Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32342d3234203d3e203631393031.roa
File:                     3139312e352e36342e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          PfkiwHbK0nt+EBk6AM+w9EtQmjCFpK4OyGoEGWMI2pU=
Subject key identifier:   ED:DE:AF:77:36:55:16:84:A1:D9:BC:02:48:30:4A:FB:61:73:00:DB
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       1D22C5E37F3AED53A0C9AEC9C6CCBF5D3FC3453D
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32342d3234203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:30 +0000
ROA not before:           Wed 12 Aug 2026 16:13:30 +0000
ROA not after:            Wed 11 Aug 2027 16:18:30 +0000
asID:                     61901
IP address blocks:        191.5.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:22:c5:e3:7f:3a:ed:53:a0:c9:ae:c9:c6:cc:bf:5d:3f:c3:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:30 2026 GMT
            Not After : Aug 11 16:18:30 2027 GMT
        Subject: CN=EDDEAF7736551684A1D9BC0248304AFB617300DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:2c:61:8a:3c:30:fb:b6:35:3d:ec:99:20:
                    e7:99:ab:dd:d5:00:30:dd:56:47:02:ca:6a:c5:73:
                    5c:24:ee:a6:61:c0:58:41:20:60:3b:69:8e:c8:35:
                    ba:00:53:f3:cc:47:1b:46:3f:9c:dd:60:dc:3d:0e:
                    84:66:8c:0c:dc:57:e3:45:20:13:42:33:24:29:cc:
                    4c:43:e0:14:95:bf:3c:0c:27:90:25:61:6c:18:26:
                    53:d3:96:66:d7:73:a2:9b:5e:ec:e9:21:03:9c:4e:
                    ba:a9:d0:17:56:81:01:d4:ff:74:52:cc:04:4a:02:
                    be:f3:f4:02:34:c7:42:f6:25:31:46:76:d8:2a:3b:
                    6a:7f:0c:74:ee:9f:dc:eb:63:0b:f1:1d:65:ff:5f:
                    89:27:18:9e:3c:89:1a:3d:67:92:d6:d2:35:97:29:
                    dc:42:5c:13:99:e7:70:d4:39:59:1e:89:13:36:2e:
                    f0:a9:1c:3d:e0:46:d7:ac:88:63:4e:5e:4e:c9:1b:
                    18:e8:1f:31:9d:43:17:b6:f8:a9:8f:5e:76:24:2c:
                    b1:da:2c:5d:29:7e:a5:db:1f:07:a1:78:60:61:d2:
                    bb:03:0a:ef:ae:0b:87:03:b8:35:03:1e:fd:d6:e8:
                    a3:ac:d8:08:a7:d4:ea:35:af:b8:5e:8f:f4:45:bb:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:AF:77:36:55:16:84:A1:D9:BC:02:48:30:4A:FB:61:73:00:DB
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36342e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:8f:8e:bd:86:6f:aa:3f:a3:26:36:67:6d:b3:b0:5f:30:
         64:88:f8:76:04:d5:75:81:6a:88:07:f5:6e:3d:a9:05:95:ca:
         07:ca:05:8b:db:92:b6:57:f2:a1:55:6a:72:3f:87:ff:e0:42:
         b6:c0:08:51:8c:c1:7b:22:ca:b9:ec:5e:4e:38:ce:16:bb:a6:
         16:f1:1f:b7:1c:4b:84:4b:09:9e:66:ca:42:8a:dc:24:ff:17:
         9c:75:02:19:42:98:4f:4c:94:68:c5:47:d0:4e:11:71:51:f6:
         b1:f1:f6:a4:11:16:18:d8:8a:da:13:88:90:0b:d7:6d:c6:c5:
         92:f2:5e:fa:6c:80:48:6c:40:a6:e5:0f:67:16:48:41:ae:15:
         f9:13:a1:41:c2:f4:6e:eb:68:02:16:d2:47:4f:ea:05:d4:3e:
         13:4d:1e:00:0e:ea:8a:95:23:47:33:6f:e7:b6:ef:fa:0e:02:
         d8:e6:ce:26:95:9a:83:a5:6f:be:99:3e:f0:42:57:6c:fc:57:
         7e:0c:85:6c:4c:56:0c:8f:e9:6f:df:29:eb:59:d7:c3:11:3f:
         f3:5b:ed:d6:1b:a3:87:61:99:66:24:8c:4d:41:7a:76:5c:68:
         c2:ab:68:ce:50:a3:bd:bd:f7:da:58:38:b1:5b:e0:28:fb:f3:
         c6:3b:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:44 2026 by rpki-client