Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38332e302f32342d3234203d3e20323730393732.roa
File:                     3139312e33372e38332e302f32342d3234203d3e20323730393732.roa (raw, json)
Hash identifier:          LsUbNO/l7clUHqsHX74i8PEomg0W+bhIr9cwWAdp0As=
Subject key identifier:   8F:D9:26:2E:11:7C:78:60:84:D1:EA:E0:49:E0:04:D9:43:3C:32:EC
Certificate issuer:       /CN=2662749C84F025E92226E07D99E4597D9B83350D
Certificate serial:       5B185128F4397CD12CF72C352992C20F280FDE66
Authority key identifier: 26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38332e302f32342d3234203d3e20323730393732.roa
Signing time:             Tue 11 Aug 2026 03:56:40 +0000
ROA not before:           Tue 11 Aug 2026 03:51:40 +0000
ROA not after:            Tue 10 Aug 2027 03:56:40 +0000
asID:                     270972
IP address blocks:        191.37.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl
                          rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:18:51:28:f4:39:7c:d1:2c:f7:2c:35:29:92:c2:0f:28:0f:de:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2662749C84F025E92226E07D99E4597D9B83350D
        Validity
            Not Before: Aug 11 03:51:40 2026 GMT
            Not After : Aug 10 03:56:40 2027 GMT
        Subject: CN=8FD9262E117C786084D1EAE049E004D9433C32EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:83:e8:85:10:71:1b:91:66:ac:28:c8:e0:
                    ac:10:5e:56:7a:10:dd:0a:2a:8f:40:48:83:7f:7f:
                    b1:85:5f:e8:f2:1f:c9:bc:de:50:56:b1:de:06:8e:
                    3a:f1:8f:a5:76:4d:ef:ce:c5:6e:85:7e:dd:d9:5c:
                    b6:7e:df:be:46:53:ee:0d:9e:59:f3:13:b9:d2:01:
                    70:52:ce:f5:ba:c7:d2:9d:09:25:dd:4b:c7:09:c2:
                    92:6d:14:fb:03:4b:de:73:a0:71:ca:63:e5:5d:a2:
                    a9:a5:22:b0:03:e6:ac:89:5c:09:74:b2:62:30:46:
                    a2:8b:8b:ce:90:fa:dc:18:32:07:e5:94:b8:e0:73:
                    65:6e:1f:b4:4a:7c:50:2a:93:80:4b:7c:bc:e8:65:
                    fb:90:ea:06:d0:2b:17:a6:ca:63:ad:eb:96:ca:96:
                    11:60:37:de:54:76:9d:65:9b:8d:f3:bf:21:88:73:
                    97:98:fa:dd:75:12:3d:e9:ce:b8:f2:14:12:d4:e9:
                    83:bc:6e:98:aa:19:db:af:68:8f:b8:46:f0:21:82:
                    45:c6:2b:35:d7:d3:f4:78:98:f5:10:55:a9:00:59:
                    50:91:d6:e2:e5:4d:8e:61:c4:96:86:9e:f5:6d:9b:
                    4d:3b:f5:d0:8b:a9:84:7d:12:57:a0:6e:fc:ea:c0:
                    f9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:26:2E:11:7C:78:60:84:D1:EA:E0:49:E0:04:D9:43:3C:32:EC
            X509v3 Authority Key Identifier:
                keyid:26:62:74:9C:84:F0:25:E9:22:26:E0:7D:99:E4:59:7D:9B:83:35:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/2662749C84F025E92226E07D99E4597D9B83350D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2662749C84F025E92226E07D99E4597D9B83350D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DUntPei8XVKGvdcno2ScrQ1oEdQ7vNjetcg2Q3TtXEjy/0/3139312e33372e38332e302f32342d3234203d3e20323730393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:fc:f5:da:64:65:bb:19:45:2f:df:81:06:c7:12:d1:21:a4:
         28:c0:e0:bb:1f:06:09:8e:7c:2c:78:b0:d7:8b:27:a7:ea:06:
         ce:3f:0a:4a:5d:db:07:0c:70:bb:36:82:3c:cd:3e:44:b6:ac:
         3a:51:69:2f:76:1e:62:1c:98:c5:bf:d2:4f:7d:ef:ce:9f:e1:
         ac:2b:69:1c:12:fa:1c:ad:82:b4:30:b1:85:5b:95:69:c8:f6:
         9e:fc:80:9e:a6:ec:f9:74:f8:69:93:df:79:5b:fb:de:3e:17:
         c0:c1:87:85:5b:90:47:f3:d0:d2:cf:15:ea:57:a4:d0:82:02:
         51:39:13:f8:97:b7:c6:8a:72:14:7b:07:5b:f3:88:b5:5d:3c:
         c2:2b:d3:3b:04:0d:2e:4a:b0:bc:1b:73:57:a4:af:c4:a5:ba:
         e6:ad:4f:72:19:54:4a:d4:05:71:f4:db:42:b4:13:14:46:fc:
         8c:c8:e2:84:c2:62:a8:8d:7d:52:e2:95:42:78:cb:1a:5f:b8:
         92:68:bc:90:84:29:18:7c:5d:67:c3:a1:74:96:17:c3:84:f7:
         65:91:ea:ce:05:f7:ff:e2:e2:27:f8:90:87:f2:b4:88:62:3b:
         1a:d4:73:10:21:30:05:6a:1a:17:c3:40:32:b8:78:ad:42:51:
         ba:c1:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 17:48:36 2026 by rpki-client