Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36372e302f32342d3234203d3e203631393031.roa
File:                     3139312e352e36372e302f32342d3234203d3e203631393031.roa (raw, json)
Hash identifier:          JvI4jt6PQj5o7GwZ0+Qc7j9x2KB3Id+0vmbojuCkvuk=
Subject key identifier:   58:CB:BC:17:6C:BC:98:9B:D8:BD:FE:4F:A4:14:D6:C3:0D:B3:AA:B8
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       707DF6EC09F96017906C570C778093CE38EE7771
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36372e302f32342d3234203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:30 +0000
ROA not before:           Wed 12 Aug 2026 16:13:30 +0000
ROA not after:            Wed 11 Aug 2027 16:18:30 +0000
asID:                     61901
IP address blocks:        191.5.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7d:f6:ec:09:f9:60:17:90:6c:57:0c:77:80:93:ce:38:ee:77:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:30 2026 GMT
            Not After : Aug 11 16:18:30 2027 GMT
        Subject: CN=58CBBC176CBC989BD8BDFE4FA414D6C30DB3AAB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:f4:b3:fb:b4:3b:35:e6:60:2b:46:d2:5a:
                    81:e6:94:ea:19:df:28:dc:d0:2c:a2:2f:b2:f4:53:
                    57:41:66:02:73:4f:c5:4f:71:fb:c5:ee:6d:f1:9c:
                    fb:5f:df:64:4b:c9:e3:4e:ba:60:bd:09:c3:13:0e:
                    67:f6:d4:d1:ba:02:a2:e9:23:22:26:05:d3:b5:03:
                    e6:be:bf:fb:23:8a:f8:61:93:10:15:56:42:1c:09:
                    03:95:ac:5f:8d:42:a3:62:df:b9:92:16:22:c3:24:
                    89:fc:5f:bd:cc:08:9c:02:8c:d4:11:3b:f6:af:d0:
                    cd:77:ef:a5:59:f4:8d:22:2d:2f:1c:3a:78:46:27:
                    77:5b:0f:63:ae:03:08:3c:69:9e:93:f8:55:6d:63:
                    dd:7a:48:ec:79:16:36:82:bd:71:81:d4:38:6f:c7:
                    76:a5:73:17:19:f5:6f:03:61:cb:5c:4f:50:f6:d7:
                    48:a2:4a:88:6d:64:6a:8f:8f:c3:a0:cc:b2:e0:dc:
                    81:91:4c:57:1c:8f:9d:2f:f5:bc:f2:7b:25:cd:6c:
                    aa:da:12:6b:0d:c3:77:56:69:ae:98:fc:50:38:6d:
                    a8:b9:4a:bb:0a:74:1a:ce:18:00:03:14:a1:f7:06:
                    f5:34:c7:88:ca:7c:44:32:7c:a6:4d:1d:96:5d:2c:
                    a9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CB:BC:17:6C:BC:98:9B:D8:BD:FE:4F:A4:14:D6:C3:0D:B3:AA:B8
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36372e302f32342d3234203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:88:7f:af:58:ba:87:4a:49:38:8c:3d:0d:6e:b0:12:af:
         82:53:79:ed:04:a8:fb:2a:85:fc:7f:86:c8:a2:d4:7a:59:e7:
         39:de:0e:f9:bd:47:91:b5:20:55:2e:06:8e:e9:56:57:1c:6c:
         ff:56:83:4a:bb:d2:bb:54:e2:83:82:d9:05:27:42:31:54:f2:
         f2:27:7f:e9:1f:68:56:47:20:32:11:e0:af:61:ab:32:36:40:
         9a:08:c4:35:08:7d:6d:fa:2f:92:0b:34:1b:e0:6d:fe:31:df:
         65:c8:94:12:ea:d9:dd:69:40:49:71:a1:ba:7e:33:7f:1f:4b:
         8d:39:c3:b0:e8:be:ac:39:b3:16:6d:41:0a:42:a9:0f:4c:87:
         8b:2e:c4:69:42:d4:14:90:30:8b:b3:5c:70:12:a4:c2:3b:01:
         e6:63:d3:7a:07:12:91:d4:90:6f:b5:83:ae:e3:34:06:72:5a:
         74:3a:70:8f:e9:fb:b7:53:55:0b:68:ff:16:3d:7a:1d:40:f9:
         1b:11:08:8a:13:bd:5d:70:d6:33:8c:49:0b:ab:90:4f:7b:f1:
         c2:ba:79:8f:b4:54:5c:ba:34:b6:4d:e8:01:47:a4:b0:bb:60:
         87:1c:63:76:2f:82:8f:5b:dc:0e:1d:ea:8d:4a:73:a2:dc:ef:
         31:4b:34:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:52 2026 by rpki-client