Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3234203d3e20323637343631.roa
File:                     3139322e3134312e32362e302f32332d3234203d3e20323637343631.roa (raw, json)
Hash identifier:          vp2ma9nvmbKoBzfpDQbHZkeWY5LMI+9H2nXOn8XU27s=
Subject key identifier:   4F:D1:39:17:60:9D:E2:BF:61:8F:26:FD:08:E0:56:F7:56:40:14:E4
Certificate issuer:       /CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
Certificate serial:       7D1A031E674442568EF3AA1ADE652B9F238C210E
Authority key identifier: 18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3234203d3e20323637343631.roa
Signing time:             Thu 09 Apr 2026 13:58:49 +0000
ROA not before:           Thu 09 Apr 2026 13:53:49 +0000
ROA not after:            Thu 08 Apr 2027 13:58:49 +0000
asID:                     267461
IP address blocks:        192.141.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl
                          rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 17:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:03:1e:67:44:42:56:8e:f3:aa:1a:de:65:2b:9f:23:8c:21:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185E3F5FBA985F8EF7493AF5948C63D1510157C0
        Validity
            Not Before: Apr  9 13:53:49 2026 GMT
            Not After : Apr  8 13:58:49 2027 GMT
        Subject: CN=4FD13917609DE2BF618F26FD08E056F7564014E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:c1:32:39:1b:b3:3f:d1:51:b3:83:d7:e3:
                    ce:84:04:e9:33:fc:bf:b4:92:6e:0f:a1:6a:51:78:
                    12:dd:5f:2f:99:71:e2:8b:97:fb:85:a2:01:0e:e2:
                    00:a3:57:75:ff:e0:17:b4:00:6f:f9:26:d7:90:7c:
                    74:f9:ab:55:be:bd:30:3c:3c:69:e1:b1:d1:d7:1f:
                    79:cd:54:c7:c6:90:41:d5:38:79:b3:35:d3:e1:0a:
                    25:53:fa:37:50:6d:7f:fb:e4:5c:fa:86:95:34:e2:
                    9e:76:11:af:6c:5b:3f:b3:2a:bb:f4:37:e3:a1:44:
                    46:2e:99:c5:e4:26:5a:3a:02:e2:80:a9:d3:15:bc:
                    6f:a0:76:6c:06:6c:99:69:9f:92:f8:87:78:28:dd:
                    4e:cb:85:fe:55:3e:3d:d7:49:bd:73:4d:4f:63:23:
                    f1:a2:4b:09:c5:df:ef:68:09:80:90:70:e6:79:00:
                    4d:15:9f:f2:74:bb:7d:4a:97:3c:5c:c9:f4:77:5e:
                    32:87:6c:a2:fd:19:f7:6c:ea:bf:b2:bc:35:92:e4:
                    21:14:57:0b:be:29:2a:17:49:4b:c0:d7:fb:b8:9a:
                    b1:52:94:9a:5a:18:c4:77:be:91:97:b0:4f:08:ee:
                    8c:d5:fd:b7:75:f2:37:75:26:3b:3b:7d:de:00:28:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:39:17:60:9D:E2:BF:61:8F:26:FD:08:E0:56:F7:56:40:14:E4
            X509v3 Authority Key Identifier:
                keyid:18:5E:3F:5F:BA:98:5F:8E:F7:49:3A:F5:94:8C:63:D1:51:01:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/185E3F5FBA985F8EF7493AF5948C63D1510157C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/185E3F5FBA985F8EF7493AF5948C63D1510157C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9frPua465kAxeW7Axn8LbPVEV5q7WiEoUGRvLGVdQH5A/0/3139322e3134312e32362e302f32332d3234203d3e20323637343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:13:81:b0:05:b3:0c:55:b9:52:cc:8f:52:d5:c7:30:e8:54:
         ea:95:97:65:21:34:19:dd:cb:85:6e:cf:e5:37:2b:10:e1:e1:
         95:1b:76:43:d2:8d:2f:32:e3:6c:f2:66:ef:9b:7b:c7:37:ae:
         69:4d:79:02:59:94:30:21:43:84:27:7c:ec:1f:fb:f7:88:57:
         6d:31:24:c7:76:c3:46:ad:83:06:58:74:0e:bc:b8:39:b6:32:
         a8:2d:ea:75:f3:87:bf:0f:d2:a3:fd:09:3e:b7:38:b8:d5:ae:
         da:ab:44:72:eb:05:2b:ae:03:88:01:8d:b7:67:62:d8:8b:49:
         e6:65:f2:c0:4a:20:81:be:93:19:b5:c9:cf:e7:a8:a5:e4:c9:
         6f:22:1f:56:95:99:5b:cc:12:a8:39:44:fb:d8:61:66:7d:e1:
         b2:38:93:ac:d6:d9:74:e5:ce:9f:cb:17:b5:bd:c6:e2:50:f4:
         5f:67:d9:b7:f6:9f:71:b2:01:6d:af:91:b3:a3:2b:e7:d0:36:
         6d:18:a0:f9:37:45:9d:c7:ba:64:1a:64:53:73:48:cd:63:18:
         81:2b:f1:96:a7:52:65:e2:a9:2e:58:99:42:b4:d0:9f:1b:08:
         1b:70:e8:28:d2:2c:a6:8e:13:2c:ca:47:88:13:45:40:d9:aa:
         3e:b9:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:01:08 2026 by rpki-client