Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37362e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          9i4dd49d0W+ZtJORU2YnFFff3Tvhu6EM+YU/XkAgkgU=
Subject key identifier:   F6:D7:8C:5D:6E:87:3F:BB:1F:53:EC:8A:C6:9C:7D:EF:D7:A5:93:E5
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       4D8E0B2FBC68501F9FA6C7DC7802A4CE08BB4174
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa
Signing time:             Mon 10 Aug 2026 22:07:50 +0000
ROA not before:           Mon 10 Aug 2026 22:02:50 +0000
ROA not after:            Mon 09 Aug 2027 22:07:50 +0000
asID:                     270359
IP address blocks:        190.89.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 22:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:0b:2f:bc:68:50:1f:9f:a6:c7:dc:78:02:a4:ce:08:bb:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Aug 10 22:02:50 2026 GMT
            Not After : Aug  9 22:07:50 2027 GMT
        Subject: CN=F6D78C5D6E873FBB1F53EC8AC69C7DEFD7A593E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:df:3d:e5:ae:5a:30:60:7f:10:7b:2e:cf:
                    5a:16:06:05:6d:0b:06:b6:e1:0e:f6:5e:66:6b:25:
                    1c:38:aa:5b:56:d6:b9:2b:36:6d:d2:a0:c7:51:6b:
                    cf:95:a2:76:c0:b2:b5:23:af:cb:b2:95:47:63:c1:
                    7f:0e:76:94:df:ec:38:ae:d5:40:1b:8b:27:0f:a3:
                    e7:6c:d8:23:a0:14:85:7c:32:a9:22:5f:cd:7e:41:
                    c7:f0:51:9b:bf:e2:9f:6b:19:c0:24:78:28:81:30:
                    ae:53:ac:12:bb:67:d3:ec:6e:9d:e0:31:32:70:5f:
                    76:d2:33:0c:26:e4:2f:6c:bd:d7:97:56:00:5e:e0:
                    1e:3f:9d:ea:6a:00:91:94:dc:8b:07:1d:5d:6c:4b:
                    c9:3f:81:c2:6f:67:9c:f1:f5:ed:fa:92:0e:2e:91:
                    7f:02:47:12:a9:3f:ac:1d:55:d8:69:cf:6e:ce:2a:
                    17:1a:a7:00:d2:91:8e:53:77:6e:74:23:8b:25:92:
                    86:98:2e:84:be:98:db:15:5e:c1:ea:d7:d4:a2:f1:
                    d4:25:6e:87:a1:2d:18:d4:b5:b3:f4:4b:cc:6a:e3:
                    0a:7a:39:2c:41:13:42:88:5f:c3:8e:0e:bc:7d:98:
                    e0:1a:cf:87:1a:e6:ff:c2:2e:fa:73:50:7c:b4:31:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D7:8C:5D:6E:87:3F:BB:1F:53:EC:8A:C6:9C:7D:EF:D7:A5:93:E5
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37362e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:b6:b8:d0:d5:13:2b:32:ed:7e:db:69:1c:1a:59:13:d1:82:
         79:ad:35:5f:23:49:a2:c8:e3:cb:f5:5b:53:6f:38:2a:6a:da:
         07:d6:5c:37:d6:fa:f2:8d:0f:8c:e4:7f:f7:d9:3d:fb:95:54:
         8c:17:74:a6:a1:9b:de:c2:37:4f:b6:fc:63:f1:01:47:0a:4f:
         3f:b9:82:05:e3:f4:28:c9:21:21:60:83:7c:9b:5a:69:26:fe:
         bf:8a:d5:20:c8:5d:78:78:4a:ea:f9:33:5a:a7:51:72:3b:98:
         08:25:89:2c:97:00:d4:8b:f9:de:70:42:13:54:82:ed:e9:63:
         22:35:5f:af:23:40:f9:27:27:3e:39:fc:d3:1d:14:77:72:87:
         6e:0b:fa:b5:e9:b4:6f:00:43:fa:83:35:08:44:cd:71:ef:e9:
         87:12:5e:8f:ce:71:37:3a:cb:66:b4:01:61:0e:b5:de:d2:ce:
         41:ff:bc:ec:4b:4a:79:b7:cd:a6:34:20:21:21:0a:7f:b6:67:
         6a:f3:45:73:3d:9b:32:6e:ea:f5:d1:fd:6f:e5:03:51:0b:09:
         95:d5:4f:75:c7:20:39:84:76:46:c4:ea:c6:6a:b1:5d:79:59:
         1f:a9:66:c3:a8:0c:02:4c:07:81:26:c6:e1:c6:98:7f:35:9f:
         7c:91:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:48:06 2026 by rpki-client