Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
File:                     3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          bek1HACJUCpVK86x2lejaGYENhaOGdujcmxvr8J6JNI=
Subject key identifier:   82:08:D1:EA:4E:D5:53:90:37:9E:AA:0B:BB:6D:53:E7:B1:0A:F1:52
Certificate issuer:       /CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
Certificate serial:       0795D6853A61684E9A72EFCEDD6CF56A3F0DE708
Authority key identifier: F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa
Signing time:             Fri 14 Aug 2026 19:00:48 +0000
ROA not before:           Fri 14 Aug 2026 18:55:48 +0000
ROA not after:            Fri 13 Aug 2027 19:00:48 +0000
asID:                     271238
IP address blocks:        190.171.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:95:d6:85:3a:61:68:4e:9a:72:ef:ce:dd:6c:f5:6a:3f:0d:e7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
        Validity
            Not Before: Aug 14 18:55:48 2026 GMT
            Not After : Aug 13 19:00:48 2027 GMT
        Subject: CN=8208D1EA4ED55390379EAA0BBB6D53E7B10AF152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:95:b1:6b:1f:4e:b0:69:67:7c:2c:35:b2:
                    82:0f:ec:bf:78:06:06:3f:af:fa:af:07:a0:86:d2:
                    a7:ea:d1:95:5c:99:35:d1:4a:52:cd:87:c6:ac:c9:
                    ab:e2:26:15:49:27:2f:63:c6:10:7e:51:27:23:8f:
                    c5:9f:40:d1:01:40:fa:75:29:98:ff:ae:e8:7f:8c:
                    0d:48:40:1a:c9:74:8c:47:30:68:ab:a0:de:37:04:
                    03:99:ac:ea:73:3d:08:84:3e:9d:1c:d1:f8:ae:3d:
                    0a:34:64:b5:e9:99:75:04:df:46:3a:3b:aa:cb:ce:
                    56:da:88:c4:fd:9e:e3:63:f9:c6:0c:f2:5f:04:be:
                    48:b2:d3:89:c0:8d:52:98:0c:af:94:2f:ec:7c:05:
                    c8:34:d0:a9:d1:74:67:8b:9f:83:eb:eb:34:b4:b0:
                    e6:60:f0:41:84:da:6c:c0:f1:4c:f7:7e:2e:8d:71:
                    aa:c5:c0:cf:76:20:5c:c5:b3:18:51:81:47:cc:d0:
                    d6:6d:91:2d:c0:68:ad:0d:b2:e4:88:c2:4c:7c:73:
                    96:a6:e7:97:bb:82:a2:1a:11:79:f8:35:9a:4e:1d:
                    17:f0:90:3a:51:79:02:82:16:29:dc:20:d2:d8:42:
                    b1:33:07:04:29:4a:cd:81:10:31:6b:a8:e9:67:9b:
                    23:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:08:D1:EA:4E:D5:53:90:37:9E:AA:0B:BB:6D:53:E7:B1:0A:F1:52
            X509v3 Authority Key Identifier:
                keyid:F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32322d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:73:a7:e5:81:b4:e4:e9:17:56:2d:aa:85:8f:01:47:77:41:
