Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32332d3233203d3e20323633333131.roa
File:                     3139312e372e35302e302f32332d3233203d3e20323633333131.roa (raw, json)
Hash identifier:          AgLoEMY1q3Ja8XhGcmD9TJF0h2w7DLpu0ELJzBwUql4=
Subject key identifier:   1F:EC:61:65:9A:33:12:EC:5D:6E:AD:6B:45:3B:F5:9B:FD:58:34:50
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       0A1BBF08A12EC5580D47CCEC322E2D5DCE97CE1C
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32332d3233203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:01:57 +0000
ROA not before:           Tue 23 Jun 2026 14:56:57 +0000
ROA not after:            Tue 22 Jun 2027 15:01:57 +0000
asID:                     263311
IP address blocks:        191.7.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1b:bf:08:a1:2e:c5:58:0d:47:cc:ec:32:2e:2d:5d:ce:97:ce:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:56:57 2026 GMT
            Not After : Jun 22 15:01:57 2027 GMT
        Subject: CN=3082010A0282010100A765D71B430EBF1248979305E561B719A432DC769F0F66D0130D418CB83A7F874BB0B251EB6D4D3A6649BB9CF44C417DBE4D9A9698BDC969E0ECEC37106239F20B457FF0A99BB1E7F55EBD62D76E26DF9233C40A49D40F0EC48CD7ADA77ABC27F4CF1090776588C8EBCD17AE48DDA74F69E3FA486BC8B737FDCEC32BBA3E487791BE566E431CEB00186C334D6273D17C0AD994B0007985447EA35F3DD49641BC2943F694B4F5DD74DCC98950F6AE5044A69D22AEBFDB69628315E1C46533A9D9A3FE977589387727D159BB47FEE34A6935694521F95BEFB7C8CA0596533D5A27EBC61942983AFD8029B62A7DCE0C8070D7888117B4CC267E439122731013863F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:d7:1b:43:0e:bf:12:48:97:93:05:e5:61:
                    b7:19:a4:32:dc:76:9f:0f:66:d0:13:0d:41:8c:b8:
                    3a:7f:87:4b:b0:b2:51:eb:6d:4d:3a:66:49:bb:9c:
                    f4:4c:41:7d:be:4d:9a:96:98:bd:c9:69:e0:ec:ec:
                    37:10:62:39:f2:0b:45:7f:f0:a9:9b:b1:e7:f5:5e:
                    bd:62:d7:6e:26:df:92:33:c4:0a:49:d4:0f:0e:c4:
                    8c:d7:ad:a7:7a:bc:27:f4:cf:10:90:77:65:88:c8:
                    eb:cd:17:ae:48:dd:a7:4f:69:e3:fa:48:6b:c8:b7:
                    37:fd:ce:c3:2b:ba:3e:48:77:91:be:56:6e:43:1c:
                    eb:00:18:6c:33:4d:62:73:d1:7c:0a:d9:94:b0:00:
                    79:85:44:7e:a3:5f:3d:d4:96:41:bc:29:43:f6:94:
                    b4:f5:dd:74:dc:c9:89:50:f6:ae:50:44:a6:9d:22:
                    ae:bf:db:69:62:83:15:e1:c4:65:33:a9:d9:a3:fe:
                    97:75:89:38:77:27:d1:59:bb:47:fe:e3:4a:69:35:
                    69:45:21:f9:5b:ef:b7:c8:ca:05:96:53:3d:5a:27:
                    eb:c6:19:42:98:3a:fd:80:29:b6:2a:7d:ce:0c:80:
                    70:d7:88:81:17:b4:cc:26:7e:43:91:22:73:10:13:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EC:61:65:9A:33:12:EC:5D:6E:AD:6B:45:3B:F5:9B:FD:58:34:50
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32332d3233203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:88:0b:25:cc:ff:0a:51:d3:21:5b:9c:b4:13:e4:68:1c:c7:
         70:73:7c:cf:46:76:b7:38:8a:91:ce:82:28:45:99:1f:1d:21:
         a8:62:b9:23:5d:f8:f6:19:d7:ce:b5:c0:6d:c6:ce:52:31:7f:
         3b:8a:47:cf:30:5a:96:ad:ea:c3:56:53:1f:fe:90:df:80:9c:
