Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39312e302f32342d3234203d3e203237373135.roa
File:                     3138392e33382e39312e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          aXknsStBTPEjEcSYlN64rY3eg+ANtXdT2u9fu+D7c34=
Subject key identifier:   02:53:62:4B:77:8F:03:F9:7E:33:5F:18:5A:AB:4E:47:80:B0:2C:27
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       120CED5B91D47F48648926B656A1881BB22449E9
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39312e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 17 Aug 2026 16:59:35 +0000
ROA not before:           Mon 17 Aug 2026 16:54:35 +0000
ROA not after:            Mon 16 Aug 2027 16:59:35 +0000
asID:                     27715
IP address blocks:        189.38.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0c:ed:5b:91:d4:7f:48:64:89:26:b6:56:a1:88:1b:b2:24:49:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Aug 17 16:54:35 2026 GMT
            Not After : Aug 16 16:59:35 2027 GMT
        Subject: CN=0253624B778F03F97E335F185AAB4E4780B02C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:14:ef:f5:85:53:9f:f4:5e:84:35:c9:84:
                    00:8c:f1:d4:ae:75:b8:e1:0e:54:fc:1d:25:5a:f3:
                    bd:49:86:04:47:b3:89:be:86:7b:e8:5a:43:79:72:
                    6c:9e:4a:3b:44:5d:62:89:51:d7:ac:56:dd:68:d9:
                    ae:24:21:e4:19:8c:52:cd:db:89:0d:95:72:0e:7b:
                    be:99:4b:40:41:35:45:0c:ed:8c:ae:8a:01:01:d4:
                    83:9b:98:78:c7:b6:d2:86:e8:fd:5b:92:7f:76:c1:
                    d0:16:19:fa:b0:6d:46:d9:6f:05:73:fd:00:41:7a:
                    90:e8:10:5b:c5:31:10:e8:7d:19:f5:50:e2:a4:1f:
                    61:31:1c:38:d9:55:68:23:b3:70:f1:6b:d9:c9:dd:
                    66:b7:26:62:be:eb:c4:e7:8c:a1:b1:b5:f0:a0:f5:
                    45:f6:57:29:cf:2b:7b:58:e3:cc:f5:3c:1b:bc:ab:
                    af:9c:ff:39:c9:7c:05:13:ad:6c:bd:b8:f0:e5:61:
                    46:f7:e7:0c:82:50:f6:87:86:d0:bf:dd:30:c8:50:
                    ff:d3:28:e6:cb:4c:cf:1a:d9:0e:d3:73:ee:5b:94:
                    3c:5e:5b:6f:a6:46:9b:be:32:50:b4:9c:c4:81:3c:
                    38:14:48:3b:1f:86:22:e9:52:f3:c0:14:bf:5d:3b:
                    67:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:62:4B:77:8F:03:F9:7E:33:5F:18:5A:AB:4E:47:80:B0:2C:27
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39312e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:19:ba:98:f3:b2:ac:0e:97:34:10:c7:65:c5:89:19:1d:74:
         b0:a5:61:4a:6e:e8:47:59:bc:a8:c3:55:55:76:6f:ff:17:5e:
         60:95:09:79:91:bd:ca:d8:70:47:dc:3e:02:ff:13:0f:d6:a6:
         13:34:ae:9c:7d:e5:8e:f9:fc:98:d6:1f:15:e0:ee:61:8f:a2:
         2d:b3:8b:c7:51:47:44:39:3e:d9:e5:30:2e:4f:20:98:4f:d7:
         3b:d4:41:5c:76:5d:e9:d8:4c:95:e2:49:5c:bd:7f:80:b8:56:
         58:7e:9d:d0:34:f9:4e:e5:4a:12:44:96:59:cf:c0:6a:5e:bb:
         1c:9e:01:9a:8a:21:f4:18:f2:07:ac:47:78:a8:c7:76:5d:85:
         66:e3:56:66:16:ae:d6:01:32:84:98:64:e5:aa:f8:d3:b3:1a:
         1d:cc:fb:02:5a:a3:e5:2d:1a:48:fe:1f:a0:7a:24:54:c5:ba:
         96:c5:29:76:5c:22:aa:7a:64:13:af:a1:9f:e3:1f:b0:9b:b6:
         de:fd:6c:b4:48:32:0a:46:4b:36:cd:f2:a1:19:fe:ee:12:e9:
         19:b0:7a:24:e2:77:5f:11:04:a0:2f:a8:b9:88:02:1e:ac:0f:
         89:65:ac:00:27:43:38:6d:65:47:3c:64:84:aa:53:b7:77:db:
         c3:cb:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:17:21 2026 by rpki-client