Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36382e302f32332d3233203d3e203631393031.roa
File:                     3139312e352e36382e302f32332d3233203d3e203631393031.roa (raw, json)
Hash identifier:          eMELCWx9XClnmUthF+SEU0JIoAIunKtyMlyji+92Taw=
Subject key identifier:   01:4B:7A:84:41:2E:95:85:07:68:F9:53:D5:92:D3:B3:B5:02:1C:27
Certificate issuer:       /CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
Certificate serial:       0BDCC71A2D75D6FC67BB8671C384B8FDE0AA3BBC
Authority key identifier: 78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36382e302f32332d3233203d3e203631393031.roa
Signing time:             Wed 12 Aug 2026 16:18:28 +0000
ROA not before:           Wed 12 Aug 2026 16:13:28 +0000
ROA not after:            Wed 11 Aug 2027 16:18:28 +0000
asID:                     61901
IP address blocks:        191.5.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dc:c7:1a:2d:75:d6:fc:67:bb:86:71:c3:84:b8:fd:e0:aa:3b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780DFD61E5471F245A6BC6DD493695F7ED0CE958
        Validity
            Not Before: Aug 12 16:13:28 2026 GMT
            Not After : Aug 11 16:18:28 2027 GMT
        Subject: CN=014B7A84412E95850768F953D592D3B3B5021C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:f2:1d:34:3c:75:e0:66:ab:6e:57:8f:5c:
                    7b:70:c7:3a:c9:c8:80:b7:10:ae:c2:85:8d:92:cd:
                    6c:50:81:f7:9a:63:60:b7:d9:72:82:c6:ad:4a:98:
                    e6:3d:47:17:95:99:d1:6c:90:e0:b6:25:e9:b8:54:
                    30:2d:50:3e:0d:bb:34:80:0e:3a:c1:37:23:b2:de:
                    70:3c:5a:36:0c:96:dc:82:ff:f2:21:f9:fb:35:a6:
                    f4:34:48:ce:f6:dd:fb:ea:89:05:de:cc:3c:a9:a3:
                    e8:4a:7b:1a:33:27:aa:83:f2:75:04:fc:b3:bc:dc:
                    a5:8f:86:d4:12:9d:51:c3:c0:54:98:26:d4:48:ec:
                    4a:9d:d5:76:86:55:3e:4d:ae:4d:6f:bc:09:88:70:
                    61:65:6a:f7:e7:01:2f:72:20:e4:8d:52:ad:4f:47:
                    0b:05:e4:2d:22:0c:e7:12:6a:be:50:8b:92:72:e4:
                    c9:55:bf:90:bb:d6:b9:ce:44:2c:d0:2d:28:cd:95:
                    e9:d6:f6:70:9e:ef:4c:f4:0e:fa:82:14:41:4e:03:
                    52:e1:d3:dc:64:30:60:3f:36:c9:02:5a:45:5b:6c:
                    8b:51:3e:65:0b:d8:85:11:14:c0:48:8a:b6:93:6d:
                    67:b6:3a:9a:10:91:c2:73:19:08:d5:07:aa:05:af:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:7A:84:41:2E:95:85:07:68:F9:53:D5:92:D3:B3:B5:02:1C:27
            X509v3 Authority Key Identifier:
                keyid:78:0D:FD:61:E5:47:1F:24:5A:6B:C6:DD:49:36:95:F7:ED:0C:E9:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/780DFD61E5471F245A6BC6DD493695F7ED0CE958.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780DFD61E5471F245A6BC6DD493695F7ED0CE958.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/3139312e352e36382e302f32332d3233203d3e203631393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:45:c9:cd:46:8f:21:a8:1b:0d:ed:ef:f2:30:17:ba:c5:27:
