Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
File:                     3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa (raw, json)
Hash identifier:          /Z3XMiY98sNsMmrRNPq8dZeRl/NnXCcYJ2VoPeAP/7s=
Subject key identifier:   79:12:6C:D0:FE:48:D8:08:1A:81:A5:08:78:56:4D:56:F5:16:5D:8E
Certificate issuer:       /CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
Certificate serial:       756C6AF6411EEBF4004656A0364AA62260E55543
Authority key identifier: 6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa
Signing time:             Wed 08 Apr 2026 15:30:49 +0000
ROA not before:           Wed 08 Apr 2026 15:25:49 +0000
ROA not after:            Wed 07 Apr 2027 15:30:49 +0000
asID:                     263518
IP address blocks:        191.243.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl
                          rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6c:6a:f6:41:1e:eb:f4:00:46:56:a0:36:4a:a6:22:60:e5:55:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC
        Validity
            Not Before: Apr  8 15:25:49 2026 GMT
            Not After : Apr  7 15:30:49 2027 GMT
        Subject: CN=79126CD0FE48D8081A81A50878564D56F5165D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:9b:59:da:79:c2:91:8e:6e:b0:4d:84:6a:
                    1f:f7:43:1c:20:30:a0:c4:28:ba:49:5f:cf:b9:b5:
                    c3:37:f0:04:0c:2e:c0:db:1a:fb:7f:d0:2f:2f:40:
                    d6:e3:e1:64:96:82:5a:e2:56:99:25:03:03:26:63:
                    92:c6:36:5c:d1:89:8d:02:0a:67:b6:74:2d:16:39:
                    c8:4c:bc:c3:49:fe:89:18:1d:9a:76:6f:05:f6:8f:
                    26:eb:03:ee:83:09:7a:41:dc:85:91:c8:39:f5:ef:
                    e9:00:2a:8c:57:1c:d0:1e:20:10:b9:8d:94:5d:e6:
                    74:b3:87:34:8a:35:68:ef:3a:84:b3:bf:8e:05:5b:
                    94:b6:88:d8:a9:ba:89:e9:8a:3d:b1:e5:bb:e1:da:
                    f4:a9:34:c1:c4:6c:f9:28:8f:74:89:cc:4f:48:92:
                    ec:2e:2f:ea:2e:82:e9:c4:e2:32:8a:7a:c5:3f:29:
                    07:23:a2:f6:7b:b8:a3:4f:9b:5f:3b:8f:1a:a6:6b:
                    d0:f9:55:ad:5b:be:60:13:d3:e3:4c:b3:a4:96:8e:
                    94:1c:d4:83:9d:be:8e:a3:9d:66:32:ce:06:c0:60:
                    04:00:a2:da:b6:df:f2:cf:eb:4f:2c:13:f8:66:09:
                    b5:ae:f4:2b:95:62:45:b4:53:3a:86:90:b1:33:d0:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:6C:D0:FE:48:D8:08:1A:81:A5:08:78:56:4D:56:F5:16:5D:8E
            X509v3 Authority Key Identifier:
                keyid:6C:5B:B5:16:1B:41:96:C2:CB:83:2C:B0:DD:99:1A:F8:8A:CB:36:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C5BB5161B4196C2CB832CB0DD991AF88ACB36CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ngeejccPaz3imVme3qD47iPx6XtVvyrkKVL1DT3juPz/0/3139312e3234332e3231352e302f32342d3234203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:63:1f:01:42:ee:ed:3b:1a:d5:66:ed:2f:a1:c6:dc:2b:1e:
