Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa
File:                     3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa (raw, json)
Hash identifier:          NC1wk1i96CUUNpM2CfGTQmTtq3kEotHmazN3Bm2u4xo=
Subject key identifier:   81:03:89:46:30:53:9A:D2:0C:DB:CD:1C:E9:26:EE:0B:83:F0:AD:42
Certificate issuer:       /CN=6F18B02946B841B9A6AB2464888E7201F4B6C539
Certificate serial:       1B13B07F4E6D09A8319922D71714408D76C702EF
Authority key identifier: 6F:18:B0:29:46:B8:41:B9:A6:AB:24:64:88:8E:72:01:F4:B6:C5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa
Signing time:             Mon 26 Oct 2026 14:41:25 +0000
ROA not before:           Mon 26 Oct 2026 14:36:25 +0000
ROA not after:            Mon 25 Oct 2027 14:41:25 +0000
asID:                     263498
IP address blocks:        191.243.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.crl
                          rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 06:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:b0:7f:4e:6d:09:a8:31:99:22:d7:17:14:40:8d:76:c7:02:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F18B02946B841B9A6AB2464888E7201F4B6C539
        Validity
            Not Before: Oct 26 14:36:25 2026 GMT
            Not After : Oct 25 14:41:25 2027 GMT
        Subject: CN=8103894630539AD20CDBCD1CE926EE0B83F0AD42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ea:5c:a7:d0:18:c0:e9:b2:74:17:63:c0:e1:
                    ed:d6:46:a1:0d:fc:fd:b0:9f:d3:b1:79:e2:77:ce:
                    e6:66:fd:32:e6:54:7f:ce:1d:ea:db:e0:e5:45:f3:
                    49:7b:6d:5d:35:48:c7:dc:22:f4:38:eb:ab:dd:36:
                    4d:61:cf:3e:f5:8e:a7:21:0d:ef:35:8d:73:65:cc:
                    dc:3f:06:b1:f7:79:ce:ce:9d:81:14:b5:07:0f:b1:
                    4f:fd:65:31:38:26:50:4b:85:64:55:f2:24:0d:0b:
                    ed:c4:d9:5e:3d:af:65:48:09:84:e8:e0:75:4a:b2:
                    fb:48:c2:cf:22:1e:50:54:6c:e9:df:6c:05:4f:82:
                    f2:74:b2:6d:c7:64:6f:ee:38:4b:74:d1:e0:d7:3d:
                    c3:90:1b:7a:79:8f:90:da:06:07:db:8c:82:b8:c5:
                    d3:c8:bd:ad:3d:7b:55:ab:8c:a8:f5:93:ad:0b:65:
                    0a:db:6b:a5:48:31:8f:3b:c7:b9:d2:e7:b3:59:e9:
                    7d:53:fd:c1:21:9e:63:b5:a6:16:2f:6f:5e:c8:f3:
                    e4:c7:3d:a0:8c:48:6f:62:77:e2:df:32:79:fe:9f:
                    af:86:54:d7:18:c1:13:a7:17:30:2b:d0:95:3c:53:
                    07:d3:94:62:b8:bf:c6:b9:66:33:c8:7a:82:38:fa:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:03:89:46:30:53:9A:D2:0C:DB:CD:1C:E9:26:EE:0B:83:F0:AD:42
            X509v3 Authority Key Identifier:
                keyid:6F:18:B0:29:46:B8:41:B9:A6:AB:24:64:88:8E:72:01:F4:B6:C5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/6F18B02946B841B9A6AB2464888E7201F4B6C539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F18B02946B841B9A6AB2464888E7201F4B6C539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/0/3139312e3234332e35322e302f32322d3332203d3e20323633343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:51:cd:55:0c:7b:be:1b:33:23:c3:61:e5:af:79:49:67:a7:
         74:6f:db:4e:d6:07:a5:f2:41:5c:a0:db:c6:87:da:c1:b3:94:
         46:14:16:aa:25:59:4d:58:f9:1a:d7:a2:3c:e3:e2:f1:73:5c:
         bd:73:72:c1:a2:c8:fc:76:95:ce:cb:e4:38:87:2d:1b:81:0e:
         a6:5f:87:69:d0:ad:20:c3:31:a1:64:b6:22:bb:e6:b0:45:15:
         5e:a9:a2:4e:28:91:46:e0:3b:14:7e:18:9b:09:2f:c6:94:d5:
         b8:aa:54:5f:63:63:c8:d7:48:4c:be:c1:e5:47:c2:ad:06:1b:
         e1:85:9d:7c:9f:21:c9:b2:6a:29:b5:8a:c5:01:26:25:8d:80:
         67:4a:c2:2b:ee:49:56:ca:c2:17:4a:fe:56:c8:55:4a:fe:c0:
         2d:ef:1c:8e:6e:3f:b7:13:e7:58:8b:7a:cd:58:93:49:7e:0d:
         1c:1d:e0:1b:91:3d:ee:07:a1:90:46:a5:d0:6b:a7:21:44:5e:
         5e:1e:ec:f9:3a:2c:c5:31:2f:d0:c1:94:af:a1:57:2d:a9:48:
         5c:b3:2a:8f:44:b3:10:ff:2f:5a:39:04:42:7f:44:85:f7:11:
         0c:61:c8:c5:3b:4b:d2:82:ff:9b:35:ea:2a:02:05:0d:77:30:
         5c:74:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:37:26 2026 by rpki-client