Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa (raw, json)
Hash identifier:          GTEG1pDzpFaFyyvFUmQqcUJ/b8YUt3OfA7HcSu8ioEg=
Subject key identifier:   1E:8A:DB:2F:8F:BF:5B:93:D7:24:4A:25:7A:3F:B1:6A:B8:D0:93:D0
Certificate issuer:       /CN=8898FAD12A8B1262F88BD3FB68A9FA67D7016F71
Certificate serial:       4924B46AAB7DA4D9FC954860FD544026ED18F5AC
Authority key identifier: 88:98:FA:D1:2A:8B:12:62:F8:8B:D3:FB:68:A9:FA:67:D7:01:6F:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa
Signing time:             Tue 26 May 2026 14:29:41 +0000
ROA not before:           Tue 26 May 2026 14:24:41 +0000
ROA not after:            Tue 25 May 2027 14:29:41 +0000
asID:                     270430
IP address blocks:        190.111.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:24:b4:6a:ab:7d:a4:d9:fc:95:48:60:fd:54:40:26:ed:18:f5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8898FAD12A8B1262F88BD3FB68A9FA67D7016F71
        Validity
            Not Before: May 26 14:24:41 2026 GMT
            Not After : May 25 14:29:41 2027 GMT
        Subject: CN=1E8ADB2F8FBF5B93D7244A257A3FB16AB8D093D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:03:0d:35:2c:30:b4:15:2a:8c:0a:8d:ee:
                    d2:3f:4b:06:28:5f:db:c6:99:87:bb:39:8f:73:a0:
                    26:00:21:d1:0a:f0:f6:e7:2f:22:3e:8a:ed:de:2a:
                    8e:82:44:00:6b:da:42:a6:c5:bf:9d:b2:ed:84:7a:
                    fc:ee:cc:0a:e9:ba:49:4e:e2:96:0e:a6:bc:29:d5:
                    d4:10:25:78:5f:98:a2:74:7b:33:d9:45:ab:d8:bd:
                    9e:24:d0:ec:f2:5e:53:14:94:ca:71:b0:4f:c1:26:
                    11:10:e7:06:8c:57:77:5d:a8:dc:98:81:a0:46:c6:
                    54:5e:5c:b8:26:20:94:80:01:8a:86:49:c4:a9:8b:
                    fc:1f:d3:99:de:9b:2b:9c:32:b3:3c:3c:5a:0c:c1:
                    f1:0f:81:75:3a:9d:e2:8f:9b:43:0e:6b:6e:8e:93:
                    8e:d9:ee:41:aa:97:6f:93:98:46:5c:d4:45:d9:ab:
                    85:68:30:7a:1f:7b:53:21:5e:a5:e6:b0:35:a3:f1:
                    da:b6:93:e6:94:f7:d2:33:28:14:17:61:0b:85:87:
                    1d:31:8d:d2:8a:48:85:27:34:ff:b4:8b:fe:ea:6e:
                    34:3a:67:47:18:af:75:dc:0a:31:2b:ff:ff:97:f2:
                    e5:f0:46:0d:f1:92:c4:55:6a:94:ee:dc:45:9a:6b:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:DB:2F:8F:BF:5B:93:D7:24:4A:25:7A:3F:B1:6A:B8:D0:93:D0
            X509v3 Authority Key Identifier:
                keyid:88:98:FA:D1:2A:8B:12:62:F8:8B:D3:FB:68:A9:FA:67:D7:01:6F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8898FAD12A8B1262F88BD3FB68A9FA67D7016F71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32322d3332203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:3c:ea:40:df:ad:3d:b9:9f:5c:d8:34:9a:64:2f:e3:83:68:
         93:f1:89:2e:b8:51:96:07:8e:88:e5:43:5d:ee:24:09:ac:89:
         3b:9f:6f:65:58:62:c3:ee:10:8d:d2:f7:18:ac:68:fb:9d:36:
         37:31:67:78:8e:7f:ec:78:07:46:c2:3c:50:b6:5d:a7:e0:e0:
         a6:13:a7:05:b2:0a:95:8f:e6:75:3b:53:d0:1a:6c:b7:15:79:
         09:74:b7:38:24:34:c5:f7:19:b6:bc:5c:a9:ce:de:1c:09:37:
         ea:a1:7a:cc:16:6e:30:20:fc:fb:86:4c:b4:a4:9b:dc:5e:14:
         27:eb:53:c3:9a:fd:46:7b:00:d4:56:97:ad:1f:b2:6d:6e:34:
         6f:7c:19:e6:49:87:63:d9:5f:62:ca:ba:62:5b:f3:ac:9a:a7:
         70:69:6c:25:72:c4:39:40:bb:6f:7b:b5:d5:1a:68:e8:de:61:
         94:d1:d2:4b:d0:75:f0:ca:1b:7a:d7:2f:c5:a6:bf:9f:86:f6:
         0a:8d:02:2e:83:72:b5:51:c9:7d:a2:a5:c6:c0:6a:31:2a:95:
         80:d9:be:3d:7f:2f:d4:cc:f5:bc:cf:f1:24:a7:a7:ec:56:c5:
         e1:d5:d1:6e:1c:d5:18:20:7c:b7:f5:20:b2:7b:93:ab:4c:12:
         d8:39:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:28:53 2026 by rpki-client