Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          yY9t8ZSWfSd8gIWUs/qAqi3IFVvspzg3/aplvP3XEnU=
Subject key identifier:   24:6E:75:86:02:FC:F1:00:D6:A3:33:48:AB:86:6B:9C:F4:28:CD:D4
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       476B705736447D6D3D0DE080FD13CFEFA6D6FE2C
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 29 Jan 2026 16:18:14 +0000
ROA not before:           Thu 29 Jan 2026 16:13:14 +0000
ROA not after:            Thu 28 Jan 2027 16:18:14 +0000
asID:                     263508
IP address blocks:        191.243.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:70:57:36:44:7d:6d:3d:0d:e0:80:fd:13:cf:ef:a6:d6:fe:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 29 16:13:14 2026 GMT
            Not After : Jan 28 16:18:14 2027 GMT
        Subject: CN=246E758602FCF100D6A33348AB866B9CF428CDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:04:2c:c6:15:09:42:fc:b0:9d:e2:01:78:
                    f5:bf:4a:aa:e7:1d:ae:f6:15:10:36:e4:47:7d:eb:
                    2f:a9:15:8f:ac:60:6c:b5:a9:fa:87:76:f3:49:31:
                    33:d4:ef:1d:31:7e:c9:a8:48:ed:b4:19:51:19:ce:
                    94:e6:6b:75:93:64:f7:2d:d8:32:03:92:88:50:f3:
                    59:28:c8:0b:e6:06:e0:28:c8:e2:e5:55:f4:bb:3e:
                    2f:29:23:c6:d0:c4:c7:8c:52:21:85:41:f2:23:84:
                    d3:a7:e1:d6:ce:eb:76:63:2d:b7:39:63:66:80:4f:
                    a6:65:ee:69:11:2a:fd:81:7d:f4:2a:7e:75:93:b8:
                    24:1a:ea:a5:7d:56:63:f2:c7:01:78:58:23:cb:c7:
                    63:c7:48:10:c3:2c:1b:15:0f:06:95:b6:ae:74:32:
                    4f:df:c6:0d:1a:bd:a0:ef:f4:73:0e:86:33:2f:a6:
                    22:b2:45:94:15:0e:de:91:1e:38:fa:40:fb:0b:48:
                    50:cf:28:a8:54:eb:89:ce:66:9f:f3:65:80:9e:11:
                    21:e8:42:98:77:28:7e:96:4a:09:8d:67:af:e1:0b:
                    f4:92:f7:cf:0d:e7:8d:a1:c1:c4:1c:18:60:48:68:
                    48:be:d9:ca:86:7f:10:71:fc:9d:85:5c:c1:9d:e4:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6E:75:86:02:FC:F1:00:D6:A3:33:48:AB:86:6B:9C:F4:28:CD:D4
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3136322e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:6e:56:20:db:2e:03:20:53:e5:dd:0b:63:f4:4c:71:cf:
         72:4a:58:41:3e:e9:2b:6c:e2:00:f3:2c:f0:de:3d:56:a8:58:
         73:6e:15:e2:72:2b:57:e8:a7:c0:c7:26:f7:5d:c1:b7:91:73:
         2f:5f:c8:78:41:26:e2:90:03:41:48:35:e2:f4:0a:94:db:63:
         ed:1f:03:dc:c8:aa:61:c7:40:9e:74:c9:8e:20:f7:c7:3a:ea:
         db:44:03:e9:02:de:52:58:74:df:39:41:cd:7b:0d:16:b4:4d:
         22:b0:17:30:f9:f7:1e:1a:7f:3c:84:0d:8a:be:de:06:7c:66:
         aa:3d:d6:4f:fd:e2:8d:47:d7:92:41:08:f5:45:69:2a:ba:aa:
         0e:be:18:5f:08:00:43:2f:f9:34:6b:46:c2:b1:53:12:f1:02:
         34:96:cf:21:f7:67:45:55:ae:98:47:53:7a:1f:65:45:84:03:
         b4:67:ed:19:77:77:e3:8c:b4:76:fc:f1:b8:7f:dc:d5:ab:01:
         26:2a:23:0a:b6:51:4e:3e:7e:bd:50:f9:d0:26:6e:45:39:87:
         12:44:b0:8d:25:5a:48:4b:ff:a4:37:6d:56:03:64:33:fb:03:
         68:c0:d3:59:9d:37:3a:49:6d:0d:59:85:92:45:10:26:60:62:
         6b:ab:01:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:56:10 2026 by rpki-client