Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
File:                     3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa (raw, json)
Hash identifier:          UvXuLFM11O33vEZ3xRPdJwP+TgaQfgDdfI4lNiHQkjY=
Subject key identifier:   EB:D2:A1:84:C9:91:0B:40:05:C4:56:F3:93:77:13:5B:3F:CC:F4:2A
Certificate issuer:       /CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2
Certificate serial:       63BCADD3FC2233412EAD2D3DD709A64CB17B0C6E
Authority key identifier: C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa
Signing time:             Wed 25 Feb 2026 18:42:24 +0000
ROA not before:           Wed 25 Feb 2026 18:37:24 +0000
ROA not after:            Wed 24 Feb 2027 18:42:24 +0000
asID:                     270430
IP address blocks:        190.111.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl
                          rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 05:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:bc:ad:d3:fc:22:33:41:2e:ad:2d:3d:d7:09:a6:4c:b1:7b:0c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2
        Validity
            Not Before: Feb 25 18:37:24 2026 GMT
            Not After : Feb 24 18:42:24 2027 GMT
        Subject: CN=EBD2A184C9910B4005C456F39377135B3FCCF42A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:83:c2:6f:e8:d9:59:fe:6d:9b:68:42:30:90:
                    57:3e:10:af:9f:d8:d4:26:d3:ff:da:9b:75:ec:cc:
                    ae:d6:24:96:66:a8:b8:5e:b8:9b:fc:5d:45:75:fe:
                    6a:d9:e9:04:dd:19:0b:23:f3:2b:bd:d0:6a:35:11:
                    4c:40:67:f7:26:02:b0:a5:c6:4c:7e:e7:47:4d:3a:
                    b3:42:77:7c:8e:e4:bd:fc:bb:75:b5:12:d6:bc:4e:
                    c8:32:b1:5d:4d:62:e0:37:84:51:23:ef:46:f9:a2:
                    32:1e:ce:4c:cd:eb:44:bc:85:84:24:ad:d6:47:d5:
                    e8:c4:f2:93:8e:6e:62:31:5d:a2:41:cf:7d:15:c1:
                    55:e9:24:5a:c0:07:98:90:89:c9:93:c0:2f:b1:20:
                    ee:59:ee:f9:9c:e9:4b:43:2e:ed:ea:b2:77:9e:a6:
                    31:d2:72:59:ea:b8:cb:ae:2e:51:1e:ac:7d:6c:3b:
                    cb:48:b1:30:96:b8:46:ac:52:1f:07:1e:b7:ab:42:
                    51:28:be:51:3d:fe:8f:3b:79:6a:60:27:67:08:8c:
                    a0:8f:f4:0f:96:49:52:6d:86:87:5f:f9:ed:7d:5b:
                    b5:48:c2:eb:6e:13:0f:a1:2f:7a:79:7b:c1:9a:ff:
                    b6:5f:9e:dd:a4:71:04:c3:c7:5a:af:92:bd:f3:8c:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D2:A1:84:C9:91:0B:40:05:C4:56:F3:93:77:13:5B:3F:CC:F4:2A
            X509v3 Authority Key Identifier:
                keyid:C3:FE:01:B0:95:DA:56:D7:BD:AC:28:CB:46:26:7C:61:CE:9A:39:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3FE01B095DA56D7BDAC28CB46267C61CE9A39C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dZzAtPPZBDwPqhUEhGbw2eeFBr5ZhinsyFw8JxxqkTL/0/3139302e3131312e3135392e302f32342d3234203d3e20323730343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1b:27:84:03:3f:71:f8:25:76:2f:80:d6:da:15:e9:9b:17:
