Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa
File:                     3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa (raw, json)
Hash identifier:          hNgmas7YsUZmvrMu3Z/L1pzubk65alsby0CruUduxP0=
Subject key identifier:   5B:B9:8E:3E:16:CC:AB:07:C2:45:61:F3:B6:3D:FF:D9:C4:56:2B:B0
Certificate issuer:       /CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
Certificate serial:       6A6228F46750F82BC9DD7A2B09B6950755F9FD35
Authority key identifier: 02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa
Signing time:             Thu 29 Jan 2026 16:18:13 +0000
ROA not before:           Thu 29 Jan 2026 16:13:13 +0000
ROA not after:            Thu 28 Jan 2027 16:18:13 +0000
asID:                     263508
IP address blocks:        191.243.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl
                          rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 03:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:62:28:f4:67:50:f8:2b:c9:dd:7a:2b:09:b6:95:07:55:f9:fd:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028CDE0E764AA87F51C83E2608B8562B72B4E204
        Validity
            Not Before: Jan 29 16:13:13 2026 GMT
            Not After : Jan 28 16:18:13 2027 GMT
        Subject: CN=5BB98E3E16CCAB07C24561F3B63DFFD9C4562BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:eb:fc:07:40:3b:8a:4a:8e:a1:a6:2c:ba:
                    9f:e5:6e:aa:ae:92:7e:ec:74:7b:70:19:cd:07:54:
                    96:e0:e0:f8:c4:c7:9b:15:c3:7f:4d:e4:eb:37:3b:
                    19:b3:f7:fb:24:70:53:23:0b:2a:28:d9:cb:79:df:
                    d2:ae:3b:a6:93:15:bf:47:f8:c6:a0:ee:68:e4:d7:
                    96:d1:dc:9c:2d:5d:5a:d1:8b:f5:98:0c:66:72:50:
                    4e:b5:80:e0:b8:1c:02:de:3e:4e:83:83:12:dd:ab:
                    ae:79:8c:e1:6b:a2:bf:71:f5:bc:d2:5a:43:d1:87:
                    38:36:26:45:2f:c2:93:b6:c7:3a:0b:b3:37:ef:f6:
                    c5:05:7c:c1:d6:b3:ad:d5:3b:43:07:df:e3:b5:f5:
                    74:63:85:05:fe:68:cd:67:6c:75:54:0e:9b:aa:a0:
                    ac:92:d0:02:0a:44:81:5b:88:c4:4e:86:3a:fd:33:
                    fe:c4:a3:5e:9a:45:8e:a9:e4:66:2e:cb:47:4c:3e:
                    a6:0f:2e:d6:d0:50:61:e7:b8:7c:40:b6:33:0b:42:
                    98:20:28:98:d2:7a:9c:8c:a1:de:65:a2:af:ae:bb:
                    49:b6:3d:6d:c7:d1:3f:2e:32:d2:68:13:b7:b8:42:
                    fe:dc:2b:b1:e0:4e:09:96:06:82:39:35:36:36:72:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:8E:3E:16:CC:AB:07:C2:45:61:F3:B6:3D:FF:D9:C4:56:2B:B0
            X509v3 Authority Key Identifier:
                keyid:02:8C:DE:0E:76:4A:A8:7F:51:C8:3E:26:08:B8:56:2B:72:B4:E2:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/028CDE0E764AA87F51C83E2608B8562B72B4E204.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/028CDE0E764AA87F51C83E2608B8562B72B4E204.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ztPn7zcS9DeHykiXPDeRa8M6MEZ6P3x25tsZyVD5CVn/0/3139312e3234332e3137352e302f32342d3234203d3e20323633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:98:12:47:5e:ee:9e:37:b5:25:71:84:4c:6a:dc:18:63:9b:
         b0:b1:65:bb:e5:83:5d:29:cd:1e:db:3b:41:7b:ba:fe:c2:2f:
         44:51:9b:c0:37:64:58:ee:fb:b9:60:65:ee:fa:a0:1d:82:79:
         ba:e1:ce:e3:1d:7e:ea:83:0c:4c:a0:ae:7f:46:dd:5c:b3:62:
         5c:f2:df:01:2a:c5:e6:0d:fa:71:04:37:99:ed:c4:03:15:93:
         80:32:4d:ac:c1:15:4d:31:aa:2a:29:1c:2e:17:77:32:97:9d:
         ca:1b:a7:d3:ce:e9:36:2f:3b:1b:21:4d:78:b6:e1:12:97:16:
         43:06:c2:2d:34:55:d4:74:8e:0e:0f:88:6c:9e:8d:f6:52:45:
         80:06:94:4b:01:3a:b4:4e:66:2e:35:bf:c6:3b:fb:64:c2:79:
         f6:7d:a1:67:eb:3d:5f:fe:cd:70:5f:ec:1b:f7:5a:ad:04:8c:
         0b:f8:6a:eb:b9:2d:09:6d:d5:97:f7:2a:4d:19:36:de:7d:21:
         72:7f:fa:e5:8c:99:c2:03:ad:4b:8b:52:c5:71:2e:cc:4f:65:
         ca:58:02:3b:b3:b9:54:ac:bb:97:1a:10:db:c7:d0:06:6e:01:
         b7:22:21:98:91:2c:6c:d3:5e:17:6e:7c:a3:47:d4:b7:39:5c:
         6b:f2:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:49:09 2026 by rpki-client