Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3139322e3134302e31322e302f32322d3332203d3e20323636313630.roa
File:                     3139322e3134302e31322e302f32322d3332203d3e20323636313630.roa (raw, json)
Hash identifier:          QgIIz2ejA9rsIhLO5cBnr3ZwVbOG9NBfi+VKx3uM4Q8=
Subject key identifier:   CE:83:85:F7:81:CF:1A:43:86:D1:BE:5F:34:C8:50:A4:5F:0F:B4:50
Certificate issuer:       /CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
Certificate serial:       31CC9D2770783131E9E5044AAD315C58FBC6BC5B
Authority key identifier: E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3139322e3134302e31322e302f32322d3332203d3e20323636313630.roa
Signing time:             Wed 14 Oct 2026 15:09:23 +0000
ROA not before:           Wed 14 Oct 2026 15:04:23 +0000
ROA not after:            Wed 13 Oct 2027 15:09:23 +0000
asID:                     266160
IP address blocks:        192.140.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl
                          rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 22:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cc:9d:27:70:78:31:31:e9:e5:04:4a:ad:31:5c:58:fb:c6:bc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20
        Validity
            Not Before: Oct 14 15:04:23 2026 GMT
            Not After : Oct 13 15:09:23 2027 GMT
        Subject: CN=CE8385F781CF1A4386D1BE5F34C850A45F0FB450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:f0:31:14:be:3c:38:32:cd:f5:c6:79:79:
                    45:04:d1:2e:dc:a3:91:1d:7b:ca:ad:51:a1:1d:23:
                    03:17:be:05:b7:bd:c4:11:61:30:c6:88:68:66:ea:
                    cf:5b:47:77:8c:d7:6a:a4:73:26:34:e7:75:5d:fe:
                    ea:f5:1f:22:c5:89:92:75:0d:9b:4f:6f:a0:b6:88:
                    c3:79:93:d3:00:80:b2:6d:f5:c5:63:ba:5e:a2:a3:
                    c5:60:26:a9:19:fd:bb:25:d4:58:ca:c6:e3:dd:a5:
                    0e:3f:25:e5:bc:32:08:a2:d6:c7:53:cb:51:9f:da:
                    df:79:d5:44:60:c3:ff:aa:33:c2:14:e0:d1:23:43:
                    a1:30:35:a2:cf:f7:af:fe:eb:43:6f:02:6c:be:74:
                    4a:3d:7c:28:bb:d9:07:9d:aa:c5:3d:c2:52:96:05:
                    9a:c9:91:c5:c2:08:d8:6a:ad:31:8f:49:a4:5b:da:
                    56:e2:86:39:ee:92:da:63:f4:1e:15:35:4d:70:72:
                    10:65:f0:81:d2:47:d9:10:a9:bb:02:38:88:68:90:
                    9a:17:f8:54:c0:96:ea:bf:ac:35:2e:29:5b:db:42:
                    a0:c7:16:70:8a:0c:06:d4:e5:ee:0e:3b:be:91:e0:
                    9d:52:da:10:d3:ca:95:b2:36:65:48:5a:06:b8:1c:
                    df:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:83:85:F7:81:CF:1A:43:86:D1:BE:5F:34:C8:50:A4:5F:0F:B4:50
            X509v3 Authority Key Identifier:
                keyid:E8:9D:DA:5F:F6:82:E4:D4:B2:64:3A:27:1C:5D:49:EB:9D:DC:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E89DDA5FF682E4D4B2643A271C5D49EB9DDC4E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3139322e3134302e31322e302f32322d3332203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:82:db:bf:ae:0b:2b:2f:81:dc:2e:9c:0e:d8:97:90:53:30:
         0b:38:e1:dc:3b:42:19:38:8d:af:f6:f0:16:8f:70:8f:c6:17:
         86:a3:1d:f6:53:48:48:11:5b:02:4b:ac:f4:d2:09:fa:56:d4:
         e5:db:d3:e2:3a:75:46:30:ae:65:fc:45:ee:f4:f9:dc:78:99:
         76:be:ac:e9:91:39:f9:2d:bb:fd:b1:03:52:c1:7b:10:5e:c4:
         35:fb:45:d5:b6:34:b3:76:a8:33:c0:c9:e5:ff:1a:20:bb:f5:
         f8:76:f2:31:62:f0:df:bd:d1:0e:f5:5c:2f:8a:2e:5f:8a:fc:
         5a:89:4b:39:3b:d4:41:e4:3b:07:12:7d:50:bb:c8:e0:0c:9a:
         d8:e5:7c:35:e8:1d:bf:95:44:e0:26:85:ba:4c:57:7d:2d:ea:
         ab:67:4f:f7:35:bc:4c:68:7a:5a:5f:75:7e:04:db:f8:55:08:
         e7:3e:ba:a1:42:05:ec:c1:01:f1:53:c6:4d:6a:82:ad:94:5d:
         e4:dc:75:cb:cc:6f:6d:58:b2:56:5d:99:59:43:a6:f4:aa:18:
         0d:7d:55:eb:c5:68:59:7b:30:ad:68:cf:34:08:0b:a1:d1:48:
         05:1d:51:f0:ef:c9:c2:07:cb:54:fe:a6:14:47:3e:97:1a:80:
         4e:a1:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:19:23 2026 by rpki-client