Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa
File:                     3137372e39312e3139322e302f31392d3234203d3e203532393435.roa (raw, json)
Hash identifier:          fM7SSvZ/IvvXYt6/Y9QPVQBaVdWO1myHz9ShB/x0dh8=
Subject key identifier:   D3:E3:1F:89:16:C2:3C:B4:3C:01:87:9E:51:2D:04:66:98:C8:69:A0
Certificate issuer:       /CN=C264FB166D810B0B079997649A78C2454ECCCB7F
Certificate serial:       493650CCFF1BD52D71F00802B8E232D36D44DC8D
Authority key identifier: C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa
Signing time:             Fri 14 Aug 2026 20:29:27 +0000
ROA not before:           Fri 14 Aug 2026 20:24:27 +0000
ROA not after:            Fri 13 Aug 2027 20:29:27 +0000
asID:                     52945
IP address blocks:        177.91.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl
                          rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:36:50:cc:ff:1b:d5:2d:71:f0:08:02:b8:e2:32:d3:6d:44:dc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C264FB166D810B0B079997649A78C2454ECCCB7F
        Validity
            Not Before: Aug 14 20:24:27 2026 GMT
            Not After : Aug 13 20:29:27 2027 GMT
        Subject: CN=D3E31F8916C23CB43C01879E512D046698C869A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:69:31:9f:b3:88:6a:89:21:35:6d:1d:82:
                    8a:8f:6b:28:9d:b1:db:3e:65:4a:3c:80:63:35:48:
                    c3:e4:d6:e0:54:97:5e:da:24:28:20:5c:61:2d:36:
                    20:aa:19:c5:2e:26:0f:10:e2:99:1d:fa:b0:84:bd:
                    6c:c5:27:f7:82:70:a0:4d:b4:78:1c:1a:c5:e1:1a:
                    2e:e1:ee:f0:c6:a2:82:a6:20:42:52:46:c6:3a:c7:
                    81:3c:b5:04:f2:f8:d9:5a:38:27:59:f9:98:68:69:
                    7d:ee:1e:62:10:22:64:81:34:d2:c0:ce:cd:60:90:
                    92:0c:2c:d9:a6:96:2a:22:f8:42:89:f1:c3:76:6e:
                    24:dc:9a:90:cf:14:79:82:c6:e4:3f:17:66:8a:ae:
                    d8:9d:3c:ca:0e:5a:dc:4e:3e:1c:50:58:ca:1c:a0:
                    a5:bf:7a:99:d0:d3:07:fe:58:54:1a:b5:36:9a:ba:
                    97:e2:27:dd:96:e6:2e:57:69:92:3b:23:a6:d5:af:
                    e4:62:5f:32:35:8f:1a:f2:ca:5c:b4:83:4b:80:37:
                    b6:02:63:7b:f2:8a:90:5d:5a:94:37:1f:e3:cb:3f:
                    fd:db:ab:ff:9a:1c:50:e1:cd:f6:3f:d3:2e:18:cb:
                    99:59:3a:aa:38:b1:18:06:a0:c1:62:7e:3a:ed:90:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:1F:89:16:C2:3C:B4:3C:01:87:9E:51:2D:04:66:98:C8:69:A0
            X509v3 Authority Key Identifier:
                keyid:C2:64:FB:16:6D:81:0B:0B:07:99:97:64:9A:78:C2:45:4E:CC:CB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/C264FB166D810B0B079997649A78C2454ECCCB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C264FB166D810B0B079997649A78C2454ECCCB7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9HuHjfnDq5LxG6HdgAV6bM3fgNXenjKpzPCZLGJNvhS/0/3137372e39312e3139322e302f31392d3234203d3e203532393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:74:de:d5:46:c4:ae:26:a1:74:7c:c0:51:92:aa:b5:49:00:
         60:96:7c:80:e3:8a:47:fa:d3:ef:6e:8e:55:b6:ce:b1:b3:db:
         80:80:d5:4a:02:66:68:12:9b:9f:20:2e:97:44:1b:fb:98:31:
         0f:f6:5f:39:93:44:f7:b8:fe:66:b0:36:e2:c1:9a:39:f0:a9:
         52:df:26:87:8b:51:77:8a:bc:ff:d0:73:25:a7:b6:b0:93:03:
         29:7a:62:94:ca:f6:cb:ef:d4:da:e7:7b:1b:df:b9:06:00:26:
         fb:7e:3b:7f:02:f3:00:85:cc:db:9c:a7:40:21:c5:51:42:45:
         50:bb:a3:9a:9c:0c:18:4e:48:a2:c5:00:51:4c:d1:7b:ef:e3:
         9d:fe:67:cb:51:2f:bd:88:2e:b0:04:d0:61:06:8e:57:f8:02:
         6d:85:5a:7a:5a:49:6d:c9:7a:93:67:59:b0:31:71:49:1d:c4:
         ab:fc:1a:ca:5f:78:eb:fa:c0:54:c4:5f:ac:dd:76:81:b7:2e:
         c4:54:4e:ce:a1:9f:9a:43:08:6e:c4:96:a2:81:2f:c4:27:8f:
         33:f0:f1:c3:e4:13:4b:1f:ea:b8:a9:32:47:3a:b3:ee:75:b0:
         b8:77:73:f6:65:f3:ca:9f:57:38:6a:45:5e:02:70:70:7f:86:
         00:d2:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 07:47:29 2026 by rpki-client