Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
File:                     3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa (raw, json)
Hash identifier:          WSlQCDZKrY0YdKEuNDrZKLW74jZxi1Ks6ca009jPx0w=
Subject key identifier:   A9:D4:13:02:23:CA:87:AF:4A:85:F2:1A:FF:10:4B:37:AB:A4:38:02
Certificate issuer:       /CN=4177EB4445E439416051AB3B18D882B679B3BA71
Certificate serial:       361F96DD24581F30690C5F3362AEAE51108593A1
Authority key identifier: 41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa
Signing time:             Mon 03 Aug 2026 16:54:46 +0000
ROA not before:           Mon 03 Aug 2026 16:49:46 +0000
ROA not after:            Mon 02 Aug 2027 16:54:46 +0000
asID:                     263515
IP address blocks:        191.243.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1f:96:dd:24:58:1f:30:69:0c:5f:33:62:ae:ae:51:10:85:93:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4177EB4445E439416051AB3B18D882B679B3BA71
        Validity
            Not Before: Aug  3 16:49:46 2026 GMT
            Not After : Aug  2 16:54:46 2027 GMT
        Subject: CN=A9D4130223CA87AF4A85F21AFF104B37ABA43802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:0f:40:1e:90:5a:0e:84:37:d2:43:64:fc:
                    a2:02:70:46:42:48:e5:3d:a6:9f:02:89:e0:9a:ec:
                    d1:ec:e9:b6:c3:4b:92:a1:65:04:5e:5c:f0:8b:3f:
                    d3:30:a9:76:98:e3:df:90:d9:f0:8c:6f:35:ba:60:
                    01:4d:85:b9:67:94:06:a6:4a:38:ba:82:12:fb:04:
                    5b:d0:32:c2:8b:ef:52:68:e5:6a:92:3a:13:76:7c:
                    f3:6b:66:b9:9f:3b:58:3c:53:bc:70:97:62:0e:44:
                    63:cf:29:9d:99:d1:b3:4a:c0:75:e7:39:2e:00:b4:
                    2d:69:b6:98:fc:d0:15:42:4e:ca:24:5d:b0:bf:7d:
                    9d:38:1e:ed:93:f3:ec:32:cc:c5:1b:c9:2a:c0:c5:
                    3c:44:5e:ee:8e:a3:75:ff:fe:0d:81:ba:fe:b6:b8:
                    31:7a:0d:c0:83:3c:a2:c9:39:9b:7e:0e:a9:f8:ea:
                    0d:20:ee:65:9a:3d:a5:82:42:c7:56:a0:c3:89:b2:
                    c4:42:b7:ca:c4:4c:42:34:aa:ee:3c:5a:c3:88:2e:
                    7e:30:15:c8:cf:c2:f6:29:1e:ce:94:2c:84:8a:94:
                    b4:1a:cb:fb:5c:25:6f:70:f4:b9:90:92:3b:f9:c6:
                    b1:be:01:4b:1c:63:c0:19:88:17:f3:50:41:2c:47:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:13:02:23:CA:87:AF:4A:85:F2:1A:FF:10:4B:37:AB:A4:38:02
            X509v3 Authority Key Identifier:
                keyid:41:77:EB:44:45:E4:39:41:60:51:AB:3B:18:D8:82:B6:79:B3:BA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/4177EB4445E439416051AB3B18D882B679B3BA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4177EB4445E439416051AB3B18D882B679B3BA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/3139312e3234332e3231362e302f32322d3232203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:d5:97:6f:88:5d:41:b7:dc:92:e3:fc:76:a1:01:aa:36:
         66:dd:a9:6f:51:1d:e6:d2:2b:91:00:a7:49:0a:59:47:15:3a:
         8b:1f:ed:99:03:e9:05:3f:d6:1c:3c:f7:bf:bf:be:9f:9d:e5:
         da:d0:af:de:6c:ae:f3:8d:af:a9:95:bb:84:14:71:90:d2:fd:
         f3:ec:37:3e:f7:bb:9b:18:c5:01:f7:64:82:f3:f9:39:68:fc:
         cd:c7:d2:55:b2:71:75:4b:3f:ee:38:56:07:36:22:00:ee:e4:
         97:7f:bb:91:2b:bf:ae:24:ef:3d:f1:b3:3d:19:fb:03:3c:e4:
         01:8c:e2:e2:8c:79:08:4c:a8:fa:00:8e:b6:c1:e8:8b:58:a0:
         bb:48:55:76:99:91:e8:ae:15:d5:4d:08:15:f9:f8:3c:47:73:
         79:77:cd:eb:16:f8:5f:6c:23:1e:ae:3e:3a:12:57:cf:94:22:
         52:5e:1a:2a:20:b3:3c:27:e3:a3:83:f1:50:f3:c9:f7:b9:aa:
         0c:e9:34:30:38:da:f6:50:9c:19:c5:a9:ea:dc:71:7a:1a:35:
         ee:31:06:3b:73:6b:5c:06:0d:17:00:12:34:81:45:9c:8b:c4:
         ee:a5:8f:c2:a2:1d:fe:9a:f8:d2:a8:cd:2a:58:67:cb:cb:11:
         8c:07:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 14:55:29 2026 by rpki-client