Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
File:                     3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa (raw, json)
Hash identifier:          jNV01UgStw/g6+a2SZZt+3mre1/8egI3eV6hSGlj7+8=
Subject key identifier:   AF:30:61:6D:CA:8D:EF:0B:E0:0D:22:EB:5D:E8:9E:3D:DE:55:7C:0F
Certificate issuer:       /CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2
Certificate serial:       01C561ECA6020A231BA5F0F2AD3C78B6B74AE2C0
Authority key identifier: C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa
Signing time:             Wed 25 Feb 2026 18:42:22 +0000
ROA not before:           Wed 25 Feb 2026 18:37:22 +0000
ROA not after:            Wed 24 Feb 2027 18:42:22 +0000
asID:                     270430
IP address blocks:        190.111.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:61:ec:a6:02:0a:23:1b:a5:f0:f2:ad:3c:78:b6:b7:4a:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2
        Validity
            Not Before: Feb 25 18:37:22 2026 GMT
            Not After : Feb 24 18:42:22 2027 GMT
        Subject: CN=AF30616DCA8DEF0BE00D22EB5DE89E3DDE557C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:4f:97:43:5d:69:e8:a3:23:59:6d:c2:aa:
                    a6:65:c1:95:b9:08:cb:31:d8:39:7f:8a:01:12:28:
                    b8:20:8d:52:f7:c9:fc:03:01:2e:23:34:05:32:31:
                    b4:bc:b2:9a:01:31:b3:2c:f1:d7:33:3f:53:de:0b:
                    df:c6:f7:86:f5:a4:7d:a3:95:72:14:bb:04:a7:fc:
                    9e:d5:b6:a8:e3:74:e0:c6:da:b9:73:d3:8a:5b:5a:
                    d2:27:ef:b8:47:fe:c4:d5:9f:6a:a5:2f:11:11:44:
                    10:f4:af:8f:1e:85:78:f4:bd:4f:92:a3:c9:9e:8d:
                    95:f7:a3:2b:34:10:b9:a6:af:d5:a2:d0:95:6b:bd:
                    ef:0a:2d:ce:a6:11:f2:83:08:cb:15:9a:22:23:04:
                    0e:07:db:70:ca:29:c4:f7:aa:5c:09:bc:a4:52:30:
                    01:69:36:73:ae:f0:40:29:2e:b3:eb:50:a2:49:33:
                    94:46:1a:6f:39:0c:fd:c5:a8:dd:68:8a:27:a1:a5:
                    86:8b:0d:a4:bf:9d:a1:a6:01:f7:2e:82:b5:57:75:
                    37:27:87:39:51:94:50:02:34:51:01:31:75:5e:3c:
                    7b:57:6b:60:9f:50:f3:81:19:df:80:b8:43:d5:ac:
                    fe:76:ef:8f:99:83:f7:79:62:3c:df:48:2c:46:a5:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:30:61:6D:CA:8D:EF:0B:E0:0D:22:EB:5D:E8:9E:3D:DE:55:7C:0F
            X509v3 Authority Key Identifier:
                keyid:C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135362e302f32332d3233203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:62:81:93:15:ee:fe:ff:c0:67:d9:d6:7d:b9:60:e3:6e:12:
         69:70:2e:c9:5a:5c:34:de:3f:b4:f8:78:ba:cc:70:5b:a6:ba:
         63:66:ea:3b:9c:7a:2b:b9:33:63:c8:d2:a0:b2:27:79:53:70:
         72:93:3e:bc:6e:43:57:83:fc:34:26:89:2a:25:1d:14:69:df:
         3e:e9:f4:4e:52:0e:ec:4b:96:66:93:fc:c7:37:5c:81:4c:5d:
         e0:5b:cf:73:03:39:af:ef:76:e6:6d:c5:fa:43:cf:00:12:3d:
         3f:9c:80:59:37:41:a9:2c:4a:60:39:2b:61:cf:e0:8a:50:fb:
         59:a6:02:2a:79:27:0e:6a:9c:ea:7f:b2:24:42:b0:1e:1f:e1:
         e2:63:9a:76:a1:2e:b2:66:7b:70:6c:cd:c7:c1:a6:e2:ac:37:
         d9:54:84:c5:39:22:d9:be:e0:07:7f:7e:88:51:de:f3:0b:bd:
         44:96:cb:ea:5f:96:1b:50:6e:4e:7c:70:e2:71:ec:61:d4:2b:
         28:2b:ec:87:93:08:dd:ef:2e:49:56:1c:bd:8e:ec:03:e1:78:
         be:1b:1f:bd:5e:28:12:c8:45:0d:19:96:ee:65:cc:1d:18:8a:
         98:82:5d:0e:a1:b3:5c:1e:09:a8:84:c4:46:c0:38:39:4a:9d:
         e8:ea:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:49:10 2026 by rpki-client