Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa
File:                     3139312e33372e38302e302f32322d3332203d3e20323730393732.roa (raw, json)
Hash identifier:          5v4AwAlUCzg6VTNxFvwi2dJMbvPD1JCA5XpMHPSJh5o=
Subject key identifier:   25:18:86:57:5F:36:F5:39:7F:B1:D4:B2:C1:58:06:65:A8:00:58:A8
Certificate issuer:       /CN=2662749C84F025E92226E07D99E4597D9B83350D
Certificate serial:       66F1431451772D75BF801E3E32BA855F73CA399E
Authority key identifier: 26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa
Signing time:             Tue 11 Aug 2026 03:56:53 +0000
ROA not before:           Tue 11 Aug 2026 03:51:53 +0000
ROA not after:            Tue 10 Aug 2027 03:56:53 +0000
asID:                     270972
IP address blocks:        191.37.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f1:43:14:51:77:2d:75:bf:80:1e:3e:32:ba:85:5f:73:ca:39:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662749C84F025E92226E07D99E4597D9B83350D
        Validity
            Not Before: Aug 11 03:51:53 2026 GMT
            Not After : Aug 10 03:56:53 2027 GMT
        Subject: CN=251886575F36F5397FB1D4B2C1580665A80058A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:b1:8f:6a:62:39:24:8b:a0:f5:fb:f9:49:
                    48:98:44:91:ea:ce:4f:b3:4a:ff:53:50:35:3e:14:
                    d7:18:5a:89:2f:00:de:19:88:51:4c:82:3b:9d:16:
                    8d:6a:98:c8:c0:c5:ce:12:a4:fb:2e:2d:b4:59:d1:
                    be:64:3a:24:3a:6a:53:5b:4a:2a:e1:dd:62:cc:81:
                    5c:67:d6:a8:c6:2d:67:32:f0:73:25:4f:8b:04:42:
                    e4:da:14:d5:7f:12:8a:6e:a8:61:54:30:ce:0d:31:
                    7e:e6:ba:84:48:8b:70:e6:ea:da:b6:76:20:21:b7:
                    73:38:b7:da:f0:b5:7a:02:c2:81:9b:8a:78:d5:94:
                    45:1e:7f:94:5f:de:69:31:f6:05:d3:6f:12:dc:f9:
                    5a:2e:b3:4f:58:2a:84:7c:f2:a5:33:6f:6b:cf:ca:
                    ec:98:93:bf:27:e4:f1:7c:58:23:5e:26:41:0e:2e:
                    72:b5:d5:27:5b:0f:5c:4b:cd:04:19:6a:e1:bd:1b:
                    7d:cf:15:bd:dc:c4:8e:f2:4d:1d:a2:30:61:57:a4:
                    9e:8f:7a:dc:9c:36:97:47:62:3b:4e:34:cc:4d:97:
                    e1:41:8f:3a:92:cc:1e:f4:56:2d:5d:d2:db:40:eb:
                    5f:7c:24:c4:6a:b8:25:14:fd:51:f3:fb:1e:58:4e:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:18:86:57:5F:36:F5:39:7F:B1:D4:B2:C1:58:06:65:A8:00:58:A8
            X509v3 Authority Key Identifier:
                keyid:26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38302e302f32322d3332203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:d3:55:e2:02:ab:f7:f2:a8:b3:27:21:00:91:b6:2c:81:dd:
