Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32342d3234203d3e20323633333131.roa
File:                     3139312e372e34382e302f32342d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          HJ6WEgIjeDCt9V8ksQglKVdrEsfT0bRjHpjVYN8ntno=
Subject key identifier:   AC:38:2C:33:7C:90:73:F2:EE:F9:06:83:70:DD:A8:27:1B:7C:69:54
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       62E2FB014BE6578E37C87EB25120BB63BF1BA483
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32342d3234203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:02:52 +0000
ROA not before:           Tue 23 Jun 2026 14:57:52 +0000
ROA not after:            Tue 22 Jun 2027 15:02:52 +0000
asID:                     263311
IP address blocks:        191.7.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:fb:01:4b:e6:57:8e:37:c8:7e:b2:51:20:bb:63:bf:1b:a4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:57:52 2026 GMT
            Not After : Jun 22 15:02:52 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1d:4e:a3:fc:8d:5f:fa:f2:aa:98:47:b0:24:
                    42:3f:d6:0f:11:60:12:40:bb:36:61:02:3e:3a:a7:
                    72:7a:9e:45:71:b0:1f:7f:b7:ca:88:98:19:67:57:
                    99:5d:d3:f0:81:4a:5b:60:5c:02:ef:f3:6c:d6:7b:
                    6c:b8:34:22:0e:83:18:6f:6f:e7:90:3b:b8:31:9d:
                    16:83:c7:b2:80:14:21:2b:6f:39:85:9b:bd:3f:b6:
                    dc:4b:d2:8b:78:d1:a7:30:25:2c:1e:c8:0c:b3:52:
                    28:c5:16:95:99:65:72:05:15:28:52:db:a3:b1:6d:
                    1b:95:64:88:e3:27:cf:8b:bb:fc:53:d5:25:52:58:
                    36:b9:de:76:e6:f5:ba:16:cc:30:49:1a:a9:44:e3:
                    36:19:7e:b3:ab:e4:56:29:e4:85:68:54:0f:87:02:
                    de:ee:5e:54:ae:9c:51:c3:4a:08:9d:ca:75:0a:78:
                    93:40:b9:b1:e3:49:80:fe:72:24:1a:ab:79:45:9b:
                    a1:97:fc:f7:bc:3a:90:68:c6:b6:50:17:0a:bf:2e:
                    ab:d9:7a:aa:de:e6:72:74:ff:4e:ea:f1:e4:cc:88:
                    4b:7f:73:7e:65:22:b8:1f:f5:e9:cd:c7:1d:17:97:
                    d1:66:96:86:a6:67:76:ce:e9:a3:21:e1:ee:68:04:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:2C:33:7C:90:73:F2:EE:F9:06:83:70:DD:A8:27:1B:7C:69:54
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34382e302f32342d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:b4:13:65:a4:07:6a:ca:81:49:86:b7:fd:b3:a9:67:1e:
         0e:a1:d2:5a:b0:20:da:f4:83:57:cf:94:8f:96:0f:22:83:14:
         12:b0:4a:97:86:af:28:97:dc:cf:b3:ca:e0:d5:56:fa:5a:1f:
         65:b7:5f:ad:ae:5a:e5:b2:ee:81:2b:3c:b7:0e:af:86:f9:bb:
         34:74:5d:2a:24:d6:22:89:00:8d:ad:21:73:b0:a7:7d:77:7d:
         28:64:db:98:dc:b5:5a:d1:08:62:39:4d:6c:35:82:04:b4:e6:
         0c:c9:31:c8:f4:89:c2:9a:54:4d:fd:b7:ae:d9:4c:00:17:3f:
         7a:e8:55:f2:f9:7b:00:24:6a:62:97:28:7f:01:18:11:82:43:
         68:a9:fe:89:74:ab:6c:b4:68:a7:6e:55:bd:bc:eb:2b:ba:02:
         c8:fa:0f:51:58:7c:1b:11:88:84:65:59:d7:89:23:f0:db:dc:
         d3:71:31:27:11:f8:4e:ae:f9:a9:a4:d2:e4:80:eb:35:3b:93:
         85:e7:f6:9d:fe:42:6f:50:25:85:93:07:d0:1c:99:a0:01:96:
         fb:c0:74:b0:ed:14:77:af:99:73:a0:1b:9f:3d:f0:be:99:9d:
         ae:f4:ff:94:8f:b8:de:df:35:56:ea:30:f3:e3:09:ab:9c:83:
         b8:5a:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:45 2026 by rpki-client