Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
File:                     3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa (raw, json)
Hash identifier:          tSNoIQcRlinSSm+wZPAszl9mqmKw5fzwi9M89LB+r1I=
Subject key identifier:   24:9A:A3:52:53:77:DD:1A:33:F6:EC:E6:AF:68:CA:69:1C:A2:A3:61
Certificate issuer:       /CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
Certificate serial:       79771160CD5BB72698B97500BB3BADA5E4B7D384
Authority key identifier: E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa
Signing time:             Thu 20 Aug 2026 13:10:19 +0000
ROA not before:           Thu 20 Aug 2026 13:05:19 +0000
ROA not after:            Thu 19 Aug 2027 13:10:19 +0000
asID:                     262901
IP address blocks:        191.240.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl
                          rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:77:11:60:cd:5b:b7:26:98:b9:75:00:bb:3b:ad:a5:e4:b7:d3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E792BDE63D5999B942575841C2AF8D944B3B4BE2
        Validity
            Not Before: Aug 20 13:05:19 2026 GMT
            Not After : Aug 19 13:10:19 2027 GMT
        Subject: CN=249AA3525377DD1A33F6ECE6AF68CA691CA2A361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:f1:8d:48:44:8b:ed:32:e2:f0:54:63:c1:
                    14:7d:3a:8c:14:28:83:40:8d:d7:11:ad:37:34:a7:
                    0a:a5:ba:76:53:b4:16:c5:17:a9:47:92:59:64:7c:
                    86:84:72:ff:cc:73:20:aa:cd:fc:9d:90:86:13:49:
                    0c:24:ea:5f:ba:dc:ee:6d:7c:af:9a:01:e7:66:2a:
                    31:59:b3:24:44:1d:5b:8f:15:08:3c:08:e8:5a:16:
                    39:20:50:cd:aa:bc:30:ba:08:64:38:ce:c7:96:87:
                    08:cf:d8:cf:c8:13:fd:ee:18:c3:3c:4f:ba:73:2d:
                    9d:ee:14:d1:34:00:2e:ff:e4:0e:ca:36:0e:21:75:
                    6f:e0:8f:aa:6b:f7:d7:21:61:23:e9:27:cf:1b:03:
                    53:61:03:02:82:12:e9:65:6a:4d:f2:d3:66:b3:81:
                    ad:ba:5c:6c:5d:fd:3f:ce:34:ee:ce:f7:f9:9c:21:
                    9a:50:e6:55:24:37:b7:1f:0c:47:db:09:c2:37:55:
                    3a:2f:35:4c:cc:94:e1:e4:47:b0:f1:a9:a3:a8:cf:
                    5b:a9:c2:08:ba:0e:1b:32:35:95:32:ea:c4:a8:7f:
                    a9:12:a6:19:59:e5:d0:88:9f:d9:ec:ab:04:eb:08:
                    bf:ae:e5:98:2b:87:f9:5b:48:d1:04:db:42:ee:28:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9A:A3:52:53:77:DD:1A:33:F6:EC:E6:AF:68:CA:69:1C:A2:A3:61
            X509v3 Authority Key Identifier:
                keyid:E7:92:BD:E6:3D:59:99:B9:42:57:58:41:C2:AF:8D:94:4B:3B:4B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/E792BDE63D5999B942575841C2AF8D944B3B4BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E792BDE63D5999B942575841C2AF8D944B3B4BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/3139312e3234302e3137362e302f32302d3332203d3e20323632393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.240.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:bb:24:63:2a:7c:aa:6e:40:86:eb:dd:f0:a4:57:8b:17:
         46:45:43:41:64:76:77:7c:ec:a9:87:04:25:20:8e:38:61:f1:
         f0:7c:a0:19:e0:d1:bf:16:3b:55:62:23:e7:94:bb:6d:50:35:
         17:92:ac:d3:d0:f6:70:ca:5a:29:57:56:50:00:63:50:b7:41:
         93:b6:10:e5:88:1b:89:00:04:34:30:8a:85:65:d2:92:c9:10:
         68:c2:a5:a7:be:a1:29:16:49:89:da:f6:63:08:0c:e3:52:01:
         df:1f:f7:c3:10:e7:17:95:05:33:ac:d5:18:d2:97:03:84:87:
         c0:fc:fb:cf:9c:fa:81:2c:fd:7f:06:55:4f:ca:ba:d3:bb:06:
         5a:3c:3d:a6:60:29:7d:e6:f8:8b:fc:bc:d6:83:87:61:ad:61:
         05:27:db:a5:20:53:bd:82:80:a7:2d:67:08:6e:00:fc:02:02:
         1a:83:f8:a3:81:41:ad:44:cf:cc:66:78:4b:92:52:62:b5:7f:
         88:09:1b:9b:03:e0:12:03:21:6f:f5:18:13:7e:42:08:ea:84:
         a0:f1:d8:ad:79:1e:88:fd:07:a7:29:f0:c3:58:cb:2d:1c:39:
         7f:61:c4:02:ed:ff:b2:45:17:c2:d3:27:64:63:92:84:cd:be:
         3b:ce:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:46:45 2026 by rpki-client