Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa (raw, json)
Hash identifier:          MFyitCkU/7tppp4CnyQ0MArFm4Vrc+Bk4vQA5/XtoYk=
Subject key identifier:   0B:95:99:31:09:59:8D:60:3E:89:57:57:CA:3C:3A:31:A8:0E:FF:FC
Certificate issuer:       /CN=4177EB4445E439416051AB3B18D882B679B3BA71
Certificate serial:       5A6E98D2F476A81CE28EF524CEE3346AE7E08361
Authority key identifier: 41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa
Signing time:             Mon 03 Aug 2026 16:54:46 +0000
ROA not before:           Mon 03 Aug 2026 16:49:46 +0000
ROA not after:            Mon 02 Aug 2027 16:54:46 +0000
asID:                     263515
IP address blocks:        191.243.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6e:98:d2:f4:76:a8:1c:e2:8e:f5:24:ce:e3:34:6a:e7:e0:83:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4177EB4445E439416051AB3B18D882B679B3BA71
        Validity
            Not Before: Aug  3 16:49:46 2026 GMT
            Not After : Aug  2 16:54:46 2027 GMT
        Subject: CN=0B95993109598D603E895757CA3C3A31A80EFFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:17:66:da:e8:f0:73:6f:89:dc:e6:0d:88:
                    cd:f0:a4:ce:de:51:76:11:32:53:10:18:9a:42:0e:
                    a1:23:16:61:59:44:30:63:26:23:55:cc:5c:06:26:
                    8b:c3:de:9e:84:a5:b0:a9:75:b7:58:91:24:b8:30:
                    f1:82:c2:f3:8b:3a:e3:76:14:db:a5:79:7c:e3:c7:
                    c6:64:93:70:10:fc:8d:a8:00:b0:02:aa:3c:4f:8a:
                    f1:5d:da:8d:59:99:91:47:e9:47:b8:0e:dd:56:d5:
                    0a:38:fb:a7:e8:ca:5b:48:27:a5:ec:45:a8:f9:10:
                    61:51:70:f1:13:44:7f:7e:f8:ff:86:e6:60:64:3d:
                    70:9c:c1:d2:f6:34:bd:53:48:38:75:6a:40:e7:cf:
                    b2:4e:7f:c7:26:96:76:bd:55:5e:ef:a4:74:95:91:
                    f8:62:b8:e9:f3:0a:04:87:47:e2:64:83:77:2d:5d:
                    2d:18:d7:02:49:94:bc:3e:9a:9a:9f:22:fe:2d:ad:
                    1f:3a:61:12:8c:81:f7:1f:9f:ed:d3:52:08:10:60:
                    11:cb:ef:76:9e:cc:37:a7:00:68:ba:be:e1:0e:bb:
                    22:26:cd:ee:91:d7:30:4c:1d:98:af:25:02:a4:12:
                    ee:15:d3:88:ef:92:cd:11:9f:d6:a7:18:be:bb:04:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:99:31:09:59:8D:60:3E:89:57:57:CA:3C:3A:31:A8:0E:FF:FC
            X509v3 Authority Key Identifier:
                keyid:41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32312d3231203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:00:5c:b3:bc:89:71:a9:e0:c3:bf:f5:f2:8d:cb:76:86:ff:
         fa:80:d4:a4:86:82:3a:98:35:da:f4:85:01:db:2c:0d:63:47:
         c4:87:4a:ae:02:6b:79:23:cf:51:1d:33:82:25:d2:c5:0a:5a:
         fd:af:a5:21:b8:11:34:a2:2a:ee:b2:cc:a1:9a:50:24:69:e9:
         c5:28:2f:50:b4:34:62:42:70:79:e0:83:f0:85:cd:a2:20:fd:
         05:26:71:d7:3c:8e:e8:6a:73:b0:3a:2e:98:5f:e1:62:c9:2d:
         8e:2d:03:85:68:f0:83:53:a3:75:5b:22:ac:44:4d:9d:89:90:
         72:a1:e9:46:cd:46:0a:f9:7a:e5:c1:b8:6b:53:fb:07:78:69:
         0c:9c:90:a8:64:a9:c3:7d:3c:6b:38:d1:53:12:fc:c2:0d:80:
         b3:f0:61:bc:a2:81:b2:5e:58:25:c1:e8:0f:45:b2:33:e9:ee:
         ae:ab:a9:00:6e:c0:75:c7:22:bd:39:b9:af:19:d5:45:b4:03:
         c3:a0:b4:7f:85:e7:30:5d:ae:1a:fe:3d:96:b6:c2:85:7e:91:
         ce:b6:12:2d:6f:58:cc:5a:2f:8d:c3:48:fc:c7:7c:7f:fc:e3:
         9f:c5:f8:c7:14:1a:27:a3:cd:04:6d:10:1c:5e:77:86:8e:76:
         83:71:c7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:55:30 2026 by rpki-client