Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3231203d3e20323633333439.roa
File:                     3139312e33372e31362e302f32312d3231203d3e20323633333439.roa (raw, json)
Hash identifier:          l7XLbAacwEaepmj0ej9iQNxT4j4uhBgWXAW+cd9YnEQ=
Subject key identifier:   D4:93:91:2F:AF:2F:D9:24:76:86:FF:8E:81:98:3B:05:FA:5B:91:6F
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       79E4A8219A6B27562BE24D24FBA1768FFEDD1ABE
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3231203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:10 +0000
ROA not before:           Wed 23 Sep 2026 01:00:10 +0000
ROA not after:            Wed 22 Sep 2027 01:05:10 +0000
asID:                     263349
IP address blocks:        191.37.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:a8:21:9a:6b:27:56:2b:e2:4d:24:fb:a1:76:8f:fe:dd:1a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:10 2026 GMT
            Not After : Sep 22 01:05:10 2027 GMT
        Subject: CN=D493912FAF2FD9247686FF8E81983B05FA5B916F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:83:e3:2f:57:58:6c:a9:02:d0:a8:4e:aa:
                    7d:5b:0c:30:72:b2:00:c5:c4:77:19:62:cd:86:76:
                    b5:6a:0c:53:d4:59:f8:13:8d:6f:0a:44:76:e1:7d:
                    f0:8a:bf:26:8e:c6:96:8a:aa:35:b2:33:a8:d8:53:
                    99:b3:41:73:ee:30:32:a6:04:b7:54:37:63:70:e8:
                    62:b6:69:f0:55:3a:28:75:cb:d8:29:7c:c2:9a:52:
                    7c:db:d5:cc:28:7a:9a:fe:e4:b6:c7:6a:e9:35:14:
                    ba:36:3a:a8:c6:d7:75:23:b5:2e:16:ef:32:83:b0:
                    b5:15:80:cb:bd:77:38:f8:f5:ff:60:8d:7e:dc:4f:
                    21:56:13:fe:71:ea:7c:23:2d:b9:a2:7d:ce:6e:ad:
                    ab:4f:0d:ea:a8:f5:1a:8e:98:10:79:9e:c0:7b:f4:
                    70:59:92:a8:ba:de:7f:fa:3e:eb:58:cd:32:03:0a:
                    e5:67:44:84:66:05:c9:5b:cb:97:b2:d4:42:fc:be:
                    17:0a:a6:4c:0c:88:7a:44:d2:9d:b6:04:0b:32:da:
                    f1:96:c6:ff:12:50:2f:6d:0e:84:f4:87:60:a9:da:
                    4b:11:d1:88:8c:68:b0:b7:85:4f:a9:c7:27:8f:60:
                    5a:c1:fe:ac:f3:3b:dc:e5:90:8a:84:81:a5:40:b9:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:93:91:2F:AF:2F:D9:24:76:86:FF:8E:81:98:3B:05:FA:5B:91:6F
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e31362e302f32312d3231203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:7a:2a:f7:81:39:c4:7c:07:00:cd:f5:2a:a8:93:c1:1b:
         a7:3c:74:bd:75:1c:c8:78:56:5b:e9:ca:62:e6:80:a6:61:43:
         5c:47:d7:28:02:49:ec:b4:13:3a:6c:8e:41:0b:33:59:fd:43:
         54:fa:e3:f1:20:75:3d:8e:5a:08:09:ef:1c:0c:aa:20:e6:e8:
         c1:44:72:16:7f:81:96:f1:3f:eb:73:78:46:8f:8c:c0:9a:ea:
         e2:53:23:2d:a1:61:f3:1b:e4:60:06:da:47:80:ff:8c:1f:2f:
         ef:38:ad:42:45:3a:0c:26:88:ec:00:f7:78:86:c5:c5:df:53:
         95:97:4c:53:30:b6:12:82:54:7a:28:33:fa:a7:14:6f:bd:6a:
         bd:02:a3:e3:61:5f:71:39:51:44:de:23:db:1e:24:62:a5:03:
         a7:87:b0:c7:a7:a9:e1:84:16:6d:92:22:b4:09:9e:97:62:ee:
         03:35:2a:9d:e1:ad:0b:50:25:97:eb:5d:fe:73:6d:86:d1:de:
         9d:d1:cf:bf:f9:4a:7c:ac:11:f0:07:ac:d1:3b:e2:69:8b:be:
         ad:94:19:69:26:1e:e5:00:b8:01:5a:26:aa:8d:81:1c:2d:d0:
         5d:2d:17:fa:72:69:40:11:62:69:d5:4a:42:d3:34:37:5f:b6:
         aa:c8:a9:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeeSoIZprJ1Yr4k0k+6F2j/7dGr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZBNjhEMzc3REQ2NzBFMThFQ0UzRTEyQUE2NTZDNjI4
MEIyRDBDMzAeFw0yNjA5MjMwMTAwMTBaFw0yNzA5MjIwMTA1MTBaMDMxMTAvBgNV
BAMTKEQ0OTM5MTJGQUYyRkQ5MjQ3Njg2RkY4RTgxOTgzQjA1RkE1QjkxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUIPjL1dYbKkC0KhOqn1bDDBy
sgDFxHcZYs2GdrVqDFPUWfgTjW8KRHbhffCKvyaOxpaKqjWyM6jYU5mzQXPuMDKm
BLdUN2Nw6GK2afBVOih1y9gpfMKaUnzb1cwoepr+5LbHauk1FLo2OqjG13UjtS4W
7zKDsLUVgMu9dzj49f9gjX7cTyFWE/5x6nwjLbmifc5uratPDeqo9RqOmBB5nsB7
9HBZkqi63n/6PutYzTIDCuVnRIRmBclby5ey1EL8vhcKpkwMiHpE0p22BAsy2vGW
xv8SUC9tDoT0h2Cp2ksR0YiMaLC3hU+pxyePYFrB/qzzO9zlkIqEgaVAueBxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1JORL68v2SR2hv+OgZg7BfpbkW8wHwYDVR0j
BBgwFoAU/6aNN33WcOGOzj4SqmVsYoCy0MMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC9GRkE2OEQzNzdERDY3MEUxOEVDRTNFMTJBQTY1NkM2MjgwQjJEMEMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGQTY4RDM3N0RENjcwRTE4
RUNFM0UxMkFBNjU2QzYyODBCMkQwQzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzOTMxMmUzMzM3MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMz
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDvyUQMA0GCSqGSIb3DQEBCwUAA4IBAQBr2Xoq94E5
xHwHAM31KqiTwRunPHS9dRzIeFZb6cpi5oCmYUNcR9coAknstBM6bI5BCzNZ/UNU
+uPxIHU9jloICe8cDKog5ujBRHIWf4GW8T/rc3hGj4zAmuriUyMtoWHzG+RgBtpH
gP+MHy/vOK1CRToMJojsAPd4hsXF31OVl0xTMLYSglR6KDP6pxRvvWq9AqPjYV9x
OVFE3iPbHiRipQOnh7DHp6nhhBZtkiK0CZ6XYu4DNSqd4a0LUCWX613+c22G0d6d
0c+/+Up8rBHwB6zRO+Jpi76tlBlpJh7lALgBWiaqjYEcLdBdLRf6cmlAEWJp1UpC
0zQ3X7aqyKkJ
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:13 2026 by rpki-client