         29:6a:13:cc:b8:34:6b:c4:d0:4d:02:48:c6:19:71:ab:a5:c0:
         a7:bc:62:b4:fc:5f:8a:8a:10:f7:e6:04:84:ca:ec:83:8c:88:
         b2:71:86:bc:e1:7a:30:c0:7b:9e:99:5b:25:4f:63:77:30:e5:
         05:11:1e:b4:9d:7a:81:7f:83:f9:87:be:0d:7a:0d:38:2d:81:
         ba:16:25:10:d3:46:54:d0:5c:ad:b1:cf:fc:2b:d5:ef:dc:89:
         5d:d2:ca:5c:6e:6b:1f:c7:76:66:b9:8a:28:c5:fa:2a:b4:9b:
         1b:6e:5e:36:7d:70:cf:08:a4:b3:c3:84:69:18:d9:90:dd:41:
         83:69:28:cb:d2:7e:8f:a4:63:ac:38:b4:40:53:a3:11:2f:ef:
         04:60:dd:30:74:61:fe:4d:56:2d:5b:7e:25:6a:df:af:8e:86:
         24:b4:36:51:68:c6:cc:7f:69:8e:f9:36:e2:36:42:eb:f5:5c:
         3e:fb:d0:23:d2:d8:66:b0:04:a4:19:a8:82:46:9f:db:48:35:
         12:03:32:df:93:b6:9b:51:4e:6a:09:cc:dd:9c:4a:63:4e:a5:
         1d:c9:de:3b:e0:25:dd:01:e0:36:63:2b:32:88:b2:4a:41:04:
         05:7d:56:67
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUC9zHGi111vxnu4Zxw4S4/eCqO7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgwREZENjFFNTQ3MUYyNDVBNkJDNkRENDkzNjk1RjdF
RDBDRTk1ODAeFw0yNjA4MTIxNjEzMjhaFw0yNzA4MTExNjE4MjhaMDMxMTAvBgNV
BAMTKDAxNEI3QTg0NDEyRTk1ODUwNzY4Rjk1M0Q1OTJEM0IzQjUwMjFDMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTBfIdNDx14GarblePXHtwxzrJ
yIC3EK7ChY2SzWxQgfeaY2C32XKCxq1KmOY9RxeVmdFskOC2Jem4VDAtUD4NuzSA
DjrBNyOy3nA8WjYMltyC//Ih+fs1pvQ0SM723fvqiQXezDypo+hKexozJ6qD8nUE
/LO83KWPhtQSnVHDwFSYJtRI7Eqd1XaGVT5Nrk1vvAmIcGFlavfnAS9yIOSNUq1P
RwsF5C0iDOcSar5Qi5Jy5MlVv5C71rnORCzQLSjNlenW9nCe70z0DvqCFEFOA1Lh
09xkMGA/NskCWkVbbItRPmUL2IURFMBIiraTbWe2OpoQkcJzGQjVB6oFrwOLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAUt6hEEulYUHaPlT1ZLTs7UCHCcwHwYDVR0j
BBgwFoAUeA39YeVHHyRaa8bdSTaV9+0M6VgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFMUnI2TnhjeHVTZldpTDJ5V1ZuWGNSTk4xZTQzdDhiMjZ6MzJoN2R5
dkMvMC83ODBERkQ2MUU1NDcxRjI0NUE2QkM2REQ0OTM2OTVGN0VEMENFOTU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc4MERGRDYxRTU0NzFGMjQ1
QTZCQzZERDQ5MzY5NUY3RUQwQ0U5NTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxTFJyNk54Y3h1U2ZXaUwyeVdWblhjUk5OMWU0M3Q4YjI2ejMyaDdkeXZDLzAv
MzEzOTMxMmUzNTJlMzYzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2MzEzOTMw
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG/BUQwDQYJKoZIhvcNAQELBQADggEBAINFyc1GjyGoGw3t
7/IwF7rFJylqE8y4NGvE0E0CSMYZcaulwKe8YrT8X4qKEPfmBITK7IOMiLJxhrzh
ejDAe56ZWyVPY3cw5QURHrSdeoF/g/mHvg16DTgtgboWJRDTRlTQXK2xz/wr1e/c
iV3Sylxuax/Hdma5iijF+iq0mxtuXjZ9cM8IpLPDhGkY2ZDdQYNpKMvSfo+kY6w4
tEBToxEv7wRg3TB0Yf5NVi1bfiVq36+OhiS0NlFoxsx/aY75NuI2Quv1XD770CPS
2GawBKQZqIJGn9tINRIDMt+TtptRTmoJzN2cSmNOpR3J3jvgJd0B4DZjKzKIskpB
BAV9Vmc=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:24 2026 by rpki-client