Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32342d3234203d3e20323633333131.roa
File:                     3139312e372e35302e302f32342d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          zZerixo3xAt5RdvDIqgEjO0/Ke7R4NKiMPMA7FnwWdU=
Subject key identifier:   6D:EC:8C:FB:73:0C:DF:74:E3:BA:0F:49:46:A1:F2:51:44:40:08:0A
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       1DFE02FAA11A30EE78B30D91B6FECB78376F724B
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32342d3234203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:03:11 +0000
ROA not before:           Tue 23 Jun 2026 14:58:11 +0000
ROA not after:            Tue 22 Jun 2027 15:03:11 +0000
asID:                     263311
IP address blocks:        191.7.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:02:fa:a1:1a:30:ee:78:b3:0d:91:b6:fe:cb:78:37:6f:72:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:58:11 2026 GMT
            Not After : Jun 22 15:03:11 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:35:75:f3:e8:26:5e:45:df:40:a2:9b:24:
                    22:aa:c6:e9:ad:85:b2:52:a5:f3:75:ae:29:bc:6c:
                    22:78:cd:d3:60:0a:e7:29:b7:08:9e:31:0c:53:65:
                    4c:64:d6:fc:5b:b3:66:2c:14:f1:ea:da:96:61:d2:
                    7b:ff:4c:70:de:a7:48:e0:bd:34:f8:fb:d1:db:95:
                    ba:5b:1a:3c:16:71:5d:bb:85:13:03:31:08:25:cc:
                    63:2a:40:ec:37:82:4a:0c:53:73:c5:81:99:fc:91:
                    42:71:55:16:1a:39:a3:ea:a7:ac:51:b8:61:cc:82:
                    9d:9e:33:04:0c:35:f8:ee:b1:1b:c6:04:c7:06:4e:
                    17:42:ff:0c:d3:27:5e:75:52:24:17:09:2a:29:49:
                    aa:57:7e:a7:5e:e3:9f:5c:c0:8a:62:86:e6:ee:1d:
                    00:36:21:75:a2:0e:98:66:d0:95:ff:5e:cf:1f:7f:
                    68:73:57:81:42:67:2b:cf:1b:18:ee:65:77:0f:4e:
                    a6:17:0e:91:61:72:84:fc:3f:22:6e:e6:8c:00:dd:
                    c0:c3:ab:c3:65:8e:9a:6b:89:cc:26:9f:01:ed:ff:
                    16:f4:af:73:c6:9a:26:2b:10:c2:53:3e:30:71:15:
                    ab:fe:05:88:8d:e3:b0:4a:13:3b:84:69:f7:37:8e:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EC:8C:FB:73:0C:DF:74:E3:BA:0F:49:46:A1:F2:51:44:40:08:0A
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35302e302f32342d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2d:a0:ae:c3:32:dd:27:03:be:c7:5d:b2:9b:41:57:f8:51:
         ef:38:24:b3:a8:28:9a:e3:d2:62:4f:84:3e:4a:1b:14:64:18:
         97:aa:dc:bd:21:8f:f8:12:30:88:04:3c:dd:0b:63:d3:fc:82:
         32:8b:35:d9:bf:ff:4a:a0:ee:1e:64:9f:bf:84:6d:24:23:e2:
         59:da:be:84:5b:58:1c:59:b0:58:45:f0:0a:fd:c8:3b:0b:32:
         26:31:d3:37:d5:d7:55:54:89:54:88:d7:00:98:f9:fe:1a:5d:
         c5:f7:48:99:c3:e8:e9:36:7b:61:df:17:2a:fd:cf:cc:43:f4:
         2b:72:f9:33:5a:5c:2a:bd:0f:c6:86:70:f8:7f:0f:b5:48:ce:
         84:c8:02:36:b8:e8:d1:0e:03:65:0b:52:fa:18:a6:66:81:1a:
         85:7c:4a:df:06:87:cd:91:30:b8:55:80:fc:64:e7:86:25:45:
         91:35:78:c6:96:ed:b9:fc:b5:11:92:f3:46:2d:79:20:c8:06:
         d3:06:4d:87:81:03:a6:81:94:47:93:d8:08:9f:8d:6c:1e:58:
         7f:5e:4d:3d:c6:56:fc:c6:44:71:8d:36:85:69:ca:e4:d8:06:
         11:9f:e4:21:80:fd:0a:d3:c7:cd:c9:9f:16:2b:1d:85:8e:02:
         6f:0e:a6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:08:52 2026 by rpki-client