Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa
File:                     3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa (raw, json)
Hash identifier:          9I05hPPo25GC8XkS1g9QZ+/MJS20SvuKinQw7ErxWbA=
Subject key identifier:   5A:78:12:67:87:B1:64:31:AB:37:A6:8C:ED:C4:50:49:89:6B:36:F8
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       31FB6A0D6030E38BC4AB26ABAFBD21E349679F0A
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa
Signing time:             Fri 22 May 2026 14:50:57 +0000
ROA not before:           Fri 22 May 2026 14:45:57 +0000
ROA not after:            Fri 21 May 2027 14:50:57 +0000
asID:                     270711
IP address blocks:        189.127.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fb:6a:0d:60:30:e3:8b:c4:ab:26:ab:af:bd:21:e3:49:67:9f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: May 22 14:45:57 2026 GMT
            Not After : May 21 14:50:57 2027 GMT
        Subject: CN=5A78126787B16431AB37A68CEDC45049896B36F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0f:06:e9:ff:b4:fc:eb:ee:cf:2e:06:93:63:
                    94:1e:a6:56:0d:d2:ee:d6:ea:51:41:58:65:29:60:
                    c3:f3:d5:8e:95:04:f3:75:93:13:74:91:f6:3e:4a:
                    2d:63:d6:5c:d8:12:82:19:77:dc:4c:67:d0:bd:c6:
                    90:f4:5c:79:d4:b1:3c:5b:9a:2f:99:15:3b:01:98:
                    e6:df:c4:ca:fe:df:19:f8:51:e3:15:42:b7:bb:c8:
                    a3:d7:99:c7:28:15:c4:b1:a7:c2:e0:9f:0e:d4:3e:
                    7f:85:7c:0f:0e:86:af:9c:e8:5c:b5:0e:b2:32:3a:
                    af:18:4a:9a:83:d9:32:95:ca:46:bf:75:29:88:a9:
                    5b:29:f3:1a:96:bd:a6:ac:5e:30:d2:7a:dd:71:9c:
                    06:2d:21:c4:d5:16:28:02:7d:b2:67:f1:94:d7:1f:
                    50:d2:17:eb:70:62:0a:2a:76:14:5d:7a:a4:87:80:
                    98:06:68:25:d4:89:6c:d4:45:8d:13:bc:16:0c:cb:
                    e9:6e:bf:55:f9:06:7f:47:ee:da:8e:70:d2:2c:4a:
                    cc:95:21:7b:d2:a7:55:5d:02:1b:8c:cb:1d:9e:74:
                    b5:1a:a9:c1:3f:a9:18:fa:b5:46:fe:d8:68:5e:79:
                    7e:f2:c7:9b:24:8a:b1:c4:2d:8b:df:e8:3e:c4:d0:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:78:12:67:87:B1:64:31:AB:37:A6:8C:ED:C4:50:49:89:6B:36:F8
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/3138392e3132372e3132392e302f32342d3234203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:42:1c:b4:3b:be:92:f5:b5:2a:7c:9c:ff:a3:c9:7b:c6:44:
         91:df:c8:00:bd:e6:31:fa:fb:45:2e:d1:94:1c:bf:12:9c:b9:
         38:9c:e4:b5:e8:b6:14:37:f1:2a:5e:e7:0e:56:36:7c:45:69:
         5b:70:d2:00:35:7b:a2:75:45:37:6e:0a:83:1d:4b:34:de:4a:
         50:cc:8c:bf:00:e1:e4:bf:ba:d0:09:72:1d:08:84:b8:1c:a1:
         f9:62:05:e7:2d:91:1b:42:7b:bd:d9:03:d4:e6:77:b5:ad:a6:
         a9:9a:29:1a:c5:e3:35:64:43:7b:1f:0b:20:1e:b2:52:70:4e:
         90:76:e5:aa:b7:5a:06:5d:13:02:74:5d:4e:b6:44:31:d3:ef:
         ed:a6:c3:4a:6e:64:1b:13:08:71:d4:0e:c7:76:20:ed:f3:a0:
         46:a7:8a:ac:d5:ff:f4:42:02:34:0c:8c:33:19:7f:2a:d0:31:
         2e:e3:76:48:97:a2:59:53:5c:92:6c:43:74:87:b0:b5:0f:47:
         d2:b7:79:18:0c:95:29:73:56:5c:de:fd:c6:68:50:e5:bf:dc:
         62:80:63:40:d6:44:08:eb:2a:5f:6c:d5:eb:76:fd:41:82:11:
         e6:46:e8:ff:e1:9f:d7:30:27:80:e4:e3:81:f2:18:b9:3b:85:
         0d:63:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:10:25 2026 by rpki-client