Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa
File:                     3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa (raw, json)
Hash identifier:          8j7U+OSLWhmKKKbe4BIkjAB6wyTSdjtEGVyj2Jd7EHw=
Subject key identifier:   9D:A3:E5:12:58:6D:E1:FA:02:98:D0:2B:68:8E:24:3A:C7:04:E5:37
Certificate issuer:       /CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
Certificate serial:       63F7334D4A1D9580C66A56CD2385309194255911
Authority key identifier: F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa
Signing time:             Fri 14 Aug 2026 19:03:20 +0000
ROA not before:           Fri 14 Aug 2026 18:58:20 +0000
ROA not after:            Fri 13 Aug 2027 19:03:20 +0000
asID:                     271238
IP address blocks:        190.171.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl
                          rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f7:33:4d:4a:1d:95:80:c6:6a:56:cd:23:85:30:91:94:25:59:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F602DBBA95BF195A0A279DFB3FCCB6A0568348A4
        Validity
            Not Before: Aug 14 18:58:20 2026 GMT
            Not After : Aug 13 19:03:20 2027 GMT
        Subject: CN=9DA3E512586DE1FA0298D02B688E243AC704E537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:00:9e:e1:0e:37:9a:5b:20:e6:51:33:58:
                    65:c8:e3:68:13:2a:d7:59:5b:b9:6c:16:20:8d:26:
                    68:b0:a2:d2:50:46:fe:09:62:d8:e7:88:39:5b:a5:
                    50:9b:88:49:81:87:5d:bc:a7:26:ea:be:7b:ec:2b:
                    ae:64:cd:57:79:0c:06:d8:55:d0:9e:01:76:04:72:
                    33:11:f7:ee:1b:5e:ed:3b:69:65:94:e8:33:49:6f:
                    d5:2b:20:68:5b:48:d4:b3:dc:9a:d9:9e:4b:ff:d9:
                    7e:85:c5:67:46:88:91:88:96:8e:cb:d4:c6:f8:b7:
                    d2:be:0b:41:6f:73:bb:cc:33:95:84:33:a3:41:c7:
                    fe:49:a8:3a:9f:3f:43:49:68:f6:33:3f:1f:99:6f:
                    bf:a4:fe:e0:0f:d7:64:8c:4b:1b:17:ca:fb:b9:9c:
                    33:38:7e:6e:10:f4:c9:c8:dd:99:49:dc:08:30:5e:
                    a0:95:a3:ce:19:ec:e9:a3:34:61:87:f5:fb:32:81:
                    d0:49:10:9e:88:03:9e:d2:a9:66:b2:e7:e4:fa:1c:
                    a8:83:c4:e8:ed:8e:4c:a1:91:3b:f6:e5:32:6c:cd:
                    c4:ce:1d:5e:ad:88:5f:84:f1:fa:d0:7e:c3:cb:35:
                    75:33:52:da:5a:2a:64:76:2f:75:d8:75:81:e0:10:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:E5:12:58:6D:E1:FA:02:98:D0:2B:68:8E:24:3A:C7:04:E5:37
            X509v3 Authority Key Identifier:
                keyid:F6:02:DB:BA:95:BF:19:5A:0A:27:9D:FB:3F:CC:B6:A0:56:83:48:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F602DBBA95BF195A0A279DFB3FCCB6A0568348A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGYNqeQXGCurWd1wvSaAhh1iM3EyCEtmvZDDS8Vt4Psg/0/3139302e3137312e37342e302f32342d3234203d3e20323731323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:35:c5:32:e3:f1:24:b0:61:38:e4:32:a0:0f:92:34:70:fc:
         bc:06:bd:ed:ec:29:3c:a0:05:42:bf:bc:a4:b5:09:87:78:00:
         80:cb:33:30:78:f7:91:55:e1:ea:d1:b8:e9:74:04:83:00:1c:
         4c:54:75:07:39:bb:c6:49:51:90:a2:07:4e:06:a7:f4:be:9a:
         bb:d3:9b:21:3c:65:f6:4a:48:c8:03:02:04:1d:c1:1c:ed:c5:
         fa:6d:13:38:25:b2:8f:85:11:75:d2:63:cf:da:5f:d5:5c:9d:
         9b:37:10:76:5e:4a:23:d1:18:63:c7:b3:19:54:aa:51:63:81:
         06:6a:31:c8:68:c8:7f:4f:6c:80:f1:ea:8e:68:52:98:18:84:
         78:34:a6:d9:df:13:f7:94:31:24:da:f4:d1:02:d6:6b:a9:0a:
         df:4d:c4:2e:b4:f0:96:a4:7d:5f:64:f4:59:6b:8f:5a:9a:81:
         43:ac:86:6c:5b:ce:5e:13:08:72:8e:c0:de:46:3d:ee:b9:93:
         a2:ba:ea:ae:e8:7d:27:1a:7d:ca:50:51:9b:12:4a:98:25:9b:
         3a:88:96:b3:80:55:01:f8:b9:71:14:fd:a7:44:4f:bd:e2:1b:
         83:a7:d9:4d:ea:dd:f2:c1:ab:ff:de:d1:eb:08:0d:17:97:65:
         4e:6c:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 23:57:02 2026 by rpki-client