Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37392e302f32342d3234203d3e20323731363432.roa
File:                     3139302e392e37392e302f32342d3234203d3e20323731363432.roa (raw, json)
Hash identifier:          vdzJciZBXJT0i35J7vpQJ9pdD4mRYKd3OGNLwN2g4jc=
Subject key identifier:   26:A3:19:DE:6C:1C:D2:23:E7:BA:0A:49:C5:9C:AB:3C:EB:19:30:86
Certificate issuer:       /CN=502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E
Certificate serial:       1A7989D13148539F3712E37F2921B839568C53B1
Authority key identifier: 50:2A:EA:58:43:E0:DC:9A:E3:D6:D5:DE:72:94:2F:D9:59:B1:3A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37392e302f32342d3234203d3e20323731363432.roa
Signing time:             Fri 21 Aug 2026 17:12:27 +0000
ROA not before:           Fri 21 Aug 2026 17:07:27 +0000
ROA not after:            Fri 20 Aug 2027 17:12:27 +0000
asID:                     271642
IP address blocks:        190.9.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.crl
                          rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 08:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:79:89:d1:31:48:53:9f:37:12:e3:7f:29:21:b8:39:56:8c:53:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E
        Validity
            Not Before: Aug 21 17:07:27 2026 GMT
            Not After : Aug 20 17:12:27 2027 GMT
        Subject: CN=26A319DE6C1CD223E7BA0A49C59CAB3CEB193086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:6d:1b:cd:16:ac:f5:05:4c:6d:13:38:64:
                    8e:75:09:1d:cb:4a:2f:af:3f:8f:88:8a:cd:4e:9f:
                    27:c6:5d:fa:cb:f5:ea:db:61:7c:b5:bc:56:e5:51:
                    37:63:ec:98:01:86:f6:64:fc:f4:6a:f2:00:7e:19:
                    43:6c:05:59:21:a9:06:14:63:a4:07:95:12:09:d6:
                    51:88:c5:dc:89:05:11:06:c6:79:c1:34:4c:ce:bc:
                    8e:2b:75:09:be:1a:16:c1:3d:e6:c1:73:61:bd:c9:
                    85:c0:f0:71:71:13:a1:2e:37:de:92:8a:74:9c:c7:
                    03:ee:32:d9:18:dd:a5:54:04:b8:ea:74:5d:c5:ee:
                    48:c8:18:41:e0:79:7a:42:21:d1:1e:93:ed:5c:76:
                    06:28:9b:a5:9a:92:3d:1c:d9:e6:25:32:85:95:31:
                    38:d6:1a:11:f9:d3:c9:90:a7:3f:94:13:d5:98:d2:
                    0f:c9:a0:ca:47:fc:1e:82:d2:f3:35:03:5e:7f:9f:
                    12:3a:e7:c6:12:7f:35:03:bf:ad:e4:a4:b7:82:08:
                    4f:76:3b:2a:62:da:4e:b3:da:80:26:87:9c:dd:18:
                    1d:fc:8a:4d:e6:88:a4:24:45:03:1d:29:a1:60:ab:
                    61:8c:e1:6e:70:ea:cc:10:d6:98:d0:15:27:11:22:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:19:DE:6C:1C:D2:23:E7:BA:0A:49:C5:9C:AB:3C:EB:19:30:86
            X509v3 Authority Key Identifier:
                keyid:50:2A:EA:58:43:E0:DC:9A:E3:D6:D5:DE:72:94:2F:D9:59:B1:3A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/502AEA5843E0DC9AE3D6D5DE72942FD959B13A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/3139302e392e37392e302f32342d3234203d3e20323731363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:dd:5d:e6:0b:d4:92:17:ad:73:b2:5a:f7:25:6a:06:12:17:
         03:ec:ee:ed:78:f6:d3:83:ec:7a:b8:0b:ef:7c:8c:44:df:da:
         a6:c7:2c:1b:1d:19:a0:a1:1f:8c:83:9b:3f:19:0e:16:c0:1c:
         40:6d:75:af:13:a8:ae:4e:74:4c:21:10:d7:bb:ca:92:ea:11:
         61:52:50:39:1b:6d:c0:e0:ed:20:fa:d2:ee:d3:2c:7a:a2:8e:
         fa:3f:d9:84:1b:a6:52:53:2f:be:46:53:54:69:cc:26:e9:fd:
         50:8e:54:e5:66:55:c8:ee:ba:72:6c:8e:03:34:d1:f2:63:cd:
         83:70:44:4b:52:78:d4:27:1d:78:0f:dc:6b:f6:fc:0f:ae:31:
         04:86:5f:24:f3:2a:c5:ce:0c:09:58:86:e2:74:64:31:7e:83:
         45:a8:79:c5:94:2e:31:de:dd:3e:62:ef:b3:ca:e7:9c:92:af:
         bc:f2:cb:d0:67:80:b4:77:53:25:9d:1c:52:eb:47:48:33:37:
         38:1c:ca:91:8c:66:7a:17:8f:3a:25:5d:7c:e5:69:04:c1:79:
         7e:da:57:72:bb:cd:ab:23:79:b1:91:0f:b3:75:98:d7:d9:27:
         e4:ad:6b:a6:d2:a8:8a:19:29:07:f8:be:d6:17:a1:c0:ac:48:
         a1:81:91:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:47:25 2026 by rpki-client