Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          CDewb7USOz4mzkGxKLIRH0O6lW+WC120RLi8C3JUTSE=
Subject key identifier:   A1:9B:96:DF:AD:C2:33:E4:36:1A:F7:71:2B:7A:67:F6:AF:65:C8:5A
Certificate issuer:       /CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
Certificate serial:       0F557BCC4D0350460958C28EE7D816BE241F6D52
Authority key identifier: 6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa
Signing time:             Wed 08 Apr 2026 15:30:47 +0000
ROA not before:           Wed 08 Apr 2026 15:25:47 +0000
ROA not after:            Wed 07 Apr 2027 15:30:47 +0000
asID:                     263518
IP address blocks:        191.243.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:7b:cc:4d:03:50:46:09:58:c2:8e:e7:d8:16:be:24:1f:6d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
        Validity
            Not Before: Apr  8 15:25:47 2026 GMT
            Not After : Apr  7 15:30:47 2027 GMT
        Subject: CN=A19B96DFADC233E4361AF7712B7A67F6AF65C85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:8e:e8:e9:5c:5c:1c:76:b4:07:84:7d:f3:
                    7f:81:1d:0b:34:de:b4:31:39:b1:b4:0c:37:49:23:
                    d0:bf:80:f2:88:84:42:72:c1:70:f5:97:25:3a:be:
                    c2:45:1f:51:79:92:fe:a3:21:9d:e1:3d:9b:4b:cf:
                    9d:27:a7:03:72:00:b2:66:50:df:d7:5c:ba:04:89:
                    ac:dc:5f:a9:53:03:09:48:7e:20:95:a3:2b:cc:a8:
                    b8:bc:71:2a:61:1e:9c:44:38:88:1d:73:0b:4c:f9:
                    f7:6d:f9:37:6f:d8:6f:f8:99:78:f8:71:c4:ee:79:
                    a0:c9:cf:37:15:0c:3c:65:b2:fc:5e:3b:7d:63:a1:
                    c1:59:ac:e0:58:63:36:d5:04:25:48:d0:05:bf:1f:
                    fb:28:c9:f5:fc:b8:3f:ba:91:89:aa:80:db:ac:58:
                    e9:3a:76:a7:66:e3:0e:91:3f:03:76:e4:ec:91:67:
                    81:dc:04:ba:1f:d6:1d:02:0e:12:25:01:5c:34:55:
                    a0:1b:49:da:5a:02:cb:60:49:71:18:7a:1a:6a:34:
                    00:24:35:7d:40:60:e5:5c:f8:a8:c6:b9:9a:e6:6e:
                    9b:83:e7:a8:71:6a:27:8d:c8:45:e4:cf:64:8b:98:
                    92:12:0d:53:ef:b9:8f:3f:c0:79:8b:f5:75:94:0d:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:96:DF:AD:C2:33:E4:36:1A:F7:71:2B:7A:67:F6:AF:65:C8:5A
            X509v3 Authority Key Identifier:
                keyid:6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231342e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e9:4e:b1:25:77:36:6c:0a:16:51:dc:fc:2c:ec:ae:ee:61:
         06:f0:95:a9:86:2d:37:15:7c:5c:7a:85:c2:db:3a:15:53:90:
         49:b0:eb:88:89:2e:31:05:ec:68:7f:3a:c5:6e:e1:03:f6:2c:
         c9:d6:dd:a4:b3:d1:12:6e:ff:0d:c9:b3:cc:b4:6e:b5:b5:21:
         86:0a:01:42:11:ca:25:9b:9c:d6:85:48:31:a6:b2:56:51:b6:
         15:a6:c0:92:00:f5:f9:75:34:ad:c5:51:01:47:2d:69:bf:8f:
         c4:a3:25:79:b6:ff:89:fe:c1:49:e0:6c:7e:30:e0:94:07:f2:
         ae:8e:cd:2c:56:ca:c0:2f:59:07:e7:4a:4f:b7:b4:a5:d7:9d:
         02:5a:fd:fc:0c:18:4e:a4:98:f7:74:ca:ef:7d:4e:7d:eb:ec:
         d2:78:54:35:6c:5a:a8:33:1f:6b:42:9b:21:e8:1e:2c:c4:73:
         0e:ca:75:d7:41:e4:1d:32:b4:82:37:40:90:6d:04:e4:ad:74:
         28:d5:ec:c4:4d:ce:1b:fa:6b:60:ae:f4:e5:6f:fc:de:65:f0:
         83:87:bb:03:66:81:c1:26:0c:be:c9:d1:d4:4a:7b:7e:cc:95:
         8b:2a:5c:04:42:41:7f:37:62:0f:09:19:5f:3e:6f:41:d3:e3:
         42:eb:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:04 2026 by rpki-client