Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36332e302f32342d3234203d3e20323633333437.roa
File:                     3139312e33372e36332e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier:          WH4An89NVwoft187riA7qvCW7+VOeH3eDLy3q9F9ypo=
Subject key identifier:   A3:90:DE:90:5E:5E:8B:7C:9F:6A:51:A9:CE:E2:61:A8:0B:C0:73:C1
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       1E9D2A23F3AFBC1F4E4357FCE8080C47B119E52D
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36332e302f32342d3234203d3e20323633333437.roa
Signing time:             Fri 11 Sep 2026 21:31:05 +0000
ROA not before:           Fri 11 Sep 2026 21:26:05 +0000
ROA not after:            Fri 10 Sep 2027 21:31:05 +0000
asID:                     263347
IP address blocks:        191.37.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 07:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:2a:23:f3:af:bc:1f:4e:43:57:fc:e8:08:0c:47:b1:19:e5:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Sep 11 21:26:05 2026 GMT
            Not After : Sep 10 21:31:05 2027 GMT
        Subject: CN=A390DE905E5E8B7C9F6A51A9CEE261A80BC073C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:43:fe:ba:64:42:e6:97:50:86:1b:bc:96:
                    47:12:21:dd:f7:36:6c:20:c8:d3:52:13:1b:68:67:
                    4a:ad:3a:b5:97:1f:7b:c7:f0:66:43:ba:b1:2f:02:
                    11:39:fb:d1:ec:05:87:6a:ff:24:79:60:93:32:4e:
                    81:c9:20:c9:39:31:72:34:83:c8:45:ff:8b:97:f0:
                    7e:32:84:af:e8:64:c8:ca:66:03:42:38:b3:72:ea:
                    84:82:a3:12:eb:3c:c0:23:7a:45:eb:bd:a4:f3:f3:
                    0e:47:f8:f0:6f:07:e6:60:6c:45:0a:53:33:21:ff:
                    44:77:c6:e0:1c:e7:47:fc:f9:07:c2:02:aa:04:13:
                    0f:94:cd:ab:66:7c:ec:b3:dd:75:02:65:4b:32:5f:
                    56:13:84:dd:74:68:99:20:22:1f:0a:cc:41:5a:ce:
                    1a:64:02:a6:d3:de:0c:d1:1a:0e:47:3b:33:fa:d4:
                    f5:ab:d7:ce:2f:c6:93:9b:fb:bb:a9:f4:e7:ea:8d:
                    50:84:03:8a:e6:bd:9a:f8:97:1e:ab:f1:da:9e:62:
                    e8:a9:80:be:82:56:96:e1:a2:a2:26:b0:52:f6:68:
                    b9:30:fd:4d:c5:ca:4f:1e:23:8a:49:bc:3a:09:69:
                    82:21:ad:26:61:ad:6e:4e:08:8a:f5:8b:f7:d5:53:
                    bb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:DE:90:5E:5E:8B:7C:9F:6A:51:A9:CE:E2:61:A8:0B:C0:73:C1
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e36332e302f32342d3234203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:ef:2e:0a:ee:f2:96:10:65:21:12:fd:f0:40:a7:62:16:6f:
         0b:73:da:30:0d:00:33:28:0e:66:9d:92:f5:66:a0:5d:9a:f6:
         eb:44:d1:91:44:61:d6:22:a9:df:88:85:ff:03:b5:76:85:a5:
         99:d6:c8:1b:2a:22:8d:c9:be:ba:77:ff:8c:d4:22:3f:a1:8d:
         b9:cb:98:9b:43:4d:f2:42:b7:0a:5b:b6:2a:26:1f:1e:2e:d4:
         9e:56:84:c0:8b:c6:11:5d:9a:fe:d6:b7:99:31:bd:a4:1b:7e:
         54:b7:83:50:58:8a:14:7a:fa:c2:4f:e0:f6:1d:2d:f9:fb:f9:
         90:0a:f4:65:68:1e:7c:e7:96:e4:4f:8b:1c:ab:2c:75:be:33:
         66:72:57:d0:26:d2:f8:e1:aa:0b:1f:8d:97:b8:0d:78:a4:89:
         db:e1:3a:df:5d:20:05:5e:44:f0:6a:cb:f6:81:7a:ad:5c:7f:
         39:ac:51:11:c6:b4:69:ea:e7:2f:2c:01:8a:3e:de:8f:c8:8a:
         49:c7:5f:76:89:33:e5:ed:71:9d:39:e3:c3:2c:2e:9a:00:4e:
         09:89:4e:1a:c4:0d:f0:ef:97:1a:1b:6e:a4:aa:49:92:4d:08:
         a7:ee:33:5f:f3:2e:9b:69:a2:2a:f8:f8:4a:da:90:11:7c:80:
         1e:49:97:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----