Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa
File:                     3139312e362e3134302e302f32322d3332203d3e20323633313430.roa (raw, json)
Hash identifier:          MP20LMo9f8eFxUl1b36Am5pintrsHRYaUyM85DRnYkc=
Subject key identifier:   AC:B4:D3:5D:05:27:7C:7F:4D:5F:D2:82:A1:36:6E:0D:3B:26:45:42
Certificate issuer:       /CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
Certificate serial:       38B852F3AD9D1AA39F555108DBB4DE0AB5881A87
Authority key identifier: 8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa
Signing time:             Wed 13 May 2026 18:00:33 +0000
ROA not before:           Wed 13 May 2026 17:55:33 +0000
ROA not after:            Wed 12 May 2027 18:00:33 +0000
asID:                     263140
IP address blocks:        191.6.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl
                          rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 01:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b8:52:f3:ad:9d:1a:a3:9f:55:51:08:db:b4:de:0a:b5:88:1a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F327FEFA4E8788FFCFDCD7C6D190640F8A62810
        Validity
            Not Before: May 13 17:55:33 2026 GMT
            Not After : May 12 18:00:33 2027 GMT
        Subject: CN=ACB4D35D05277C7F4D5FD282A1366E0D3B264542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:fd:c3:c7:09:6d:10:e3:b8:66:d2:6a:a3:
                    80:f5:5d:61:d8:b5:60:67:dc:18:06:c2:1f:fb:30:
                    93:1f:2a:64:47:77:77:d4:30:a1:1f:4e:5d:d3:2f:
                    f1:14:af:f8:d7:0d:e3:90:78:d2:97:e9:2d:72:48:
                    4b:4b:6c:55:77:6c:90:5d:8e:64:d2:c4:55:a7:6f:
                    3c:a2:53:7b:79:e4:7d:9a:91:c6:0c:d9:68:71:7d:
                    90:88:15:65:dc:44:68:15:04:7c:2b:9e:a4:c3:b0:
                    ed:f7:4c:cf:dd:42:48:2c:69:b0:f1:81:3d:c2:b9:
                    69:fb:df:f0:c3:23:eb:44:9e:bc:6f:41:38:d4:46:
                    6d:8a:ad:90:1c:41:b4:37:4f:68:75:c8:47:1c:a9:
                    26:7d:57:f4:4a:1e:2d:9f:87:40:40:80:cf:00:06:
                    a2:10:87:42:20:a3:96:8d:0b:59:32:3c:c7:fc:ee:
                    bc:fb:60:d4:4e:87:b6:cb:24:f7:91:e9:77:b8:ff:
                    20:29:52:dd:dc:6f:c8:6e:fd:a4:d9:fd:7f:77:b8:
                    7c:c7:fd:61:d0:fe:b5:22:e1:59:08:8a:1e:6e:e2:
                    bb:c2:bc:a6:0a:d9:a0:8b:e3:1b:05:fc:4a:25:ac:
                    7c:db:2a:b3:8c:4a:27:a1:b6:0a:2d:ae:91:fd:68:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:D3:5D:05:27:7C:7F:4D:5F:D2:82:A1:36:6E:0D:3B:26:45:42
            X509v3 Authority Key Identifier:
                keyid:8F:32:7F:EF:A4:E8:78:8F:FC:FD:CD:7C:6D:19:06:40:F8:A6:28:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F327FEFA4E8788FFCFDCD7C6D190640F8A62810.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/3139312e362e3134302e302f32322d3332203d3e20323633313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:8d:4f:60:ec:f2:dd:9c:c5:d5:c9:36:1f:24:b8:75:ea:
         fd:78:1d:6c:76:44:a7:25:33:4b:02:ea:0c:42:1c:88:c3:74:
         2d:32:42:e3:40:38:80:fc:68:a4:85:3a:7f:55:70:d4:42:62:
         af:af:2f:a1:b6:e4:fb:99:aa:b3:4a:ed:f5:94:b8:15:e8:da:
         3e:b9:9c:d7:79:77:b4:8c:73:19:eb:af:9e:40:aa:98:d0:57:
         59:04:85:4b:c5:2a:9b:26:8f:b4:5a:49:8c:89:c3:4c:39:44:
         ee:16:bc:d1:c1:81:5b:5c:8a:57:ad:6e:27:49:da:02:8b:b2:
         d3:ff:07:59:04:be:ff:bd:dc:6c:87:69:82:7c:6d:19:dd:65:
         f2:00:6f:c5:8e:01:23:ea:42:01:76:d5:6a:9f:15:2e:af:2e:
         6b:aa:57:c9:3b:f9:b7:df:e3:39:4f:4f:21:6f:bb:07:1e:b7:
         38:52:f1:cb:84:3f:11:40:52:91:8b:4e:5d:0a:4e:0f:58:c2:
         34:1e:92:0c:8b:0e:04:46:83:59:41:75:f9:a5:5a:ee:75:ab:
         49:17:31:61:d8:31:c7:75:f1:4f:81:a9:19:7e:af:cd:0f:6e:
         1c:90:9e:7d:c5:b9:00:89:a6:45:91:67:4c:30:c9:b7:90:6a:
         cd:e6:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:57:55 2026 by rpki-client