Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37382e302f32342d3234203d3e20323730333539.roa
File:                     3139302e38392e37382e302f32342d3234203d3e20323730333539.roa (raw, json)
Hash identifier:          m1nxOpPqsQqimhKOmkMp6cEXHc3mS9isox5C8xI12Yw=
Subject key identifier:   71:36:A8:7B:4A:38:8C:51:FC:21:0E:3C:1F:55:D8:B1:6F:2B:AB:D5
Certificate issuer:       /CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
Certificate serial:       20DAF92B739DADCD050F08E9EAE16673A837EDEF
Authority key identifier: 16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37382e302f32342d3234203d3e20323730333539.roa
Signing time:             Mon 10 Aug 2026 22:07:50 +0000
ROA not before:           Mon 10 Aug 2026 22:02:50 +0000
ROA not after:            Mon 09 Aug 2027 22:07:50 +0000
asID:                     270359
IP address blocks:        190.89.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl
                          rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 22:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:da:f9:2b:73:9d:ad:cd:05:0f:08:e9:ea:e1:66:73:a8:37:ed:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Validity
            Not Before: Aug 10 22:02:50 2026 GMT
            Not After : Aug  9 22:07:50 2027 GMT
        Subject: CN=7136A87B4A388C51FC210E3C1F55D8B16F2BABD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:c9:6c:57:92:ce:3e:e1:ec:7a:15:a8:09:
                    91:66:c0:4d:9f:a3:99:80:6b:36:8a:01:44:3c:81:
                    6d:97:6a:2a:ab:1c:f6:10:c6:0a:53:f3:2d:d0:d8:
                    e5:13:be:bf:82:b7:0e:27:6a:b6:5d:2f:92:0b:47:
                    5d:b9:a9:5c:da:23:07:7c:f4:f1:bc:68:77:00:aa:
                    b1:36:05:5c:63:ed:94:be:77:74:c6:27:2c:71:3f:
                    e2:f3:d1:0a:3a:72:34:c9:3a:86:e3:c8:22:2b:24:
                    79:da:16:8c:a5:8d:59:5c:41:f6:96:c4:2f:6e:37:
                    d8:bf:d9:67:f6:16:6d:0f:ac:04:cd:9b:9f:5f:1d:
                    d3:4b:6b:c1:a0:99:bc:9b:b1:48:9c:4a:7e:5a:df:
                    7c:40:ec:ad:b1:38:7c:e3:78:07:49:a1:be:e7:42:
                    3e:a8:9f:db:72:4d:e8:3e:fd:fd:58:4d:b3:19:f5:
                    45:ac:3e:2e:22:1e:46:22:9a:94:75:5c:cc:d1:25:
                    e2:0d:04:0c:5a:98:75:97:bb:9a:da:25:fb:69:f1:
                    b4:e3:ad:4e:5e:84:f3:79:1c:23:58:26:23:0d:58:
                    0a:b1:ac:b5:41:09:d9:64:e3:4e:d7:bb:2f:e8:b9:
                    f8:4b:f5:43:72:42:cf:38:bd:6c:6e:4f:76:00:75:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:36:A8:7B:4A:38:8C:51:FC:21:0E:3C:1F:55:D8:B1:6F:2B:AB:D5
            X509v3 Authority Key Identifier:
                keyid:16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/3139302e38392e37382e302f32342d3234203d3e20323730333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2e:c4:be:7b:04:5c:84:63:76:67:8d:fe:2a:27:d0:82:01:
         f4:ce:d8:ab:e3:67:db:06:3a:65:8a:d7:fa:af:cf:c3:85:69:
         7e:47:6c:60:42:43:d7:54:1b:23:f0:82:4b:1f:21:5f:6e:5d:
         e8:aa:8a:ff:49:b4:ce:c2:03:1f:09:8a:47:de:89:78:0c:b9:
         9a:da:30:ff:32:88:69:f1:df:88:9c:16:7b:6e:e0:f2:7c:6d:
         79:c4:ee:63:ee:61:d0:83:e0:a2:53:b0:f0:67:2c:ba:ac:be:
         34:50:d5:44:d8:3a:24:d7:eb:ec:84:99:13:88:3e:3e:b4:80:
         ec:38:d5:6d:54:cc:1f:6f:59:8c:70:85:51:5d:97:fa:a4:a5:
         e1:44:36:48:fe:1f:df:ac:96:be:26:72:d4:d3:56:a2:62:4f:
         d7:7c:c9:61:12:74:34:ca:33:30:31:79:2b:00:e3:01:00:58:
         5e:67:0b:04:62:34:ac:e4:4d:fd:56:7f:c8:99:3e:83:de:d5:
         24:11:9c:35:ca:26:52:2f:50:17:27:15:22:f2:17:ec:41:2c:
         69:8c:15:ed:cf:13:c9:16:b2:ea:d8:85:20:35:1c:5b:e3:98:
         09:bf:84:fd:89:8c:c8:0d:63:ae:bc:8e:13:a4:f3:84:8c:54:
         90:7d:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:05:42 2026 by rpki-client