Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32342d3234203d3e20323730333337.roa
File:                     3139302e38332e34382e302f32342d3234203d3e20323730333337.roa (raw, json)
Hash identifier:          U2lUbZhOit3+CA8eXcfU58+z4aEYQx4KIPs2rFCuTiM=
Subject key identifier:   54:16:AC:E5:39:66:7C:D8:79:45:F9:18:65:92:61:4B:C7:30:C1:EE
Certificate issuer:       /CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
Certificate serial:       7971872BF77A7854ACDA2F85FBC87337D9898E87
Authority key identifier: 7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32342d3234203d3e20323730333337.roa
Signing time:             Tue 18 Aug 2026 13:50:56 +0000
ROA not before:           Tue 18 Aug 2026 13:45:56 +0000
ROA not after:            Tue 17 Aug 2027 13:50:56 +0000
asID:                     270337
IP address blocks:        190.83.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:71:87:2b:f7:7a:78:54:ac:da:2f:85:fb:c8:73:37:d9:89:8e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
        Validity
            Not Before: Aug 18 13:45:56 2026 GMT
            Not After : Aug 17 13:50:56 2027 GMT
        Subject: CN=5416ACE539667CD87945F9186592614BC730C1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:fb:f2:82:68:16:4a:4d:2d:cf:b9:13:9d:
                    8f:47:78:7c:71:ea:e1:fd:17:1e:9b:99:c2:40:12:
                    22:49:03:fd:9a:f5:76:0e:fe:12:bb:42:ff:5a:3f:
                    8f:d5:41:6d:74:38:3c:81:2a:5e:b3:ec:4b:45:62:
                    4e:fc:0d:91:73:46:88:88:28:f6:8c:87:99:4c:5f:
                    db:b3:91:ad:32:24:90:14:66:de:cf:39:1f:64:bb:
                    c6:4f:13:b6:f0:d3:4b:11:2a:dd:90:60:2e:89:a7:
                    7b:de:fc:4d:5b:6a:7e:24:69:6b:aa:32:08:71:9f:
                    24:cb:b4:83:d2:56:30:4c:c1:0a:cf:d2:fa:28:71:
                    4d:22:17:f8:bc:f5:5d:30:d8:a6:e1:73:93:a2:ff:
                    d0:45:df:ff:08:6b:86:6e:2f:af:3f:9e:06:bb:2f:
                    10:e3:15:6e:6c:21:d5:81:7c:d7:92:8a:16:b3:1b:
                    fd:f9:d3:11:51:b4:60:65:d0:d0:90:2a:d8:e8:6f:
                    67:0c:80:6d:8b:1a:44:46:62:16:de:59:fa:2c:8c:
                    f8:17:bd:82:a2:33:ce:3b:eb:41:30:61:16:12:8f:
                    86:10:e5:16:18:00:17:b8:78:17:10:76:a1:4a:1b:
                    99:42:53:b1:35:58:a5:32:a9:9c:6d:34:bf:ff:7c:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:16:AC:E5:39:66:7C:D8:79:45:F9:18:65:92:61:4B:C7:30:C1:EE
            X509v3 Authority Key Identifier:
                keyid:7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34382e302f32342d3234203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:5c:a8:cf:6b:0b:4e:a3:5f:a6:23:76:10:28:79:75:9c:
         69:21:9e:2f:ac:99:80:b2:a2:6f:e1:4f:73:b4:90:51:79:dc:
         72:b1:64:32:88:2e:79:4e:6e:22:49:c9:be:07:28:c6:da:59:
         09:05:70:ef:eb:07:08:32:17:0a:c2:6a:e3:57:1e:46:a4:da:
         53:1e:a8:25:8d:88:82:22:1d:c6:d1:04:8a:d3:3c:be:8b:41:
         7a:b6:94:85:fb:dd:0f:e2:d7:ad:36:0b:c5:87:b4:d0:80:ef:
         5a:38:53:7e:81:4f:ea:2c:fb:ab:72:41:d5:c8:1d:5c:3f:ed:
         80:b4:0d:a6:d0:99:a6:79:d8:2a:9e:40:6b:95:68:82:3f:ac:
         a1:9a:98:a7:dc:bb:ba:b2:4f:a5:cf:9b:80:14:fb:8e:cc:53:
         c2:d7:c4:cc:d2:4c:70:f1:21:13:79:07:05:32:2b:8e:de:07:
         e4:66:d6:ac:1c:fa:21:46:4f:8c:59:e1:aa:37:44:97:bb:1b:
         4f:75:c8:06:8d:8a:8c:6a:df:b7:74:42:e1:12:51:7a:51:71:
         f5:21:37:e5:b6:18:21:37:71:2a:12:23:1f:c2:5f:d9:ac:97:
         61:07:5a:bf:87:ca:34:8d:f4:2e:6d:e7:6a:ea:61:f2:04:1f:
         6f:f9:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:05:06 2026 by rpki-client