         df:bd:dd:f0:2e:3d:74:32:cd:7b:08:c8:65:ff:40:22:e3:b1:
         c7:98:1b:1b:e4:fa:b2:0b:64:29:d6:ab:af:e9:ac:0c:24:d0:
         86:8d:b3:f2:7c:cc:8c:c4:a0:9d:5b:c8:bf:f0:4b:dc:5c:83:
         83:fb:fa:21:5e:53:a7:0c:6a:e0:a6:3e:b3:e2:cf:70:fd:af:
         59:2b:ef:1c:aa:fb:aa:d2:b0:7d:bd:ca:2e:9f:8a:10:a2:14:
         e6:ee:3d:75:cc:68:d9:20:df:e5:36:b2:91:e4:04:a6:61:94:
         84:1d:cc:77:d4:3d:40:b3:7a:86:6b:b8:a7:a0:19:12:6d:c5:
         ab:f6:08:98:22:a3:6c:03:e9:a3:15:ce:53:52:74:e4:53:5d:
         da:ce:1f:9d:62:a7:db:f4:0d:b3:d4:bf:c5:61:1b:19:5e:ad:
         53:12:74:86:bc:dd:bd:0f:a8:9b:79:5c:52:b8:ff:ff:ac:30:
         12:cf:bd:e3:34:05:ad:9e:d4:9a:54:24:c6:20:5f:f9:72:82:
         2f:ec:21:05:52:2f:3a:8e:91:ed:13:2c:30:d1:8e:54:10:6f:
         5d:b9:14:84:a2:bd:72:b0:7e:43:22:66:72:b2:85:8a:85:cf:
         bf:66:6a:00
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUY7yt0/wiM0EurS091wmmTLF7DG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGRTAxQjA5NURBNTZEN0JEQUMyOENCNDYyNjdDNjFD
RTlBMzlDMjAeFw0yNjAyMjUxODM3MjRaFw0yNzAyMjQxODQyMjRaMDMxMTAvBgNV
BAMTKEVCRDJBMTg0Qzk5MTBCNDAwNUM0NTZGMzkzNzcxMzVCM0ZDQ0Y0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5g8Jv6NlZ/m2baEIwkFc+EK+f
2NQm0//am3XszK7WJJZmqLheuJv8XUV1/mrZ6QTdGQsj8yu90Go1EUxAZ/cmArCl
xkx+50dNOrNCd3yO5L38u3W1Eta8TsgysV1NYuA3hFEj70b5ojIezkzN60S8hYQk
rdZH1ejE8pOObmIxXaJBz30VwVXpJFrAB5iQicmTwC+xIO5Z7vmc6UtDLu3qsnee
pjHSclnquMuuLlEerH1sO8tIsTCWuEasUh8HHrerQlEovlE9/o87eWpgJ2cIjKCP
9A+WSVJthodf+e19W7VIwutuEw+hL3p5e8Ga/7Zfnt2kcQTDx1qvkr3zjJZNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU69KhhMmRC0AFxFbzk3cTWz/M9CowHwYDVR0j
BBgwFoAUw/4BsJXaVte9rCjLRiZ8Yc6aOcIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWRaekF0UFBaQkR3UHFoVUVoR2J3MmVlRkJyNVpoaW5zeUZ3OEp4eHFr
VEwvMC9DM0ZFMDFCMDk1REE1NkQ3QkRBQzI4Q0I0NjI2N0M2MUNFOUEzOUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzRkUwMUIwOTVEQTU2RDdC
REFDMjhDQjQ2MjY3QzYxQ0U5QTM5QzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlkWnpBdFBQWkJEd1BxaFVFaEdidzJlZUZCcjVaaGluc3lGdzhKeHhxa1RMLzAv
MzEzOTMwMmUzMTMxMzEyZTMxMzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM0MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5vnzANBgkqhkiG9w0BAQsFAAOCAQEAfxsn
hAM/cfgldi+A1toV6ZsX373d8C49dDLNewjIZf9AIuOxx5gbG+T6sgtkKdarr+ms
DCTQho2z8nzMjMSgnVvIv/BL3FyDg/v6IV5Tpwxq4KY+s+LPcP2vWSvvHKr7qtKw
fb3KLp+KEKIU5u49dcxo2SDf5TaykeQEpmGUhB3Md9Q9QLN6hmu4p6AZEm3Fq/YI
mCKjbAPpoxXOU1J05FNd2s4fnWKn2/QNs9S/xWEbGV6tUxJ0hrzdvQ+om3lcUrj/
/6wwEs+94zQFrZ7UmlQkxiBf+XKCL+whBVIvOo6R7RMsMNGOVBBvXbkUhKK9crB+
QyJmcrKFioXPv2ZqAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:47:50 2026 by rpki-client