         de:57:2f:56:7a:15:55:2f:10:e9:b3:a6:40:99:7f:14:31:d3:
         22:83:80:4a:99:46:b7:01:48:10:85:42:fc:14:6a:cb:8f:88:
         f5:09:6a:6f:e9:86:6e:59:d6:d8:1c:6c:bb:c3:48:e9:7c:65:
         79:19:d7:e7:57:f4:9d:08:18:39:4e:ec:9e:8d:58:bc:bf:8c:
         ba:a6:85:5e:43:b3:d5:61:a1:b9:e5:8b:99:fd:f4:60:2c:3d:
         19:b2:03:4f:42:65:86:31:03:01:c8:99:a3:e4:7c:da:37:a9:
         7f:e6:06:85:04:b3:49:61:e8:45:d1:79:2a:56:64:f5:d2:a1:
         1c:33:79:be:34:73:fa:29:05:ea:25:f7:98:f0:8c:92:97:5c:
         6a:e8:1e:47:2c:c8:d8:38:46:d8:85:10:0d:5d:78:5b:a3:87:
         7f:82:b8:f0:8c:3b:5a:9f:56:fd:fd:38:87:5a:92:e0:4d:6a:
         a5:cd:96:d5:64:e7:15:a8:0c:33:d8:7d:60:6b:cd:22:dc:a5:
         a1:7f:0a:6b:1d:61:89:56:0a:e8:88:18:04:d7:8e:60:01:07:
         7f:ce:f8:7f:cc:dc:5a:5d:a5:8c:bc:c8:9c:dd:25:89:c8:05:
         12:23:74:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZvFDFFF3LXW/gB4+MrqFX3PKOZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2Mjc0OUM4NEYwMjVFOTIyMjZFMDdEOTlFNDU5N0Q5
QjgzMzUwRDAeFw0yNjA4MTEwMzUxNTNaFw0yNzA4MTAwMzU2NTNaMDMxMTAvBgNV
BAMTKDI1MTg4NjU3NUYzNkY1Mzk3RkIxRDRCMkMxNTgwNjY1QTgwMDU4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+bGPamI5JIug9fv5SUiYRJHq
zk+zSv9TUDU+FNcYWokvAN4ZiFFMgjudFo1qmMjAxc4SpPsuLbRZ0b5kOiQ6alNb
Sirh3WLMgVxn1qjGLWcy8HMlT4sEQuTaFNV/EopuqGFUMM4NMX7muoRIi3Dm6tq2
diAht3M4t9rwtXoCwoGbinjVlEUef5Rf3mkx9gXTbxLc+Vous09YKoR88qUzb2vP
yuyYk78n5PF8WCNeJkEOLnK11SdbD1xLzQQZauG9G33PFb3cxI7yTR2iMGFXpJ6P
etycNpdHYjtONMxNl+FBjzqSzB70Vi1d0ttA6198JMRquCUU/VHz+x5YTg6/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJRiGV1829Tl/sdSywVgGZagAWKgwHwYDVR0j
BBgwFoAUJmJ0nITwJekiJuB9meRZfZuDNQ0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFVudFBlaThYVktHdmRjbm8yU2NyUTFvRWRRN3ZOamV0Y2cyUTNUdFhF
ankvMC8yNjYyNzQ5Qzg0RjAyNUU5MjIyNkUwN0Q5OUU0NTk3RDlCODMzNTBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NjI3NDlDODRGMDI1RTky
MjI2RTA3RDk5RTQ1OTdEOUI4MzM1MEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RVbnRQZWk4WFZLR3ZkY25vMlNjclExb0VkUTd2TmpldGNnMlEzVHRYRWp5LzAv
MzEzOTMxMmUzMzM3MmUzODMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzkzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvyVQMA0GCSqGSIb3DQEBCwUAA4IBAQBz01XiAqv3
8qizJyEAkbYsgd3eVy9WehVVLxDps6ZAmX8UMdMig4BKmUa3AUgQhUL8FGrLj4j1
CWpv6YZuWdbYHGy7w0jpfGV5GdfnV/SdCBg5TuyejVi8v4y6poVeQ7PVYaG55YuZ
/fRgLD0ZsgNPQmWGMQMByJmj5HzaN6l/5gaFBLNJYehF0XkqVmT10qEcM3m+NHP6
KQXqJfeY8IySl1xq6B5HLMjYOEbYhRANXXhbo4d/grjwjDtan1b9/TiHWpLgTWql
zZbVZOcVqAwz2H1ga80i3KWhfwprHWGJVgroiBgE145gAQd/zvh/zNxaXaWMvMic
3SWJyAUSI3QY
-----END CERTIFICATE-----
Generated at Sun Aug 23 07:19:09 2026 by rpki-client