         48:9a:2b:10:e6:e8:7d:33:12:e0:57:14:55:61:fd:00:19:d6:
         2f:b0:84:22:d2:65:e7:a3:66:1b:f0:5f:8e:0a:c3:10:8d:cd:
         c1:a4:f9:bc:30:fc:11:77:7b:2b:56:65:53:81:a9:b3:46:08:
         7b:5f:4a:d2:98:17:fe:ac:53:55:01:71:51:69:40:2e:dd:bd:
         40:7f:92:06:fc:71:cf:64:0f:5b:98:28:c2:c3:0e:2b:c0:e4:
         b8:f2:e6:5e:5e:a7:82:5a:24:e0:d4:d4:4f:cf:39:ea:ae:87:
         d6:f7:b1:8f:c2:73:03:ec:5b:75:d6:84:23:02:27:dd:ec:e4:
         f3:64:34:63:48:08:80:32:8c:43:be:39:85:b1:0a:24:fd:bb:
         42:3d:5d:27:88:b3:5e:92:18:56:fa:cb:bb:b7:00:12:2f:39:
         52:42:bd:44:66:d8:5d:8a:65:84:4d:6d:69:35:c3:37:e1:e2:
         bc:79:2d:50
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUChu/CKEuxVgNR8zsMi4tXc6XzhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZGQUJGRkExQjI4QUJBMUQwNTFFQ0NCQkU1N0RFOTE1
NzZEM0YzQjAeFw0yNjA2MjMxNDU2NTdaFw0yNzA2MjIxNTAxNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2NUQ3MUI0MzBFQkYxMjQ4
OTc5MzA1RTU2MUI3MTlBNDMyREM3NjlGMEY2NkQwMTMwRDQxOENCODNBN0Y4NzRC
QjBCMjUxRUI2RDREM0E2NjQ5QkI5Q0Y0NEM0MTdEQkU0RDlBOTY5OEJEQzk2OUUw
RUNFQzM3MTA2MjM5RjIwQjQ1N0ZGMEE5OUJCMUU3RjU1RUJENjJENzZFMjZERjky
MzNDNDBBNDlENDBGMEVDNDhDRDdBREE3N0FCQzI3RjRDRjEwOTA3NzY1ODhDOEVC
Q0QxN0FFNDhEREE3NEY2OUUzRkE0ODZCQzhCNzM3RkRDRUMzMkJCQTNFNDg3Nzkx
QkU1NjZFNDMxQ0VCMDAxODZDMzM0RDYyNzNEMTdDMEFEOTk0QjAwMDc5ODU0NDdF
QTM1RjNERDQ5NjQxQkMyOTQzRjY5NEI0RjVERDc0RENDOTg5NTBGNkFFNTA0NEE2
OUQyMkFFQkZEQjY5NjI4MzE1RTFDNDY1MzNBOUQ5QTNGRTk3NzU4OTM4NzcyN0Qx
NTlCQjQ3RkVFMzRBNjkzNTY5NDUyMUY5NUJFRkI3QzhDQTA1OTY1MzNENUEyN0VC
QzYxOTQyOTgzQUZEODAyOUI2MkE3RENFMEM4MDcwRDc4ODgxMTdCNENDMjY3RTQz
OTEyMjczMTAxMzg2M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2XXG0MOvxJIl5MF5WG3GaQy3HafD2bQEw1BjLg6f4dLsLJR621N
OmZJu5z0TEF9vk2alpi9yWng7Ow3EGI58gtFf/Cpm7Hn9V69YtduJt+SM8QKSdQP
DsSM162nerwn9M8QkHdliMjrzReuSN2nT2nj+khryLc3/c7DK7o+SHeRvlZuQxzr
ABhsM01ic9F8CtmUsAB5hUR+o1891JZBvClD9pS09d103MmJUPauUESmnSKuv9tp
YoMV4cRlM6nZo/6XdYk4dyfRWbtH/uNKaTVpRSH5W++3yMoFllM9WifrxhlCmDr9
gCm2Kn3ODIBw14iBF7TMJn5DkSJzEBOGPwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FB/sYWWaMxLsXW6ta0U79Zv9WDRQMB8GA1UdIwQYMBaAFJ/6v/obKKuh0FHsy75X
3pFXbT87MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZqdTFiMno2a0VaVkxr
U3FTZUJMeG5TRFQ0RTMxempOTnZjSFMxMmdtb0RlLzEvOUZGQUJGRkExQjI4QUJB
MUQwNTFFQ0NCQkU1N0RFOTE1NzZEM0YzQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85RkZBQkZGQTFCMjhBQkExRDA1MUVDQ0JCRTU3REU5MTU3NkQz
RjNCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82anUxYjJ6NmtFWlZMa1NxU2VC
THhuU0RUNEUzMXpqTk52Y0hTMTJnbW9EZS8xLzMxMzkzMTJlMzcyZTM1MzAyZTMw
MmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzMzMzMxMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG/BzIw
DQYJKoZIhvcNAQELBQADggEBAGmICyXM/wpR0yFbnLQT5Ggcx3BzfM9Gdrc4ipHO
gihFmR8dIahiuSNd+PYZ1861wG3GzlIxfzuKR88wWpat6sNWUx/+kN+AnEiaKxDm
6H0zEuBXFFVh/QAZ1i+whCLSZeejZhvwX44KwxCNzcGk+bww/BF3eytWZVOBqbNG
CHtfStKYF/6sU1UBcVFpQC7dvUB/kgb8cc9kD1uYKMLDDivA5Ljy5l5ep4JaJODU
1E/POequh9b3sY/CcwPsW3XWhCMCJ93s5PNkNGNICIAyjEO+OYWxCiT9u0I9XSeI
s16SGFb6y7u3ABIvOVJCvURm2F2KZYRNbWk1wzfh4rx5LVA=
-----END CERTIFICATE-----
Generated at Sat Jun 27 14:07:31 2026 by rpki-client