Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37372e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          5LNV7K5rL22C4Qn6TC3w2sHeyhzI7QVJfZAIIM7oG0g=
Subject key identifier:   E6:1D:83:EE:E8:F2:6C:F9:BF:52:C1:D5:65:7D:9E:84:22:7D:D0:9D
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       4729993313A8A0135329D7D46274B0C679C938D4
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa
Signing time:             Mon 10 Aug 2026 22:07:50 +0000
ROA not before:           Mon 10 Aug 2026 22:02:50 +0000
ROA not after:            Mon 09 Aug 2027 22:07:50 +0000
asID:                     270359
IP address blocks:        190.89.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 22:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:29:99:33:13:a8:a0:13:53:29:d7:d4:62:74:b0:c6:79:c9:38:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Aug 10 22:02:50 2026 GMT
            Not After : Aug  9 22:07:50 2027 GMT
        Subject: CN=E61D83EEE8F26CF9BF52C1D5657D9E84227DD09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:5c:3f:2d:1e:bf:15:03:b9:aa:d8:f4:ae:
                    e5:ee:62:3f:9e:10:94:e2:d4:11:4b:2d:49:b6:6f:
                    04:22:a5:32:8a:b2:bd:82:ac:62:9e:03:22:89:ef:
                    92:c0:59:6f:4c:bf:c3:cb:13:f5:41:b3:9e:c7:05:
                    f8:35:c4:99:e9:01:5e:f2:6c:d0:63:b3:62:30:41:
                    ea:39:2c:96:4d:4d:22:9a:2a:92:72:40:eb:5d:3a:
                    7c:dd:49:0a:e3:4f:3f:47:56:7d:45:3e:af:7f:1f:
                    98:e8:67:a8:84:89:e2:79:c2:e2:94:5a:63:10:3c:
                    36:87:3d:2b:5d:ec:5d:9f:19:e2:bb:59:c9:b7:1e:
                    5d:a6:b9:0d:18:91:cb:0a:43:be:86:08:1f:a7:24:
                    75:96:44:46:b2:06:34:e5:51:28:06:7c:c0:ed:72:
                    19:1d:26:e7:f3:fe:23:09:4e:35:d7:25:89:19:11:
                    69:04:43:07:c9:b3:39:b0:69:f1:ca:e0:72:5d:1f:
                    9b:ae:a7:76:30:0b:c9:7a:49:ed:32:95:14:c1:f2:
                    52:de:4f:58:d4:90:d4:21:ef:9a:9c:b2:39:c1:b1:
                    3a:d1:1b:20:00:7c:a3:cb:0b:2d:2d:38:20:ee:eb:
                    f6:26:25:ce:b3:d4:7a:b8:f7:35:48:85:b8:98:c8:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1D:83:EE:E8:F2:6C:F9:BF:52:C1:D5:65:7D:9E:84:22:7D:D0:9D
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37372e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:a8:c2:a1:f0:78:c4:1f:c0:50:32:0c:72:69:66:56:5d:
         8c:70:1c:3e:f1:35:5d:6b:14:4c:c6:52:26:20:e5:61:f3:78:
         43:fa:e6:32:b5:9a:4c:83:f0:20:7b:b7:cc:53:4b:7b:00:db:
         51:3c:1f:07:16:a2:d9:e0:b1:5c:ee:fa:82:dc:b9:1e:00:36:
         ef:c5:64:3d:7e:b3:9d:ac:be:29:1a:e3:37:56:53:d4:d1:42:
         c4:9b:85:cd:32:84:0d:ba:a2:60:97:54:db:f4:0e:d4:f7:f2:
         ca:44:84:4c:92:ff:51:be:20:ee:31:ca:bf:a2:33:03:0b:bc:
         d7:3d:69:f7:6a:59:78:2b:ae:59:ec:ae:03:26:80:db:33:85:
         30:d9:5c:7d:9f:67:18:b1:5c:13:32:fb:12:3a:38:a6:d4:48:
         91:df:6a:f8:09:86:54:8f:31:c0:26:8f:f7:de:04:41:68:ed:
         be:89:04:fb:4a:d9:cb:a1:d2:6c:48:55:dc:de:8d:70:36:e6:
         40:37:c4:25:29:71:86:fb:f1:28:03:2e:2a:67:e1:48:2c:eb:
         4d:f2:13:89:99:c5:72:58:e6:a8:cd:71:ae:f8:10:0d:80:de:
         38:58:8f:dd:d2:12:7f:b4:83:0d:cd:d3:52:0d:59:77:7a:10:
         c8:05:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 06:13:07 2026 by rpki-client