Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34392e302f32342d3234203d3e20323730333337.roa
File:                     3139302e38332e34392e302f32342d3234203d3e20323730333337.roa (raw, json)
Hash identifier:          GKw+cXknWIqgvaJOiKwT5X4/8FDJcPaTMs75fWbbgV8=
Subject key identifier:   57:93:3A:99:B7:5A:A1:F8:13:DE:F4:72:D9:2F:49:7E:80:E5:C7:A7
Certificate issuer:       /CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
Certificate serial:       2399DE602586CBFB0CEB63F941466859D248EDC1
Authority key identifier: 7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34392e302f32342d3234203d3e20323730333337.roa
Signing time:             Tue 18 Aug 2026 13:50:59 +0000
ROA not before:           Tue 18 Aug 2026 13:45:59 +0000
ROA not after:            Tue 17 Aug 2027 13:50:59 +0000
asID:                     270337
IP address blocks:        190.83.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl
                          rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 04:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:99:de:60:25:86:cb:fb:0c:eb:63:f9:41:46:68:59:d2:48:ed:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA
        Validity
            Not Before: Aug 18 13:45:59 2026 GMT
            Not After : Aug 17 13:50:59 2027 GMT
        Subject: CN=57933A99B75AA1F813DEF472D92F497E80E5C7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:4c:40:eb:43:a0:b6:fb:87:1a:a6:72:42:
                    76:b2:2d:7e:74:44:ad:28:74:8b:34:3c:ee:82:7e:
                    41:d1:b7:f9:76:0d:0f:74:b8:fd:27:25:e5:2d:e4:
                    e7:ac:6f:22:81:37:4f:af:10:fc:40:12:aa:1f:3d:
                    f5:2d:4e:f0:61:53:ca:63:88:31:46:dc:44:ff:99:
                    05:ea:3a:a2:ec:50:31:99:5b:84:1e:d6:5c:ee:8a:
                    ec:6a:76:28:5e:da:5f:3f:38:0d:dc:7f:d8:52:02:
                    c7:52:4d:3c:61:a3:df:57:27:20:ad:30:c1:8b:91:
                    2a:35:d9:a3:54:40:e9:69:22:ef:83:4d:77:16:2f:
                    6b:b4:d9:52:5d:46:1e:7c:5b:65:99:02:ab:7e:04:
                    68:e2:65:cf:84:b2:30:1a:6d:74:6d:a1:33:5f:3f:
                    d1:a0:18:47:dd:4d:73:34:f0:8a:74:85:f2:57:52:
                    30:72:91:de:2d:4a:d4:b2:a6:66:00:82:8c:8d:94:
                    ad:bc:36:c0:8e:2b:e1:6d:66:70:45:34:eb:09:b2:
                    55:99:af:89:6c:c9:91:74:3e:0e:2a:48:a5:cb:93:
                    bc:f6:fa:7e:93:c4:da:16:60:8d:80:c6:d5:d5:08:
                    bd:84:c1:65:61:d7:20:81:9a:58:12:09:00:95:0c:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:3A:99:B7:5A:A1:F8:13:DE:F4:72:D9:2F:49:7E:80:E5:C7:A7
            X509v3 Authority Key Identifier:
                keyid:7D:E2:C3:E9:F3:0F:18:F6:39:E2:99:5D:FD:0F:3A:80:A4:CD:B6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DE2C3E9F30F18F639E2995DFD0F3A80A4CDB6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/3139302e38332e34392e302f32342d3234203d3e20323730333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:47:c0:09:9f:38:82:24:26:9d:60:c0:9b:99:79:93:c5:
