Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32332d3233203d3e20323730333337.roa
File:                     3139302e38332e34382e302f32332d3233203d3e20323730333337.roa (raw, json)
Hash identifier:          gKdPcXP/u8msYR3xuq67YGwTm6ZHK4KufBiQabNIMYk=
Subject key identifier:   B3:45:53:3A:D9:F0:0B:C2:44:04:B4:42:4E:1D:BF:BA:2F:22:02:2B
Certificate issuer:       /CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
Certificate serial:       1A9E7A1EE4F9E3CF69EB945A3720F91F819DB61D
Authority key identifier: 7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32332d3233203d3e20323730333337.roa
Signing time:             Tue 18 Aug 2026 13:50:53 +0000
ROA not before:           Tue 18 Aug 2026 13:45:53 +0000
ROA not after:            Tue 17 Aug 2027 13:50:53 +0000
asID:                     270337
IP address blocks:        190.83.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9e:7a:1e:e4:f9:e3:cf:69:eb:94:5a:37:20:f9:1f:81:9d:b6:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
        Validity
            Not Before: Aug 18 13:45:53 2026 GMT
            Not After : Aug 17 13:50:53 2027 GMT
        Subject: CN=B345533AD9F00BC24404B4424E1DBFBA2F22022B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:68:9e:d5:72:b7:43:43:49:f8:ba:a3:02:
                    87:b2:a1:cb:e7:b5:0e:22:14:b6:69:ba:23:f5:5e:
                    54:d8:0a:82:cf:22:4e:3e:ba:95:18:c5:6b:02:47:
                    0b:f1:7e:5a:59:5b:b6:72:95:ac:81:57:fa:62:71:
                    ec:91:5f:23:7e:f5:6f:03:bc:93:df:ab:61:07:6b:
                    01:20:fc:ca:be:55:a3:9d:dc:76:fb:4f:4c:a1:96:
                    7c:86:95:67:a4:c6:5a:8e:02:b6:f4:3a:5e:0f:c3:
                    47:f1:52:b5:17:a8:7b:b8:d3:04:f1:a6:2b:36:df:
                    81:5d:03:03:d6:10:31:d3:ed:79:6e:84:88:5f:a7:
                    c3:1e:3b:30:22:f6:66:78:a7:0b:44:8f:c4:b3:a1:
                    ee:43:30:cb:d1:c4:13:fa:11:39:6b:d7:84:31:c0:
                    21:90:d7:13:85:a9:b2:91:7a:e7:e0:70:ec:97:5d:
                    0e:22:bf:b4:57:e6:22:86:34:7b:40:08:15:92:a3:
                    48:93:e2:72:64:32:eb:0a:40:43:1c:ba:b0:ee:b4:
                    53:17:35:83:49:0c:4f:09:64:07:51:76:8b:8e:40:
                    aa:ed:6e:59:d0:5a:f4:5f:83:0c:b8:63:20:fc:f7:
                    ab:7e:f8:2d:e3:41:ca:13:80:a0:b1:f9:6f:71:66:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:45:53:3A:D9:F0:0B:C2:44:04:B4:42:4E:1D:BF:BA:2F:22:02:2B
            X509v3 Authority Key Identifier:
                keyid:7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32332d3233203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:85:5e:47:be:a5:49:39:8c:b1:60:15:b7:ae:a7:f9:e3:49:
         de:d3:f9:0f:ad:6f:e6:1d:d7:48:3a:bd:5a:90:04:5f:ba:1a:
         ff:27:82:38:d8:e8:d6:af:28:14:8f:10:36:12:fc:e3:97:56:
         31:d1:7e:8a:bc:cb:7f:b7:f4:b7:77:e1:5e:a9:b5:31:01:1b:
         7f:b6:16:62:bf:86:f3:d3:0a:c1:74:38:b2:81:a6:ad:c4:36:
         e8:d0:0b:41:0f:bb:68:9b:a2:ac:70:30:22:3a:92:04:e8:4c:
         e2:26:1e:bd:61:9c:de:16:bf:81:21:b7:91:ca:36:46:cd:31:
         15:3d:71:bc:6c:db:c3:7a:a3:05:09:58:dd:10:9b:14:f3:5c:
         88:2d:32:8d:e7:71:d9:76:d2:7f:dc:7e:0c:c2:02:4a:c2:9f:
         23:cd:b4:1c:d5:ec:7c:cf:e4:55:21:4c:65:57:03:66:72:9e:
         c8:39:92:f9:e6:c5:1c:7f:0d:d4:31:79:30:23:6d:41:6d:17:
         0c:95:8a:66:32:2b:30:19:a2:34:df:87:9d:dc:a9:ec:5a:78:
         50:1e:e5:89:0f:a4:9a:89:19:a4:e8:c3:46:c2:04:d2:86:40:
         c6:97:8b:57:ba:c8:bc:f0:ce:b1:c3:cb:5f:50:d0:2b:b5:5d:
         0b:04:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:00 2026 by rpki-client