Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa (raw, json)
Hash identifier:          yV6sMN3lRxm57R3RIk5kiL1Saye3BfJH1VvmU6LlZdw=
Subject key identifier:   9B:4B:C2:10:24:6A:94:0D:B5:76:7C:39:E6:87:36:2E:EA:BB:8E:22
Certificate issuer:       /CN=8E682C3DC29648FE86782BA8CBD4395869B6630C
Certificate serial:       05F94B9020597F2D158550DF18C649C8C55151F7
Authority key identifier: 8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
Signing time:             Mon 21 Sep 2026 12:59:26 +0000
ROA not before:           Mon 21 Sep 2026 12:54:26 +0000
ROA not after:            Mon 20 Sep 2027 12:59:26 +0000
asID:                     270430
IP address blocks:        190.111.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 02:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:4b:90:20:59:7f:2d:15:85:50:df:18:c6:49:c8:c5:51:51:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E682C3DC29648FE86782BA8CBD4395869B6630C
        Validity
            Not Before: Sep 21 12:54:26 2026 GMT
            Not After : Sep 20 12:59:26 2027 GMT
        Subject: CN=9B4BC210246A940DB5767C39E687362EEABB8E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:93:39:a5:30:c0:e6:86:89:02:f5:92:14:
                    b3:e2:77:75:09:49:23:57:24:82:f4:5c:09:10:c2:
                    59:fb:db:d8:d0:e7:c5:72:9e:0f:ce:86:07:47:92:
                    b6:9b:bd:3a:ce:c3:02:dd:be:72:69:d4:84:2e:7d:
                    17:eb:b6:44:67:af:c1:cd:5a:92:00:73:2f:9c:ae:
                    78:4e:99:2f:7d:50:d3:a9:57:6a:11:20:05:74:e1:
                    5f:93:d9:04:17:2a:44:85:ff:d5:f8:0e:b7:0e:13:
                    ca:0b:c1:9d:ae:f5:8d:4d:e6:36:01:2d:52:92:8f:
                    bc:44:66:35:17:53:68:a8:dd:03:69:6e:ed:0b:46:
                    19:6d:e9:dd:01:92:34:9a:9e:6c:29:8b:b9:32:57:
                    13:e1:e8:f5:5d:51:93:1a:af:67:5e:87:84:72:f2:
                    85:fc:ff:fc:66:e6:c3:1d:2f:89:02:cc:68:72:56:
                    57:93:f8:84:1f:3b:5e:07:29:46:61:5e:13:46:75:
                    26:4b:8c:24:f6:aa:92:59:11:ae:5b:7b:6c:5b:82:
                    7b:83:32:cf:a5:a0:52:aa:66:e3:d4:73:b1:b3:cd:
                    49:27:86:c9:b4:cc:41:9a:09:81:bb:8d:b4:ea:fc:
                    73:36:4e:da:74:de:59:e1:46:d1:8d:05:72:02:fb:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:C2:10:24:6A:94:0D:B5:76:7C:39:E6:87:36:2E:EA:BB:8E:22
            X509v3 Authority Key Identifier:
                keyid:8E:68:2C:3D:C2:96:48:FE:86:78:2B:A8:CB:D4:39:58:69:B6:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8E682C3DC29648FE86782BA8CBD4395869B6630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E682C3DC29648FE86782BA8CBD4395869B6630C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:05:39:77:ca:ac:c9:b2:df:b9:3b:20:4b:61:fe:1e:c6:
         ff:69:8f:89:00:37:d8:69:31:27:57:0d:00:c4:04:c1:c7:36:
         0b:72:2b:f1:52:9b:54:73:bd:7f:7c:2c:a0:ed:c5:a1:9b:9d:
         93:be:95:99:e6:23:f9:74:81:40:5e:ac:9a:56:56:db:0d:68:
         a3:1d:fc:16:aa:7f:26:c8:2d:31:4d:99:03:7e:8e:7e:bb:64:
         45:87:74:2b:fd:ea:f7:b9:22:42:63:f1:fb:e4:e6:17:d6:67:
         06:3b:bf:72:7d:ae:89:f8:bc:82:e5:d6:a2:71:73:9b:75:b7:
         82:b6:97:8b:58:c3:56:8b:96:8d:54:ac:d4:7a:a4:3c:23:30:
         65:01:03:37:66:d2:a6:63:0b:44:e8:01:2f:b6:61:e9:aa:4b:
         da:9a:65:cb:77:da:f7:4d:5f:9e:ef:dc:45:b2:63:53:f6:3d:
         ff:bc:a3:d1:3b:f8:ef:ac:28:db:b0:6f:38:92:15:f6:da:06:
         7f:f9:75:b0:94:16:4b:da:91:06:52:f7:8f:ec:d2:75:dc:e2:
         91:f9:78:85:55:eb:3a:6f:90:40:a0:bb:13:31:3d:cd:d7:c4:
         98:c2:c2:88:37:68:86:7d:39:f2:54:3c:0f:8e:2b:a7:74:0b:
         af:8d:48:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 13:52:09 2026 by rpki-client