Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e33362e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          nrsW6O+p8XczUGFqUO8WW2SPeagb9YENrlqz3ZUlDak=
Subject key identifier:   36:D1:E1:47:EE:EA:2C:7D:79:CD:DE:7D:67:A1:DB:00:C0:3E:B2:7C
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       021BE6A22D44A5AC7C27F76BA75BD966B2B2BB03
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 11 Sep 2026 14:26:47 +0000
ROA not before:           Fri 11 Sep 2026 14:21:47 +0000
ROA not after:            Fri 10 Sep 2027 14:26:47 +0000
asID:                     263347
IP address blocks:        191.37.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 17:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1b:e6:a2:2d:44:a5:ac:7c:27:f7:6b:a7:5b:d9:66:b2:b2:bb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 11 14:21:47 2026 GMT
            Not After : Sep 10 14:26:47 2027 GMT
        Subject: CN=36D1E147EEEA2C7D79CDDE7D67A1DB00C03EB27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:52:98:85:6f:d4:71:39:03:d5:1b:1e:a1:
                    ee:e2:d6:6e:0e:b6:2b:c2:c2:46:0c:e7:24:75:0a:
                    9b:08:68:34:c5:c9:68:bf:ea:08:e1:ee:72:83:73:
                    71:10:d0:55:d5:5c:e9:2b:44:07:56:33:dd:87:b9:
                    f6:82:f9:57:b9:f1:c5:b0:6c:b3:57:b0:d4:ea:53:
                    78:a8:8f:69:8a:97:ae:b2:0f:6f:b5:bc:d5:c7:24:
                    3d:53:a6:98:3a:49:d2:3c:f4:4d:7a:f4:cf:b3:dd:
                    a9:0f:a0:c7:4b:51:6f:89:d5:18:4c:50:a9:66:35:
                    f4:3d:40:d2:43:ce:73:f7:70:d1:10:29:e5:43:f1:
                    8f:f9:68:7a:f1:8c:fd:59:f7:a8:c6:97:7e:73:7b:
                    97:52:ca:b3:4c:77:3b:c7:61:c6:f4:d8:e3:46:9d:
                    2b:10:7c:42:48:b5:16:6d:3c:16:92:f5:77:83:9a:
                    78:83:f6:03:f1:b2:d8:b1:70:99:a0:eb:72:24:59:
                    4f:64:ed:5c:e9:c8:8d:71:90:38:6c:cd:69:9d:16:
                    05:45:aa:df:c6:90:e0:25:4a:3a:92:c4:3d:aa:92:
                    be:d9:ba:bd:ad:c3:18:3e:d4:15:95:ce:3f:a8:cf:
                    44:b6:20:27:68:47:5a:2e:f0:1e:7c:8d:89:8b:53:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D1:E1:47:EE:EA:2C:7D:79:CD:DE:7D:67:A1:DB:00:C0:3E:B2:7C
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e33362e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:27:61:25:43:97:28:a4:37:90:f9:7f:f6:7a:d6:02:bb:
         cb:88:d5:ff:80:cc:9c:79:77:10:b7:28:96:da:fd:f6:69:36:
         1c:bc:ca:76:78:57:c3:67:01:a5:cf:64:a6:72:ee:eb:ad:07:
         de:5b:a8:7d:7a:91:ed:b1:62:a3:bc:a0:b6:b8:4f:76:b1:34:
         5d:0f:78:66:f0:45:cf:54:32:ce:5d:ef:80:67:ff:52:88:48:
         b9:64:53:17:3c:ae:ca:16:96:5c:f7:53:c4:60:79:73:d1:b7:
         c5:2f:6c:9d:5c:0b:fd:fd:4b:44:18:75:10:cd:c4:be:42:af:
         cd:fc:a2:7a:93:cd:00:60:c6:9a:04:d5:39:7d:3b:ab:9b:1a:
         c4:19:50:85:42:2b:d3:de:b0:74:ae:a3:42:24:26:61:bd:be:
         77:46:57:73:4e:7d:a0:d6:8a:e6:06:42:1e:1a:cd:6c:e0:b4:
         e3:71:60:dd:3d:c9:f4:25:07:aa:6e:e0:ee:87:44:70:90:87:
         57:eb:1d:8f:7e:d2:30:ab:b6:07:cf:97:fc:58:71:55:5a:80:
         ee:eb:aa:06:38:3e:eb:cf:70:74:f6:36:d8:ca:17:b6:ae:92:
         e1:3f:81:18:eb:07:8f:9f:a4:83:21:dd:73:98:51:ae:ec:6f:
         c1:f1:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----