Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa
File:                     3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa (raw, json)
Hash identifier:          SsoVhyOac42IXg5lnF4zOgleoDyxAXvwHZBlmgrLQfI=
Subject key identifier:   15:75:E9:66:FF:76:BD:37:07:4A:75:B5:FD:40:F8:99:52:7D:E1:F3
Certificate issuer:       /CN=205BDAA59440034C4D1BF95271B3B291B494E890
Certificate serial:       67553CDFB0AC39E7892632F233A94E5F479D7FB8
Authority key identifier: 20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa
Signing time:             Mon 29 Jun 2026 14:47:00 +0000
ROA not before:           Mon 29 Jun 2026 14:42:00 +0000
ROA not after:            Mon 28 Jun 2027 14:47:00 +0000
asID:                     270849
IP address blocks:        190.115.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl
                          rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:3c:df:b0:ac:39:e7:89:26:32:f2:33:a9:4e:5f:47:9d:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205BDAA59440034C4D1BF95271B3B291B494E890
        Validity
            Not Before: Jun 29 14:42:00 2026 GMT
            Not After : Jun 28 14:47:00 2027 GMT
        Subject: CN=1575E966FF76BD37074A75B5FD40F899527DE1F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:84:61:69:b2:86:b9:70:07:ca:04:07:14:
                    6d:31:1c:fa:26:bb:53:ec:fa:7e:6b:bd:2a:f0:a8:
                    9c:7e:4a:aa:c1:24:f8:42:6b:38:3a:4c:de:33:62:
                    65:a0:11:73:57:90:e7:7e:f3:42:72:c8:2b:af:42:
                    92:09:c7:fd:7f:4e:26:a4:d1:f8:8c:41:dc:38:80:
                    c9:51:8c:c7:cd:c8:8f:60:ca:a5:d3:a6:60:36:87:
                    16:f0:39:6f:61:f9:af:27:07:2a:f3:e1:a7:c3:0d:
                    3f:9b:e1:8f:43:48:32:34:76:dd:1b:b3:24:7c:18:
                    fb:ed:3a:70:4e:7a:99:f6:62:a4:6a:a8:9c:ce:ec:
                    1b:22:d0:59:97:40:bc:b0:d8:45:74:aa:85:18:be:
                    39:8a:1d:10:20:53:36:8c:f1:b8:78:5a:f5:a5:20:
                    ba:ab:f9:94:09:7a:5b:b5:5f:f0:21:d1:f0:f2:c2:
                    df:c3:0e:ca:0d:17:f4:ac:bb:4b:a7:ba:b0:fd:28:
                    06:d6:d7:df:0e:48:03:31:5d:63:d6:2b:38:30:16:
                    64:a9:5d:10:f5:e3:2d:b5:bf:cd:e4:53:49:bb:8e:
                    93:2c:3e:56:6f:77:01:8c:6a:7a:e1:66:b9:67:0a:
                    09:ab:97:52:1e:c2:f6:d3:18:55:79:65:6d:50:24:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:75:E9:66:FF:76:BD:37:07:4A:75:B5:FD:40:F8:99:52:7D:E1:F3
            X509v3 Authority Key Identifier:
                keyid:20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/3139302e3131352e3231322e302f32322d3332203d3e20323730383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:b5:6d:32:56:1f:25:a5:6a:e4:9a:cc:94:c7:eb:fe:dd:
         3d:6f:e6:62:83:28:eb:1a:35:31:a8:31:f6:09:f4:ef:ab:45:
         fa:ce:9e:8a:e3:c9:16:c3:fa:e6:57:56:cf:7c:2b:99:6d:7f:
         0f:ab:c9:60:2f:5c:a4:fb:2b:e5:a1:fd:83:05:88:a4:3f:3b:
         b0:29:54:cd:5f:fc:e3:b5:19:dc:b5:49:68:52:c1:b1:8a:b8:
         94:67:15:78:51:71:5d:3b:bf:56:64:18:f3:1d:b8:55:7c:52:
         12:1c:c5:6e:a1:37:33:42:f0:53:11:15:84:63:87:ce:7d:28:
         b4:3a:56:f6:23:85:be:69:9b:8d:8a:86:b6:d8:13:bc:c5:68:
         65:b4:39:e9:f0:a0:f2:eb:28:98:c4:52:3a:03:15:5a:b5:45:
         01:ba:e9:f3:d1:64:c6:55:d0:f6:c8:26:96:9a:6e:ab:4a:92:
         58:ff:e9:82:dc:cb:72:ae:63:ab:3f:f3:b8:fe:50:98:cf:98:
         17:06:8c:38:ed:ff:bd:ac:d1:f1:5f:02:0e:88:10:3b:d1:93:
         d7:70:03:bd:0c:a7:2c:7b:f7:88:23:39:a1:52:b9:91:c3:4f:
         7f:7b:3e:98:78:52:2e:d4:fd:63:63:db:26:c5:ab:3a:b6:7f:
         8b:ce:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:20:09 2026 by rpki-client