Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32312e302f32342d3234203d3e20323633333439.roa
File:                     3139312e33372e32312e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          o2oiOzXYvpbSnBpiYKAhfYz3azie+rnzoiinAwQYyo8=
Subject key identifier:   06:B7:4A:B3:6B:D7:75:C9:0B:14:59:43:E3:63:81:42:C8:7C:65:9A
Certificate issuer:       /CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
Certificate serial:       394B548F076D0A2DE21FDEEF280E0EFDFDB89692
Authority key identifier: FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32312e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 23 Sep 2026 01:05:15 +0000
ROA not before:           Wed 23 Sep 2026 01:00:15 +0000
ROA not after:            Wed 22 Sep 2027 01:05:15 +0000
asID:                     263349
IP address blocks:        191.37.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 08:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4b:54:8f:07:6d:0a:2d:e2:1f:de:ef:28:0e:0e:fd:fd:b8:96:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFA68D377DD670E18ECE3E12AA656C6280B2D0C3
        Validity
            Not Before: Sep 23 01:00:15 2026 GMT
            Not After : Sep 22 01:05:15 2027 GMT
        Subject: CN=06B74AB36BD775C90B145943E3638142C87C659A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:89:85:2d:36:45:84:8e:5b:93:75:77:aa:
                    d5:3d:da:27:d2:e6:28:23:3a:89:2b:64:ad:a1:3e:
                    bf:3c:58:8e:38:81:1d:b1:23:aa:9c:7e:55:b0:6e:
                    d7:1d:07:2a:54:b0:2d:be:46:98:dc:1e:0e:a6:04:
                    93:22:d1:1f:b3:13:49:1b:d4:2a:f9:c4:8e:57:50:
                    e8:86:fc:46:50:67:1b:5c:d4:f3:28:9e:be:c0:d3:
                    6c:91:46:cf:9e:2e:c7:90:72:c8:09:92:01:84:fa:
                    cb:4d:47:24:d2:f7:7f:eb:82:5e:fa:70:6e:73:fd:
                    96:29:47:d5:ad:42:c3:1d:07:76:7f:d7:a9:92:62:
                    48:f5:70:57:5e:cf:98:99:3c:16:73:fa:57:b1:2d:
                    74:8f:35:f6:b6:7e:83:41:46:ce:b4:ba:c2:21:c2:
                    96:af:97:05:2f:63:32:25:6a:c7:aa:f2:61:0b:f7:
                    2f:92:42:36:b6:84:37:ab:95:04:46:f9:94:44:a5:
                    ab:d4:7e:8e:28:ff:26:bb:ac:8f:d4:e9:08:75:9f:
                    18:17:f6:d6:86:63:0e:40:0f:ac:5f:33:55:37:dc:
                    4e:67:e4:3f:03:4f:9a:25:b7:a7:99:21:77:bc:66:
                    66:5a:6e:a5:0a:2b:56:df:ab:c7:25:c6:51:d5:63:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B7:4A:B3:6B:D7:75:C9:0B:14:59:43:E3:63:81:42:C8:7C:65:9A
            X509v3 Authority Key Identifier:
                keyid:FF:A6:8D:37:7D:D6:70:E1:8E:CE:3E:12:AA:65:6C:62:80:B2:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFA68D377DD670E18ECE3E12AA656C6280B2D0C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32312e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:5b:a1:fa:12:ac:38:cb:08:da:85:b4:07:86:42:21:cc:
         02:31:e7:38:a0:d2:ce:07:0d:07:13:0c:64:66:1d:a4:e7:6b:
         2c:7b:49:6a:f3:76:76:19:76:07:e7:6a:02:e8:f0:62:d5:dc:
         10:ea:89:17:70:b8:bb:7d:c2:21:5b:da:17:53:13:c1:5a:f1:
         14:ac:f0:b1:81:74:f4:00:e8:ad:5a:31:c3:4e:f8:73:66:96:
         19:2d:76:78:ca:d0:9d:8b:cc:95:7a:b9:5e:75:b7:4d:7c:16:
         dc:cb:7b:e1:3e:48:c2:cd:5a:be:75:03:56:0c:63:23:4d:aa:
         62:fd:ee:3b:33:bb:bb:4b:48:0d:a1:99:e0:7b:71:68:a4:26:
         c2:19:bb:b3:39:73:f3:bc:9b:21:29:4b:c3:cc:a9:76:40:8d:
         9b:3c:13:a4:d5:96:2f:58:54:c6:87:95:b0:9a:0d:0d:2c:c1:
         8c:f9:b4:fd:13:61:dd:3d:b2:00:ac:a2:bf:bf:b9:a0:6d:43:
         05:cd:ef:74:93:8a:4d:d4:28:ed:f1:91:c6:42:14:4b:b0:d1:
         50:04:ff:81:92:d4:31:bc:e9:13:3a:73:51:28:93:e3:ef:b5:
         f8:d8:39:4f:57:13:bd:f0:28:da:d4:40:c5:24:90:99:b0:2f:
         ee:72:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:06:16 2026 by rpki-client