Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          9TgrADfrWqF/UbNBfaStV72WRsE8DmEOTrcHtfbFstc=
Subject key identifier:   9F:5D:01:F7:25:C0:8A:45:D0:B7:8D:32:39:F7:57:7B:83:CF:57:0F
Certificate issuer:       /CN=D3D5937E2258BC74B97D85F1F184E91DEEA83830
Certificate serial:       73EAB7171F31FA982E056D11D9B0390CF501E719
Authority key identifier: D3:D5:93:7E:22:58:BC:74:B9:7D:85:F1:F1:84:E9:1D:EE:A8:38:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
Signing time:             Thu 14 May 2026 17:40:19 +0000
ROA not before:           Thu 14 May 2026 17:35:19 +0000
ROA not after:            Thu 13 May 2027 17:40:19 +0000
asID:                     271326
IP address blocks:        190.123.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.crl
                          rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ea:b7:17:1f:31:fa:98:2e:05:6d:11:d9:b0:39:0c:f5:01:e7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D5937E2258BC74B97D85F1F184E91DEEA83830
        Validity
            Not Before: May 14 17:35:19 2026 GMT
            Not After : May 13 17:40:19 2027 GMT
        Subject: CN=9F5D01F725C08A45D0B78D3239F7577B83CF570F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:75:67:43:cd:0d:59:2e:98:aa:84:ec:bf:
                    b0:e2:a5:21:bd:59:38:78:5b:fa:8e:3c:21:fc:33:
                    df:c9:cf:bb:1f:35:95:45:ab:17:63:94:ec:f1:24:
                    b1:ca:d3:68:7d:b8:25:a0:1b:8d:3e:5f:b9:be:05:
                    44:20:e7:99:bf:3e:9c:54:28:88:17:25:8c:39:17:
                    95:01:6d:db:5c:08:97:db:0e:65:67:33:08:71:2d:
                    76:90:ed:82:e0:5b:9f:3b:53:c6:1d:02:6d:fd:57:
                    c3:98:12:93:c5:93:6f:ac:6a:1b:09:46:2e:cf:76:
                    78:31:1f:df:36:b7:22:ef:71:02:7a:49:57:df:97:
                    a7:08:3c:59:6e:6d:12:b0:95:fe:b0:ba:25:a3:6d:
                    b5:19:11:62:2b:6d:df:77:18:c5:bb:31:a4:cf:95:
                    ab:54:4c:c8:96:72:c5:86:b1:f0:e4:02:44:b6:26:
                    09:d8:e9:0d:d1:63:64:8f:f7:14:7b:5a:c6:a5:9c:
                    d3:c6:9b:7c:ba:6d:5c:ae:ca:0b:f9:02:2a:3f:6d:
                    9a:3b:6b:af:bf:98:9d:5d:67:bd:e5:60:e4:1b:60:
                    82:59:44:a7:f7:e0:8a:62:ad:3f:86:c0:5f:72:e1:
                    5f:c8:53:2d:1d:b6:31:6e:d4:25:2f:01:73:29:88:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5D:01:F7:25:C0:8A:45:D0:B7:8D:32:39:F7:57:7B:83:CF:57:0F
            X509v3 Authority Key Identifier:
                keyid:D3:D5:93:7E:22:58:BC:74:B9:7D:85:F1:F1:84:E9:1D:EE:A8:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/D3D5937E2258BC74B97D85F1F184E91DEEA83830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D5937E2258BC74B97D85F1F184E91DEEA83830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:ba:84:36:bc:21:4d:c5:61:4b:21:21:3a:0f:fe:e7:e8:
         71:7b:11:0d:10:33:2f:b0:ac:1e:b9:9f:ab:b2:f3:1e:2a:a0:
         a1:56:46:f9:ca:04:fb:88:74:79:d0:56:7b:76:95:41:89:5c:
         90:6f:51:b6:c7:15:58:b3:c3:2a:44:94:9d:66:86:05:b8:ed:
         88:44:20:a8:a4:ac:7f:7f:60:39:2a:4e:65:a5:98:0d:05:43:
         49:a5:c9:e2:a9:d3:e8:8b:0c:4e:9c:b1:aa:56:a6:01:28:55:
         39:ae:4f:5b:75:7f:09:34:15:be:b5:f4:c9:78:fa:1b:b1:73:
         cf:32:24:1d:d0:45:83:e5:b6:bc:38:a4:76:f6:af:35:89:9c:
         79:30:bc:bc:0b:51:5e:d3:26:aa:31:02:92:80:0b:87:eb:19:
         60:14:68:0e:79:0c:86:b9:6d:96:6a:12:9c:40:fa:1c:69:d9:
         1c:2f:b3:29:08:00:b6:4c:06:42:86:d6:42:92:88:99:a1:bb:
         4f:ee:d5:c0:aa:8b:a2:62:8c:1f:c9:11:ea:bc:de:e0:89:c5:
         25:6e:d8:28:0f:5d:8c:d9:52:a0:7d:ce:47:24:16:1e:12:8d:
         bb:52:a8:d6:b3:bf:bb:f3:8a:4c:cd:a8:af:38:00:e0:51:fd:
         95:da:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:28 2026 by rpki-client