Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa
File:                     3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          avUzIC3XPVGdGZ+cKfpypcLQkjrRSsczJX19fYyE8cw=
Subject key identifier:   95:78:09:BA:AD:DF:FC:3D:F4:F2:F9:9B:7D:70:57:8A:39:FD:F6:84
Certificate issuer:       /CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
Certificate serial:       4101347B29DDFE24FBFF2120B78D543AFA4CFB17
Authority key identifier: F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa
Signing time:             Fri 14 Aug 2026 19:03:20 +0000
ROA not before:           Fri 14 Aug 2026 18:58:20 +0000
ROA not after:            Fri 13 Aug 2027 19:03:20 +0000
asID:                     271238
IP address blocks:        190.171.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 21:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:34:7b:29:dd:fe:24:fb:ff:21:20:b7:8d:54:3a:fa:4c:fb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
        Validity
            Not Before: Aug 14 18:58:20 2026 GMT
            Not After : Aug 13 19:03:20 2027 GMT
        Subject: CN=957809BAADDFFC3DF4F2F99B7D70578A39FDF684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:da:54:24:7a:48:73:27:47:96:78:d4:ed:
                    85:19:c2:cf:57:bf:6a:c4:b9:76:14:9b:a1:f6:87:
                    69:cc:04:89:6c:c6:16:ce:60:1a:fb:78:eb:97:21:
                    ec:89:c0:fd:e9:09:bf:42:d7:89:1f:e0:7e:f5:c8:
                    44:f0:a7:d7:52:9b:ac:1f:d9:74:00:d2:91:41:2f:
                    99:11:c3:84:dc:2f:1c:97:0d:d2:a3:1f:8c:dc:f0:
                    4d:86:c5:3d:04:41:b0:41:ee:92:cf:85:e9:17:31:
                    9b:4b:7a:53:e5:57:01:5d:e9:b1:49:9f:80:57:4b:
                    25:2e:11:4f:61:25:e7:30:ae:89:53:d2:a7:8a:9b:
                    8d:ac:fe:1e:1c:ca:60:4f:73:12:57:fe:85:7f:78:
                    17:63:48:68:62:d6:73:c6:74:33:43:86:f8:c2:95:
                    d0:e7:af:1f:d2:da:71:43:55:4b:90:68:60:bb:57:
                    24:1b:57:42:7d:c9:80:29:58:f2:57:27:a3:47:2e:
                    25:05:83:a3:56:7a:ad:50:98:76:d4:d9:fb:9a:d4:
                    d2:ce:4f:ba:93:b3:40:b2:9b:10:2c:31:3c:e5:af:
                    38:4e:c0:32:69:35:92:1a:71:80:a7:d6:8d:2c:dc:
                    0b:88:6b:dd:c1:45:89:20:7d:c4:ec:99:0f:ed:96:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:78:09:BA:AD:DF:FC:3D:F4:F2:F9:9B:7D:70:57:8A:39:FD:F6:84
            X509v3 Authority Key Identifier:
                keyid:F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37322e302f32342d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:4d:7a:11:80:1b:8a:e0:b7:08:db:8c:74:0c:81:bc:be:ed:
         a5:77:1b:78:fe:6b:ab:40:c6:1f:3b:2c:c9:96:3c:ca:a0:f5:
         57:66:4a:01:45:72:0b:bc:11:ab:f5:b0:9e:ab:d9:bf:fc:4e:
         56:0b:d3:d7:9c:13:70:b5:19:d2:4f:8a:dc:38:6e:0c:5e:82:
         78:dc:c7:6a:ee:1e:61:df:db:31:93:84:8b:a9:0d:06:74:1f:
         13:1d:58:07:3c:7e:5d:30:29:54:24:ce:12:2c:c7:c2:e1:2d:
         e9:12:5f:79:20:e7:49:d4:1f:ba:74:c8:47:0c:2e:23:99:96:
         87:1b:ec:be:2c:8a:26:dc:62:1a:0a:9f:09:10:73:96:37:ed:
         5a:e4:77:44:6f:02:9e:b4:0e:46:75:69:dc:f9:be:8d:aa:f0:
         9b:c8:db:09:e4:bd:cc:8f:89:33:c0:7c:c1:c2:ce:7b:53:83:
         1b:20:39:52:14:e7:c1:18:24:83:c4:c6:ff:eb:f5:00:1a:f6:
         b9:7f:14:44:df:a5:cd:1e:52:7b:c9:b8:60:4d:5b:68:35:d7:
         54:56:0c:a5:c0:09:11:6a:1a:3c:e8:ff:ed:08:01:9c:a4:39:
         54:37:e7:d0:f8:c8:fc:7e:f2:dd:cd:a1:7b:98:dc:cf:d2:f8:
         4d:4a:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 22:18:52 2026 by rpki-client