Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36352e302f32342d3234203d3e203631393031.roa
File:                     3139312e352e36352e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          +VmxoPnVppG/zLCU/jsoTnkUhOlu0kzr418FSryYL6U=
Subject key identifier:   9A:FE:B0:11:8C:B8:CD:AB:C7:AE:7A:05:DB:EB:0B:2E:96:B0:02:6A
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       420142C532C33DDAB8A3696F5419109A12775041
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36352e302f32342d3234203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:29 +0000
ROA not before:           Wed 12 Aug 2026 16:13:29 +0000
ROA not after:            Wed 11 Aug 2027 16:18:29 +0000
asID:                     61901
IP address blocks:        191.5.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:01:42:c5:32:c3:3d:da:b8:a3:69:6f:54:19:10:9a:12:77:50:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:29 2026 GMT
            Not After : Aug 11 16:18:29 2027 GMT
        Subject: CN=9AFEB0118CB8CDABC7AE7A05DBEB0B2E96B0026A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:8a:1d:71:1e:18:f1:22:bc:ba:9a:fb:95:
                    ad:05:bc:d5:ca:91:38:c4:8e:f2:7c:22:6f:d0:fe:
                    10:dd:dd:01:03:8f:7a:b1:ad:fd:23:d0:b9:67:b3:
                    68:cb:f8:7b:df:36:11:24:53:4d:6c:27:13:9e:2e:
                    58:6b:f7:04:b8:f8:b8:b3:19:e9:ed:4e:c6:fa:bf:
                    d5:eb:34:22:97:cf:79:da:e5:cf:be:59:c7:5f:3b:
                    af:19:d6:6f:14:69:18:02:cf:3e:da:6e:b9:aa:5e:
                    da:a2:18:bf:f5:4b:0f:98:69:c0:ac:d5:2f:c4:a2:
                    cd:24:62:4f:95:92:f4:fb:43:f2:f2:ca:16:0d:2d:
                    73:50:e3:0b:58:69:aa:a3:77:e2:2e:8a:92:ab:0c:
                    02:cc:fe:9a:af:f0:8e:54:5e:3d:e5:2b:47:62:da:
                    5d:c1:ab:d8:9d:cc:01:76:55:24:41:50:00:78:ce:
                    f9:17:c5:18:87:75:b7:b9:e0:8c:f9:06:49:87:15:
                    4d:b0:8e:38:b3:59:84:17:c7:63:6c:fe:0d:d4:97:
                    36:0f:89:81:af:1b:a1:ca:cf:68:06:d5:61:62:2f:
                    18:1f:14:b9:f3:f8:54:b1:73:bf:92:3c:f5:35:45:
                    13:8a:6f:5b:7c:43:f7:d6:dd:d9:12:bb:e8:6a:06:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:B0:11:8C:B8:CD:AB:C7:AE:7A:05:DB:EB:0B:2E:96:B0:02:6A
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36352e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:8a:55:32:7f:10:ae:e6:8e:7f:db:f0:43:39:42:b1:93:
         c2:d2:1f:60:5c:09:c9:2a:fb:91:67:fd:ad:57:19:06:da:55:
         d8:b5:71:af:0a:35:d8:ba:ac:9c:df:aa:af:13:4e:8b:7a:83:
         f7:ad:fa:b9:be:68:14:ba:27:e2:16:31:6c:41:b1:0c:7a:72:
         3b:74:10:7b:5f:a9:e5:60:2e:98:7f:23:66:c6:11:3c:a9:46:
         e5:c5:e0:79:b3:79:50:40:f0:90:fd:1e:a1:0b:f2:f4:fb:ba:
         b1:ce:13:73:e7:6b:b9:5c:85:6d:13:6d:56:da:36:ac:20:bd:
         66:b1:7f:ba:3f:6c:c6:e6:9b:5d:10:22:27:f7:ac:60:63:94:
         79:cf:e9:d4:27:3a:b3:24:4e:ca:8d:f1:7d:85:99:43:ab:35:
         0a:c5:a5:89:bb:59:6d:e6:76:36:1e:a4:9e:26:44:3b:59:74:
         ee:31:a1:52:bc:9d:6b:17:86:b1:d1:87:0f:18:cf:9a:75:0e:
         ad:9e:98:4f:cf:f1:10:3b:b7:65:0e:86:27:d0:0a:3b:af:0b:
         83:67:48:9c:61:0d:97:2d:c8:b9:36:db:31:1c:4d:42:33:c1:
         e2:0c:59:bf:98:b2:8c:4f:be:d0:23:6a:71:9d:55:4c:dd:56:
         8e:64:b8:b7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUQgFCxTLDPdq4o2lvVBkQmhJ3UEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwREZENjFFNTQ3MUYyNDVBNkJDNkRENDkzNjk1RjdF
RDBDRTk1ODAeFw0yNjA4MTIxNjEzMjlaFw0yNzA4MTExNjE4MjlaMDMxMTAvBgNV
BAMTKDlBRkVCMDExOENCOENEQUJDN0FFN0EwNURCRUIwQjJFOTZCMDAyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoYodcR4Y8SK8upr7la0FvNXK
kTjEjvJ8Im/Q/hDd3QEDj3qxrf0j0Llns2jL+HvfNhEkU01sJxOeLlhr9wS4+Liz
GentTsb6v9XrNCKXz3na5c++WcdfO68Z1m8UaRgCzz7abrmqXtqiGL/1Sw+YacCs
1S/Eos0kYk+VkvT7Q/LyyhYNLXNQ4wtYaaqjd+IuipKrDALM/pqv8I5UXj3lK0di
2l3Bq9idzAF2VSRBUAB4zvkXxRiHdbe54Iz5BkmHFU2wjjizWYQXx2Ns/g3UlzYP
iYGvG6HKz2gG1WFiLxgfFLnz+FSxc7+SPPU1RROKb1t8Q/fW3dkSu+hqBmFvAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUmv6wEYy4zavHrnoF2+sLLpawAmowHwYDVR0j
BBgwFoAUeA39YeVHHyRaa8bdSTaV9+0M6VgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC83ODBERkQ2MUU1NDcxRjI0NUE2QkM2REQ0OTM2OTVGN0VEMENFOTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MERGRDYxRTU0NzFGMjQ1
QTZCQzZERDQ5MzY5NUY3RUQwQ0U5NTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxTFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzAv
MzEzOTMxMmUzNTJlMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzOTMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC/BUEwDQYJKoZIhvcNAQELBQADggEBABxwilUyfxCu5o5/
2/BDOUKxk8LSH2BcCckq+5Fn/a1XGQbaVdi1ca8KNdi6rJzfqq8TTot6g/et+rm+
aBS6J+IWMWxBsQx6cjt0EHtfqeVgLph/I2bGETypRuXF4HmzeVBA8JD9HqEL8vT7
urHOE3Pna7lchW0TbVbaNqwgvWaxf7o/bMbmm10QIif3rGBjlHnP6dQnOrMkTsqN
8X2FmUOrNQrFpYm7WW3mdjYepJ4mRDtZdO4xoVK8nWsXhrHRhw8Yz5p1Dq2emE/P
8RA7t2UOhifQCjuvC4NnSJxhDZctyLk22zEcTUIzweIMWb+YsoxPvtAjanGdVUzd
Vo5kuLc=
-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:51 2026 by rpki-client