         cc:cb:30:c1:73:9a:70:f5:bc:61:39:5c:68:ea:e2:55:e6:75:
         6c:4f:87:5c:38:9a:98:54:1e:42:22:5c:64:cd:56:87:ec:47:
         91:b8:6a:f2:b0:e3:58:1b:af:71:34:72:73:28:81:48:18:2a:
         68:4b:66:3d:4a:50:98:0b:37:af:cf:f1:c1:27:fc:8c:a6:de:
         69:e5:59:82:b3:28:b1:06:cf:84:c9:b3:5f:dc:f4:77:dc:06:
         58:3e:2f:72:4f:85:4a:9c:ab:80:22:7b:43:20:65:83:a6:4c:
         15:f0:ff:c0:07:cc:dd:94:54:79:ec:b8:82:a5:8c:a0:30:3f:
         2f:f9:b4:21:fa:2d:45:bc:b3:39:47:4b:12:f0:66:20:22:ee:
         c3:cf:bc:d4:6c:36:07:84:9f:1e:01:21:78:ee:0f:3a:32:97:
         4f:75:ab:25:1c:8d:dd:77:9d:72:5c:6c:16:6b:d9:96:0d:dd:
         3a:83:a0:a3:27:89:7e:93:d1:dc:15:f7:ad:e9:5b:02:2b:aa:
         b7:98:81:b0:d3:4c:83:a2:c2:c3:bd:12:70:37:8c:f0:41:9a:
         9d:d5:66:0e:ef:f5:56:ca:5f:44:7d:88:10:82:ef:92:f8:6c:
         e5:ce:fd:fc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI5neYCWGy/sM62P5QUZoWdJI7cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RFMkMzRTlGMzBGMThGNjM5RTI5OTVERkQwRjNBODBB
NENEQjZDQTAeFw0yNjA4MTgxMzQ1NTlaFw0yNzA4MTcxMzUwNTlaMDMxMTAvBgNV
BAMTKDU3OTMzQTk5Qjc1QUExRjgxM0RFRjQ3MkQ5MkY0OTdFODBFNUM3QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChukxA60OgtvuHGqZyQnayLX50
RK0odIs0PO6CfkHRt/l2DQ90uP0nJeUt5OesbyKBN0+vEPxAEqofPfUtTvBhU8pj
iDFG3ET/mQXqOqLsUDGZW4Qe1lzuiuxqdihe2l8/OA3cf9hSAsdSTTxho99XJyCt
MMGLkSo12aNUQOlpIu+DTXcWL2u02VJdRh58W2WZAqt+BGjiZc+EsjAabXRtoTNf
P9GgGEfdTXM08Ip0hfJXUjBykd4tStSypmYAgoyNlK28NsCOK+FtZnBFNOsJslWZ
r4lsyZF0Pg4qSKXLk7z2+n6TxNoWYI2AxtXVCL2EwWVh1yCBmlgSCQCVDDd1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV5M6mbdaofgT3vRy2S9JfoDlx6cwHwYDVR0j
BBgwFoAUfeLD6fMPGPY54pld/Q86gKTNtsowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWNkeW5jTnVwSDlhZ2M4TXNoQmRidERYN0JDM1M0UFBCU2hvVGJqU3M2
RkUvMC83REUyQzNFOUYzMEYxOEY2MzlFMjk5NURGRDBGM0E4MEE0Q0RCNkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdERTJDM0U5RjMwRjE4RjYz
OUUyOTk1REZEMEYzQTgwQTRDREI2Q0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FjZHluY051cEg5YWdjOE1zaEJkYnREWDdCQzNTNFBQQlNob1RialNzNkZFLzAv
MzEzOTMwMmUzODMzMmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzMzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvlMxMA0GCSqGSIb3DQEBCwUAA4IBAQAiDUfACZ84
giQmnWDAm5l5k8XMyzDBc5pw9bxhOVxo6uJV5nVsT4dcOJqYVB5CIlxkzVaH7EeR
uGrysONYG69xNHJzKIFIGCpoS2Y9SlCYCzevz/HBJ/yMpt5p5VmCsyixBs+EybNf
3PR33AZYPi9yT4VKnKuAIntDIGWDpkwV8P/AB8zdlFR57LiCpYygMD8v+bQh+i1F
vLM5R0sS8GYgIu7Dz7zUbDYHhJ8eASF47g86MpdPdaslHI3dd51yXGwWa9mWDd06
g6CjJ4l+k9HcFfet6VsCK6q3mIGw00yDosLDvRJwN4zwQZqd1WYO7/VWyl9EfYgQ
gu+S+Gzlzv38
-----END CERTIFICATE-----
Generated at Sun Aug 23 05:55:35 2026 by rpki-client