Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
File:                     3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa (raw, json)
Hash identifier:          Gk9rlMs/Rb2wTgE1IFKIXjpOBzHMWETqsHRLZnJHmzU=
Subject key identifier:   35:43:AB:B2:4E:48:0C:4D:69:AD:F4:75:39:4B:20:68:19:AC:74:00
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       14735627D61DD2DFE1C2988B5BF49F99E2AE711D
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:17:26 +0000
ROA not before:           Mon 15 Jun 2026 22:12:26 +0000
ROA not after:            Mon 14 Jun 2027 22:17:26 +0000
asID:                     263047
IP address blocks:        191.243.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:73:56:27:d6:1d:d2:df:e1:c2:98:8b:5b:f4:9f:99:e2:ae:71:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:12:26 2026 GMT
            Not After : Jun 14 22:17:26 2027 GMT
        Subject: CN=3543ABB24E480C4D69ADF475394B206819AC7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:80:ba:9a:b0:c7:02:b0:02:f8:4a:82:3d:
                    26:e4:33:77:e8:1a:d9:a1:03:cd:40:5a:df:4e:e7:
                    d3:66:27:26:3b:96:27:af:95:70:78:e2:f9:42:09:
                    0c:ec:ba:03:25:f3:9c:a0:33:ef:2e:22:96:86:bb:
                    b0:41:38:8d:3e:d4:4e:f2:1e:42:97:12:89:12:d5:
                    fc:1c:36:b8:f3:61:4f:73:20:df:cd:60:77:9f:ac:
                    cf:34:c2:b9:f1:d8:e5:74:43:a3:18:87:da:5e:a0:
                    db:3a:95:93:a7:72:61:6b:25:d3:47:0a:b9:e8:ea:
                    d3:2c:74:59:a1:33:bb:98:91:71:55:e8:68:5d:0f:
                    95:c4:08:93:01:35:68:c3:dd:bf:25:02:b7:2d:65:
                    d0:fe:e4:1e:50:b3:72:90:26:28:d9:22:62:fb:a4:
                    27:fe:a1:df:82:16:b4:f3:57:3a:97:11:fd:23:f7:
                    9c:02:04:cf:92:48:e5:0e:3b:f6:79:b9:13:13:35:
                    44:37:d4:92:a3:76:31:52:ad:bc:67:5d:29:14:17:
                    e6:10:79:ac:2c:6e:40:9c:b9:29:8b:5c:f5:de:8c:
                    10:3f:33:1e:50:95:80:9c:ed:6c:cc:ee:bf:b0:39:
                    fb:dc:1f:b3:8f:13:11:69:ad:86:82:08:67:ce:7e:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:43:AB:B2:4E:48:0C:4D:69:AD:F4:75:39:4B:20:68:19:AC:74:00
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3139312e3234332e3134342e302f32302d3234203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:2e:0e:a7:2f:fa:fa:76:20:38:54:70:1d:6a:5e:59:26:
         36:a1:da:0b:a6:1e:74:39:42:47:54:eb:75:1a:b8:39:52:82:
         55:3c:12:b7:db:3b:37:da:de:fc:2d:66:3f:b4:17:a4:af:e2:
         92:7d:29:c8:4d:eb:ab:52:44:3e:46:4f:58:dd:c9:3d:8e:63:
         70:47:1d:bb:cb:5c:45:15:b4:27:7b:cf:64:3a:f8:fc:37:fc:
         39:24:db:c8:53:15:41:46:30:8b:cc:a4:1f:9a:61:6f:ac:0c:
         d7:15:bf:2c:d9:ac:d9:04:6f:48:b4:66:56:94:61:40:00:f7:
         9a:31:ab:38:a4:a7:7d:0e:57:97:c3:50:83:fc:74:16:f0:80:
         b0:55:cf:cd:60:d1:e5:40:64:e9:ca:40:c0:cc:6f:44:8a:51:
         f7:46:ab:0a:fe:91:cc:13:fd:da:d5:9a:fe:58:ba:ee:d5:15:
         35:88:09:9f:13:25:b2:02:1d:73:1f:53:43:ec:16:1c:73:a2:
         7a:7e:79:e9:36:fd:cf:f1:d6:5e:7a:8a:9a:3b:d2:b8:6b:3c:
         06:ca:ed:3f:97:83:c4:75:f3:e5:ab:04:30:2d:04:09:25:6b:
         19:16:ec:6a:93:70:15:25:37:6f:8e:61:1b:96:0f:b1:a4:89:
         85:26:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:33 2026 by rpki-client