         2f:06:d4:98:15:cf:ac:48:3e:7a:8f:e1:e8:30:df:a8:7d:1d:
         61:68:4d:0b:05:3a:c7:a5:7b:c4:df:52:5d:e4:9a:f1:0e:b0:
         ab:ff:ab:7e:6e:f4:f4:02:9a:22:99:32:73:94:a3:c4:95:b9:
         87:34:ae:51:91:d2:85:7b:05:41:7a:37:22:5a:2d:2b:22:c1:
         28:b0:b2:78:d3:6f:c4:ee:89:07:f5:70:ac:c4:2d:49:c7:c1:
         ee:7f:ac:5f:c5:a3:96:7c:9a:00:8d:32:ee:a7:b2:1c:be:9e:
         35:e0:6f:55:26:72:7f:e4:fc:61:7a:64:ab:48:cd:47:9e:64:
         4b:2d:69:24:ff:46:2f:49:9f:69:50:ff:f3:e4:62:ea:da:8c:
         93:7a:2a:03:f0:3d:b6:3a:0a:82:cb:ea:4a:09:c1:17:23:b4:
         65:56:ab:85:5c:5c:c6:72:28:38:85:f4:85:78:a3:a9:dc:08:
         81:f8:8a:8b:de:e1:33:42:78:0d:6e:4f:17:f0:a0:eb:e8:03:
         3f:3c:70:9d:e1:94:bc:90:61:65:77:98:08:af:e0:5a:40:b8:
         db:f3:3d:71:6d:ca:fc:7b:22:0c:fc:9c:cb:a2:30:8f:a4:52:
         c2:53:d9:89
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdWxq9kEe6/QARlagNkqmImDlVUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM1QkI1MTYxQjQxOTZDMkNCODMyQ0IwREQ5OTFBRjg4
QUNCMzZDQzAeFw0yNjA0MDgxNTI1NDlaFw0yNzA0MDcxNTMwNDlaMDMxMTAvBgNV
BAMTKDc5MTI2Q0QwRkU0OEQ4MDgxQTgxQTUwODc4NTY0RDU2RjUxNjVEOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY15tZ2nnCkY5usE2Eah/3Qxwg
MKDEKLpJX8+5tcM38AQMLsDbGvt/0C8vQNbj4WSWglriVpklAwMmY5LGNlzRiY0C
Cme2dC0WOchMvMNJ/okYHZp2bwX2jybrA+6DCXpB3IWRyDn17+kAKoxXHNAeIBC5
jZRd5nSzhzSKNWjvOoSzv44FW5S2iNipuonpij2x5bvh2vSpNMHEbPkoj3SJzE9I
kuwuL+ougunE4jKKesU/KQcjovZ7uKNPm187jxqma9D5Va1bvmAT0+NMs6SWjpQc
1IOdvo6jnWYyzgbAYAQAotq23/LP608sE/hmCbWu9CuVYkW0UzqGkLEz0KcxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeRJs0P5I2AgagaUIeFZNVvUWXY4wHwYDVR0j
BBgwFoAUbFu1FhtBlsLLgyyw3Zka+IrLNswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW5nZWVqY2NQYXozaW1WbWUzcUQ0N2lQeDZYdFZ2eXJrS1ZMMURUM2p1
UHovMC82QzVCQjUxNjFCNDE5NkMyQ0I4MzJDQjBERDk5MUFGODhBQ0IzNkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNUJCNTE2MUI0MTk2QzJD
QjgzMkNCMEREOTkxQUY4OEFDQjM2Q0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzluZ2VlamNjUGF6M2ltVm1lM3FENDdpUHg2WHRWdnlya0tWTDFEVDNqdVB6LzAv
MzEzOTMxMmUzMjM0MzMyZTMyMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL/z1zANBgkqhkiG9w0BAQsFAAOCAQEAdmMf
AULu7Tsa1WbtL6HG3CseLwbUmBXPrEg+eo/h6DDfqH0dYWhNCwU6x6V7xN9SXeSa
8Q6wq/+rfm709AKaIpkyc5SjxJW5hzSuUZHShXsFQXo3IlotKyLBKLCyeNNvxO6J
B/VwrMQtScfB7n+sX8WjlnyaAI0y7qeyHL6eNeBvVSZyf+T8YXpkq0jNR55kSy1p
JP9GL0mfaVD/8+Ri6tqMk3oqA/A9tjoKgsvqSgnBFyO0ZVarhVxcxnIoOIX0hXij
qdwIgfiKi97hM0J4DW5PF/Cg6+gDPzxwneGUvJBhZXeYCK/gWkC42/M9cW3K/Hsi
DPycy6Iwj6RSwlPZiQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 17:53:02 2026 by rpki-client