         8a:ec:ea:2b:5e:94:1b:e2:30:e5:f4:1c:61:b0:9c:45:d8:0a:
         bc:67:ea:55:4a:c9:dd:60:e4:5f:1e:df:b5:9e:e1:04:53:a2:
         16:d8:ad:e4:19:b9:1f:88:83:4c:7e:c5:96:bc:78:91:79:de:
         45:34:79:1b:e1:77:ac:8c:5d:ae:0e:60:3b:f8:3b:b2:71:a8:
         26:40:1d:dc:fe:10:b6:9a:dc:93:b1:cc:e3:57:ce:38:f8:1d:
         98:be:b1:da:eb:c3:cb:c6:50:e4:47:97:20:50:75:53:30:4a:
         a9:63:8f:9f:a1:46:35:10:ac:27:e8:82:f2:44:c8:a3:42:2e:
         e8:db:25:53:82:57:67:52:55:c0:db:5c:7d:fc:ce:9b:e4:b6:
         79:c7:1a:43:f9:b5:e8:4d:89:69:69:9c:eb:f8:35:ce:4f:19:
         17:fc:c5:56:16:11:1b:e2:a5:a9:a8:c7:ef:f2:34:5d:17:c7:
         1d:3c:fd:4d:72:76:ce:d6:eb:20:b1:26:9f:c5:80:e2:6b:b4:
         a9:98:6a:ec:42:96:ea:b7:9f:f7:6c:fb:a5:5d:66:f6:0b:18:
         4d:78:e1:2d:c7:7b:61:a0:a3:d3:66:ac:9d:1d:cf:bf:9a:7e:
         af:a2:4a:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB5XWhTphaE6acu/O3Wz1aj8N5wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYwMkRCQkE5NUJGMTk1QTBBMjc5REZCM0ZDQ0I2QTA1
NjgzNDhBNDAeFw0yNjA4MTQxODU1NDhaFw0yNzA4MTMxOTAwNDhaMDMxMTAvBgNV
BAMTKDgyMDhEMUVBNEVENTUzOTAzNzlFQUEwQkJCNkQ1M0U3QjEwQUYxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ/5Wxax9OsGlnfCw1soIP7L94
BgY/r/qvB6CG0qfq0ZVcmTXRSlLNh8asyaviJhVJJy9jxhB+UScjj8WfQNEBQPp1
KZj/ruh/jA1IQBrJdIxHMGiroN43BAOZrOpzPQiEPp0c0fiuPQo0ZLXpmXUE30Y6
O6rLzlbaiMT9nuNj+cYM8l8Evkiy04nAjVKYDK+UL+x8Bcg00KnRdGeLn4Pr6zS0
sOZg8EGE2mzA8Uz3fi6NcarFwM92IFzFsxhRgUfM0NZtkS3AaK0NsuSIwkx8c5am
55e7gqIaEXn4NZpOHRfwkDpReQKCFincINLYQrEzBwQpSs2BEDFrqOlnmyPvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUggjR6k7VU5A3nqoLu21T57EK8VIwHwYDVR0j
BBgwFoAU9gLbupW/GVoKJ537P8y2oFaDSKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0dZTnFlUVhHQ3VyV2Qxd3ZTYUFoaDFpTTNFeUNFdG12WkREUzhWdDRQ
c2cvMC9GNjAyREJCQTk1QkYxOTVBMEEyNzlERkIzRkNDQjZBMDU2ODM0OEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2MDJEQkJBOTVCRjE5NUEw
QTI3OURGQjNGQ0NCNkEwNTY4MzQ4QTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHWU5xZVFYR0N1cldkMXd2U2FBaGgxaU0zRXlDRXRtdlpERFM4VnQ0UHNnLzAv
MzEzOTMwMmUzMTM3MzEyZTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+q0gwDQYJKoZIhvcNAQELBQADggEBAFBzp+WB
tOTpF1YtqoWPAUd3QYrs6itelBviMOX0HGGwnEXYCrxn6lVKyd1g5F8e37We4QRT
ohbYreQZuR+Ig0x+xZa8eJF53kU0eRvhd6yMXa4OYDv4O7JxqCZAHdz+ELaa3JOx
zONXzjj4HZi+sdrrw8vGUORHlyBQdVMwSqljj5+hRjUQrCfogvJEyKNCLujbJVOC
V2dSVcDbXH38zpvktnnHGkP5tehNiWlpnOv4Nc5PGRf8xVYWERvipamox+/yNF0X
xx08/U1yds7W6yCxJp/FgOJrtKmYauxCluq3n/ds+6VdZvYLGE144S3He2Ggo9Nm
rJ0dz7+afq+iSoE=
-----END CERTIFICATE-----
Generated at Tue Aug 25 00:04:59 2026 by rpki-client