Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37362e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37362e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          4c1SgTo9YqkezAL6dorLnHbg2jIY8gVnuzUB+fld6mg=
Subject key identifier:   19:C4:C8:B3:75:19:A4:C9:24:6E:61:F9:20:67:3A:8D:FF:88:F5:17
Certificate issuer:       /CN=502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E
Certificate serial:       63DE29628FAAE6199FAB6CFAFD6A32DBA7A8A4EB
Authority key identifier: 50:2A:EA:58:43:E0:DC:9A:E3:D6:D5:DE:72:94:2F:D9:59:B1:3A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37362e302f32342d3234203d3e20323731363432.roa
Signing time:             Fri 21 Aug 2026 17:11:36 +0000
ROA not before:           Fri 21 Aug 2026 17:06:36 +0000
ROA not after:            Fri 20 Aug 2027 17:11:36 +0000
asID:                     271642
IP address blocks:        190.9.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:de:29:62:8f:aa:e6:19:9f:ab:6c:fa:fd:6a:32:db:a7:a8:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E
        Validity
            Not Before: Aug 21 17:06:36 2026 GMT
            Not After : Aug 20 17:11:36 2027 GMT
        Subject: CN=19C4C8B37519A4C9246E61F920673A8DFF88F517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:98:e7:f3:16:4e:68:35:90:f8:28:0a:4e:
                    15:88:11:aa:76:6c:c3:d4:e9:38:9a:a2:46:95:e9:
                    a5:5f:fc:9a:ef:bd:f1:e3:76:05:d7:db:b6:64:36:
                    52:89:39:e1:b8:4a:ce:a1:93:56:c8:f7:83:31:97:
                    27:06:fc:b3:c2:09:7d:cb:84:23:35:8b:52:88:5b:
                    6c:8b:dd:e5:18:de:ff:e2:05:82:24:d4:bd:ab:ea:
                    33:8e:6a:04:9b:52:3f:b0:93:c7:4d:08:b8:1f:af:
                    fe:8d:fd:a1:c7:14:70:0e:fa:76:fd:37:9a:ab:32:
                    f4:49:90:95:b3:a0:53:7c:2c:b5:d4:c8:b7:b1:af:
                    30:1e:7e:b8:a5:9a:eb:e0:b9:df:32:e2:fc:fb:31:
                    55:07:4b:89:15:df:a0:e8:fe:f5:3a:cf:9d:04:41:
                    e6:4b:0e:a6:10:96:04:0d:23:83:7b:39:f7:96:e6:
                    86:40:1b:c5:12:e1:05:b2:8c:a7:d9:f2:04:9a:56:
                    20:6d:e3:9f:ea:82:9e:e3:e1:49:03:9b:01:b6:1c:
                    aa:bb:e4:3a:ed:40:74:44:ec:c7:54:81:be:1b:6a:
                    b8:77:7f:d5:37:4f:cb:54:c1:d5:d7:90:bf:b9:46:
                    d4:5d:71:d8:98:49:d4:7d:59:54:9d:a1:e7:ba:16:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C4:C8:B3:75:19:A4:C9:24:6E:61:F9:20:67:3A:8D:FF:88:F5:17
            X509v3 Authority Key Identifier:
                keyid:50:2A:EA:58:43:E0:DC:9A:E3:D6:D5:DE:72:94:2F:D9:59:B1:3A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37362e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:4f:88:58:88:42:b5:3d:31:d0:1f:18:2b:a5:d7:d6:59:d8:
         9d:ec:23:fd:96:3a:3d:a5:8f:00:75:71:d3:74:92:0a:5a:57:
         5a:04:72:0e:35:5a:c8:4e:bd:0b:4d:62:64:73:28:07:28:c3:
         1c:01:a9:db:d9:26:d2:15:00:72:46:88:d4:72:cc:33:bd:85:
         82:ef:ec:06:f3:ba:4c:0e:18:39:d7:35:21:f5:95:f2:a0:24:
         36:07:da:22:b6:47:71:e2:0f:c5:1d:8b:f4:1b:c6:ed:be:b7:
         24:cd:1d:1c:6e:4d:e2:b6:00:45:76:12:14:af:d5:59:5b:27:
         3e:68:07:0f:83:21:65:f8:6f:57:05:8d:ee:3b:68:d7:f1:7f:
         a5:57:4f:93:a5:30:a6:c7:56:d1:ed:48:9a:ab:fd:dd:4d:88:
         7b:a0:83:31:a6:c8:fc:88:c8:70:ce:f4:38:f8:29:01:4a:ef:
         7c:95:c1:93:d9:43:9d:0a:dc:b5:b9:ca:f5:5b:f3:e2:9a:e8:
         14:e5:3e:1a:3e:80:fe:df:55:11:b6:95:08:71:c7:cd:38:4f:
         6b:9e:f7:3f:f2:03:97:e2:9a:d2:27:6c:72:48:48:f8:12:79:
         b9:b3:97:e5:c3:ba:70:7a:d2:4b:97:6a:db:0d:27:73:61:86:
         86:ac:b3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 11:43:08 2026 by rpki-client