Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35352e302f32342d3234203d3e20323633333131.roa
File:                     3139312e372e35352e302f32342d3234203d3e20323633333131.roa (raw, json)
Hash identifier:          MPSSmCMITbp5gG6kyZYuJuvcBxwZeLGso+0gxLUVFBw=
Subject key identifier:   58:E8:5E:82:16:E4:99:D7:70:F7:F3:09:A0:D0:C5:0B:E3:42:42:1A
Certificate issuer:       /CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
Certificate serial:       61332AC170E98529E86CFA81213774B3A62EBD51
Authority key identifier: 9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35352e302f32342d3234203d3e20323633333131.roa
Signing time:             Tue 23 Jun 2026 15:04:59 +0000
ROA not before:           Tue 23 Jun 2026 14:59:59 +0000
ROA not after:            Tue 22 Jun 2027 15:04:59 +0000
asID:                     263311
IP address blocks:        191.7.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl
                          rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 27 Jun 2026 23:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:33:2a:c1:70:e9:85:29:e8:6c:fa:81:21:37:74:b3:a6:2e:bd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B
        Validity
            Not Before: Jun 23 14:59:59 2026 GMT
            Not After : Jun 22 15:04:59 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:13:5d:3d:ec:ac:ac:1a:b1:0f:8f:9d:46:01:
                    1f:ad:98:d4:fb:5f:f5:2f:01:ae:f9:70:1b:47:4b:
                    10:0f:0a:0f:97:d7:c8:8f:17:98:14:ef:41:76:04:
                    87:6f:16:9c:b6:d0:56:5b:ff:a9:01:d2:65:d5:e0:
                    6f:61:b0:f5:5e:c3:cc:8d:5b:e1:0f:f3:44:67:9c:
                    f9:ac:ee:fe:d4:59:e6:dd:8e:21:7c:38:82:56:54:
                    8f:40:15:8c:6f:0b:a5:cb:73:54:c9:b6:e4:7d:07:
                    b7:6f:c1:79:c4:e3:91:de:46:f4:12:c5:a7:20:80:
                    d1:62:a6:fd:d8:76:4a:8a:c7:2f:2f:6d:08:67:07:
                    69:a1:27:d3:ec:0f:a4:8d:bf:59:dc:07:0d:78:fa:
                    50:4d:b0:9a:41:74:8f:ce:a6:5e:cd:d6:51:db:9d:
                    e1:94:67:9c:fe:e1:fd:a8:02:a9:e2:90:26:76:d2:
                    d1:43:95:83:13:18:79:f7:aa:a3:09:ac:b3:56:ee:
                    c4:6b:78:88:7b:1e:f6:2c:0e:b6:3c:44:7a:d9:62:
                    27:61:5b:17:f4:91:b2:fd:b3:b0:8a:d7:f4:05:a8:
                    02:cc:fb:2a:51:09:98:82:e3:72:03:8d:67:44:67:
                    c5:2f:17:fb:f8:4d:64:3c:5e:48:22:03:5d:aa:69:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:5E:82:16:E4:99:D7:70:F7:F3:09:A0:D0:C5:0B:E3:42:42:1A
            X509v3 Authority Key Identifier:
                keyid:9F:FA:BF:FA:1B:28:AB:A1:D0:51:EC:CB:BE:57:DE:91:57:6D:3F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FFABFFA1B28ABA1D051ECCBBE57DE91576D3F3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/1/3139312e372e35352e302f32342d3234203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:db:3a:ea:f0:ec:56:e5:7d:40:50:74:47:c3:3d:d2:25:d9:
         7f:93:fa:4f:0b:a5:bd:ea:97:07:ff:04:cf:e3:32:13:77:3d:
         af:9a:bf:44:40:93:56:4e:83:68:86:1a:ff:60:27:92:6a:f1:
         bc:e1:9c:38:bb:10:20:5d:9e:13:49:41:85:f5:f5:6f:1a:3d:
         da:02:54:0d:f9:0e:80:9e:90:22:6d:05:e4:9e:ad:dc:72:cf:
         a5:0f:fa:b5:47:f3:13:ff:cb:b7:01:0b:8d:95:c9:ae:1b:3e:
         bb:e0:8d:19:2c:d0:f2:b0:4b:d4:53:2e:64:82:67:66:52:d8:
         01:46:de:71:c9:ac:29:86:c4:86:9d:65:d9:ed:cd:40:27:d4:
         c2:0b:9f:f6:27:d2:03:19:de:c9:46:79:3a:cc:1f:40:4c:dd:
         fb:f4:75:f4:2d:78:df:24:94:64:3a:ad:22:f1:39:a9:4b:68:
         24:ac:13:a3:d8:89:66:75:db:42:a6:34:17:77:2d:0c:81:79:
         ac:fe:ff:87:70:12:d1:12:bb:85:33:4d:20:a4:26:10:a3:5b:
         64:88:0e:07:3e:f5:7b:79:2f:cc:08:f1:76:e6:b6:0c:70:43:
         2e:c4:9c:c9:ed:1d:5a:6f:73:ff:05:4b:c1:62:fe:98:75:6d:
         78:a9:24:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:25 2026 by rpki-client