Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136372e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          Ai74HN6Ip0QSysmSBmsXDkbaoWFwjDXQ21kSULx8Euo=
Subject key identifier:   B9:3B:1C:CE:01:2D:9E:42:CA:35:8F:4E:C1:FA:71:0C:72:6D:14:45
Certificate issuer:       /CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
Certificate serial:       5D75EA8771E23A25A8639C00C0CB7D3A4D4B6DFD
Authority key identifier: BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
Signing time:             Thu 20 Aug 2026 12:55:09 +0000
ROA not before:           Thu 20 Aug 2026 12:50:09 +0000
ROA not after:            Thu 19 Aug 2027 12:55:09 +0000
asID:                     266196
IP address blocks:        191.6.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:ea:87:71:e2:3a:25:a8:63:9c:00:c0:cb:7d:3a:4d:4b:6d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD219691779E4381927F5A5DC8FC2B32EA9F42EF
        Validity
            Not Before: Aug 20 12:50:09 2026 GMT
            Not After : Aug 19 12:55:09 2027 GMT
        Subject: CN=B93B1CCE012D9E42CA358F4EC1FA710C726D1445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:c3:a6:4f:69:14:00:ea:8a:9e:fd:4f:dd:
                    a1:0d:37:97:91:7f:88:42:18:e3:e9:85:30:8a:05:
                    7b:8a:fd:69:77:90:6b:ad:1f:d5:93:25:b7:b1:27:
                    90:6f:dd:e7:e4:8b:21:f2:e6:55:9d:50:1a:98:62:
                    1c:c0:6e:d2:ce:44:a6:f6:36:e3:64:35:42:a1:7f:
                    6b:d7:9a:b3:e5:dc:7c:24:f8:64:2b:bf:94:3f:46:
                    4f:bb:e6:3a:e9:7d:84:6c:e6:63:52:41:11:73:ef:
                    53:6d:23:62:1c:fb:87:f2:d5:21:24:4c:4e:89:5a:
                    e9:c4:27:b0:00:d7:d0:9b:7f:e3:cd:b9:77:0d:d4:
                    b6:b1:2c:32:1b:7b:8c:18:d0:e7:4a:e5:aa:d8:50:
                    a5:14:31:31:a0:66:fa:aa:5d:fe:de:bc:dc:24:cb:
                    d0:5c:17:91:3c:43:67:76:fb:33:b4:4d:bf:e3:44:
                    cc:be:0a:9f:62:b6:87:d7:08:9d:47:91:e2:bf:3c:
                    6c:60:be:26:0c:c8:98:d4:f6:31:0b:4f:b3:a6:ad:
                    ea:66:da:5a:23:f8:bb:53:d6:c1:79:31:04:d8:a9:
                    9d:95:eb:d3:08:35:6a:8d:72:9c:db:f0:90:22:8e:
                    4d:0c:fc:4b:59:77:1b:c7:7e:ac:7b:47:29:d3:5c:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3B:1C:CE:01:2D:9E:42:CA:35:8F:4E:C1:FA:71:0C:72:6D:14:45
            X509v3 Authority Key Identifier:
                keyid:BD:21:96:91:77:9E:43:81:92:7F:5A:5D:C8:FC:2B:32:EA:9F:42:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD219691779E4381927F5A5DC8FC2B32EA9F42EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6c:73:c3:3a:95:fa:ff:d9:41:69:a7:82:d3:d3:25:35:04:
         82:06:42:07:fd:d7:ca:08:92:3b:32:16:7b:33:bd:bb:0a:5c:
         7c:83:09:89:f4:2c:0f:0e:ef:30:f8:11:bf:97:ca:3b:99:d7:
         c6:81:9d:e3:87:31:aa:84:e5:f1:a7:48:d7:cd:15:9a:1b:37:
         c2:e7:db:4b:46:0b:c8:d2:ca:c6:9b:de:e7:a3:f6:f0:32:d4:
         93:72:e9:de:03:7a:36:e3:fd:bb:a1:ed:71:bb:5d:56:ef:26:
         59:dc:74:15:f2:4e:4d:01:82:96:6c:46:6a:90:2e:d7:55:2a:
         cf:18:62:a0:78:09:dd:32:8e:44:0a:06:4b:86:93:f8:b3:70:
         93:7c:d4:52:87:e9:fc:60:d3:b4:d3:a3:94:52:97:f9:a0:44:
         91:0d:71:16:9b:d1:d3:82:1f:86:c2:cb:f3:85:2c:0a:69:ca:
         fa:12:b2:f9:f0:96:8a:5f:cb:fc:6f:98:ff:ea:1a:b2:34:2b:
         0e:9d:79:2e:9b:39:e8:a8:7c:06:db:a4:06:fe:fa:f9:d7:a0:
         1b:31:4b:16:4e:56:92:da:b9:2e:4b:9c:61:c1:3f:82:87:88:
         fb:ce:fa:04:76:1f:2c:b2:2f:75:33:74:d4:96:96:7d:9d:7e:
         6d:d5:f6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 04:49:41 2026 by rpki-client