Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa
File:                     3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa (raw, json)
Hash identifier:          zOHpJoRPlIKL7eFDPRmq2En2PuITOu8wm7BEVTY4JrE=
Subject key identifier:   C0:7C:4C:8A:10:64:21:81:48:3E:86:F3:7C:B5:3F:48:01:F6:F5:91
Certificate issuer:       /CN=1E25984D718583699E6F98027D46C4F064FED1A8
Certificate serial:       75A0A30D494FE58CB358E40CD533F1D9891704C3
Authority key identifier: 1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa
Signing time:             Fri 03 Apr 2026 14:00:21 +0000
ROA not before:           Fri 03 Apr 2026 13:55:21 +0000
ROA not after:            Fri 02 Apr 2027 14:00:21 +0000
asID:                     263676
IP address blocks:        191.241.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl
                          rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 02:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:a3:0d:49:4f:e5:8c:b3:58:e4:0c:d5:33:f1:d9:89:17:04:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E25984D718583699E6F98027D46C4F064FED1A8
        Validity
            Not Before: Apr  3 13:55:21 2026 GMT
            Not After : Apr  2 14:00:21 2027 GMT
        Subject: CN=C07C4C8A10642181483E86F37CB53F4801F6F591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:e9:93:e7:3d:ef:a4:33:aa:2b:8f:15:d0:
                    35:83:2f:3a:1d:fe:16:ed:bd:e4:fb:f8:c3:60:1e:
                    ab:0b:64:bc:7d:7b:64:f1:b0:70:fe:de:02:81:37:
                    da:0b:90:82:45:a7:99:ee:96:a3:c6:24:e1:b8:9e:
                    9f:dd:4c:4f:ae:c1:9c:b1:aa:7f:9a:65:e5:c4:07:
                    59:3a:23:c2:be:a7:2e:60:02:17:31:d8:22:71:1e:
                    46:d1:03:0b:02:83:41:36:a7:b6:76:ee:24:8b:ee:
                    b7:dc:d2:76:b3:83:d5:20:aa:3e:40:a7:37:ba:8f:
                    20:53:6f:99:2b:a6:bb:a1:49:d4:4e:42:ee:3d:59:
                    c2:6d:b3:a5:f5:67:b0:43:91:86:42:cc:f5:9a:54:
                    8c:66:a1:e1:b2:93:60:06:5c:7b:3a:f4:98:9a:ba:
                    16:99:b3:b5:bc:b2:79:04:ce:1b:74:ef:21:eb:ab:
                    9f:3c:f6:bf:f4:a4:c9:d8:d8:f0:fb:80:b0:bd:e1:
                    3b:d9:d9:55:5b:bb:9d:37:9c:f1:71:9a:62:21:2b:
                    77:7c:ce:f6:4d:1e:b6:c1:b1:f8:e6:e4:1c:2b:9c:
                    bb:f7:4d:90:66:0b:35:ca:8a:3b:96:a2:09:7d:57:
                    99:e8:19:ad:81:ce:25:32:4f:b1:6a:6c:52:54:83:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7C:4C:8A:10:64:21:81:48:3E:86:F3:7C:B5:3F:48:01:F6:F5:91
            X509v3 Authority Key Identifier:
                keyid:1E:25:98:4D:71:85:83:69:9E:6F:98:02:7D:46:C4:F0:64:FE:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/1E25984D718583699E6F98027D46C4F064FED1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E25984D718583699E6F98027D46C4F064FED1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFkwFvANtUSCBVJLmTDBCoJSCcodKssoaAL24gzmS5qk/0/3139312e3234312e3137392e302f32342d3234203d3e20323633363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:a9:10:75:1a:90:5b:74:41:b4:c4:86:60:4c:60:39:60:cd:
         cd:1a:80:ef:d8:3a:8a:3d:54:a3:e0:74:b4:43:e6:b4:75:f1:
         58:b1:70:a5:07:73:9c:bc:f6:9c:be:08:4f:97:e8:02:70:22:
         ee:a1:9e:0e:e1:27:33:c3:93:2a:ea:ec:60:e1:34:f7:25:ed:
         19:32:8c:34:e2:9a:ec:1a:0e:65:3b:ab:e2:d9:d9:d4:cf:80:
         9e:2a:13:cc:6c:95:c1:bc:10:c6:73:f1:31:f3:2a:1d:7c:f7:
         1d:0d:ba:35:60:96:8b:ef:26:b7:58:29:04:14:02:ac:59:45:
         a4:b6:d3:76:0b:3e:42:c5:ad:49:fe:90:1f:36:f9:d6:93:04:
         6a:d1:81:33:e0:74:40:a5:ab:f7:c4:f0:2f:31:a5:6f:d4:c5:
         bf:64:0d:16:40:38:6a:f4:ca:6a:e9:8a:fd:04:4c:db:62:2f:
         b8:3e:0e:44:5c:06:3e:25:1c:4f:4b:87:4b:2d:01:c0:5c:a4:
         b7:25:29:82:cf:a4:89:f9:10:2e:85:78:84:e6:02:e7:20:4d:
         32:26:04:3e:ed:4a:72:f2:53:40:c8:7c:f7:74:7a:fb:fd:0a:
         e8:40:8d:6b:95:f3:7c:2e:09:a0:b6:b7:79:a4:af:1c:b1:69:
         a8:ca:57:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:55:11 2026 by rpki-client