Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34392e302f32342d3234203d3e20323633333131.roa
File:                     3139312e372e34392e302f32342d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          Cjm2u0/4CtE7LnpLEANdvvE/rqmisQvVUCxOHadvbEs=
Subject key identifier:   37:90:7D:4B:44:EB:72:C1:94:05:64:B6:88:8D:75:D9:F8:26:CE:A6
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       329CAC3AFE24DE92EC2885397891DB1177BAE7D1
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34392e302f32342d3234203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:03:01 +0000
ROA not before:           Tue 23 Jun 2026 14:58:01 +0000
ROA not after:            Tue 22 Jun 2027 15:03:01 +0000
asID:                     263311
IP address blocks:        191.7.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9c:ac:3a:fe:24:de:92:ec:28:85:39:78:91:db:11:77:ba:e7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:58:01 2026 GMT
            Not After : Jun 22 15:03:01 2027 GMT
        Subject: CN=3082010A0282010100E83320B4AE9A7DFA8AF25B7155C2BBFFBA5516FF821BC5DB90CAFD35B37C14D471C9926D159E9FBAB9E31192A13E27F4ADC1EFB4B58B9C8488443F127BED11AD7C32B2D58B2C89AEBF3D55C9020EA3A469271152EA4F37BEE4ED55473610A45737B110037D85B166B9014AB333CE147D488E8139348B867A7D813FDDBDD9863E94DD5119F2199CDA5DD66CA749D568DA932CFCFD2636C41CFC47EE1CA7EC6D6F46AB1F7CACEF4ECAE05DABD12C6853F8C80E9802B9BAD17296D36D86F6673E9956823956FD0FCE920972E2E77511B81994A7F2126104A6F0ACDEAAB134E7FA8AED1A2E0B81B9D4672C7C49D747EB9DC7ED18B348143CF6A88032FE959FC197590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:20:b4:ae:9a:7d:fa:8a:f2:5b:71:55:c2:
                    bb:ff:ba:55:16:ff:82:1b:c5:db:90:ca:fd:35:b3:
                    7c:14:d4:71:c9:92:6d:15:9e:9f:ba:b9:e3:11:92:
                    a1:3e:27:f4:ad:c1:ef:b4:b5:8b:9c:84:88:44:3f:
                    12:7b:ed:11:ad:7c:32:b2:d5:8b:2c:89:ae:bf:3d:
                    55:c9:02:0e:a3:a4:69:27:11:52:ea:4f:37:be:e4:
                    ed:55:47:36:10:a4:57:37:b1:10:03:7d:85:b1:66:
                    b9:01:4a:b3:33:ce:14:7d:48:8e:81:39:34:8b:86:
                    7a:7d:81:3f:dd:bd:d9:86:3e:94:dd:51:19:f2:19:
                    9c:da:5d:d6:6c:a7:49:d5:68:da:93:2c:fc:fd:26:
                    36:c4:1c:fc:47:ee:1c:a7:ec:6d:6f:46:ab:1f:7c:
                    ac:ef:4e:ca:e0:5d:ab:d1:2c:68:53:f8:c8:0e:98:
                    02:b9:ba:d1:72:96:d3:6d:86:f6:67:3e:99:56:82:
                    39:56:fd:0f:ce:92:09:72:e2:e7:75:11:b8:19:94:
                    a7:f2:12:61:04:a6:f0:ac:de:aa:b1:34:e7:fa:8a:
                    ed:1a:2e:0b:81:b9:d4:67:2c:7c:49:d7:47:eb:9d:
                    c7:ed:18:b3:48:14:3c:f6:a8:80:32:fe:95:9f:c1:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:7D:4B:44:EB:72:C1:94:05:64:B6:88:8D:75:D9:F8:26:CE:A6
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e34392e302f32342d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:3b:e8:e1:1c:fd:ee:9e:67:1d:4e:6d:61:43:80:0a:07:
         16:84:7a:65:a1:cb:21:23:2c:99:7e:a2:e6:73:e7:98:78:f2:
         ca:63:d0:56:43:07:b3:ad:68:27:16:02:1d:da:39:27:4f:22:
         b2:a0:cd:16:08:ef:ab:8f:b0:9f:39:11:c9:bb:5b:ec:43:3c:
         d0:6e:5a:c1:f3:dd:6a:44:b2:87:e0:89:6e:d3:c7:f7:f9:56:
         af:c8:28:fb:2d:ab:10:82:3e:63:5d:3f:a1:9d:89:67:72:c4:
         af:da:dc:83:5d:bc:26:34:49:92:fc:85:80:40:56:a5:58:7a:
         d4:52:dd:22:7e:db:fb:12:31:cb:2f:d2:02:55:94:b8:b5:45:
         20:ea:fe:27:22:0b:66:65:38:0c:b9:0a:3a:e9:8b:2e:2c:d4:
         a4:68:de:6a:57:b0:7b:6c:aa:b6:c1:f5:a7:a1:70:71:14:b9:
         32:5b:10:22:52:2a:60:22:56:d7:15:23:ec:68:94:d1:15:f1:
         69:2d:4a:54:32:6f:30:21:e7:73:db:f1:fc:96:66:c3:c2:cb:
         4f:b6:d9:5d:b0:49:37:46:34:bf:86:9b:bc:ec:82:bd:c9:c0:
         22:2a:34:d0:42:79:f0:e7:8f:ec:c1:e6:23:72:06:97:d4:21:
         d5:f1:7e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:42 2026 by rpki-client