6:ff:a3:0c:bf:c2:18:bf:89:2e:
         6b:40:4b:29:99:13:77:e2:10:c8:35:fb:17:af:a5:0e:07:bf:
         0c:83:85:a0:56:12:06:35:80:63:10:cd:22:b8:30:03:9d:92:
         19:f8:c5:0b:b5:3e:03:86:00:4d:f3:d4:bf:0d:d3:29:8f:75:
         45:83:1a:d1:c6:1d:e2:af:6b:a4:a7:78:ac:2e:f4:f7:5d:ce:
         f7:9f:6b:62:7a:b5:fa:ba:a2:2c:bd:7b:c7:b7:33:ca:95:55:
         1a:e4:f0:2a:28:9d:57:93:cf:ae:09:55:b7:9b:e8:1d:61:32:
         50:3b:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:07:01 2026 by rpki-client