Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa
File:                     3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa (raw, json)
Hash identifier:          Y409Z0m+5zwzcQlVYeHrDxmceDwTTDwV5+ZguZ/1Vk0=
Subject key identifier:   EA:80:23:43:96:AC:7C:7C:1B:C6:7C:E8:B5:25:D2:83:3F:53:99:1D
Certificate issuer:       /CN=C92B4719BF3008DE7ACE222648358F4A993884DD
Certificate serial:       24F91B02926BA1EFB0F0EA49A6C6DBA0F223DA94
Authority key identifier: C9:2B:47:19:BF:30:08:DE:7A:CE:22:26:48:35:8F:4A:99:38:84:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92B4719BF3008DE7ACE222648358F4A993884DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa
Signing time:             Wed 27 May 2026 13:51:05 +0000
ROA not before:           Wed 27 May 2026 13:46:05 +0000
ROA not after:            Wed 26 May 2027 13:51:05 +0000
asID:                     271691
IP address blocks:        190.185.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/C92B4719BF3008DE7ACE222648358F4A993884DD.crl
                          rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/C92B4719BF3008DE7ACE222648358F4A993884DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92B4719BF3008DE7ACE222648358F4A993884DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f9:1b:02:92:6b:a1:ef:b0:f0:ea:49:a6:c6:db:a0:f2:23:da:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92B4719BF3008DE7ACE222648358F4A993884DD
        Validity
            Not Before: May 27 13:46:05 2026 GMT
            Not After : May 26 13:51:05 2027 GMT
        Subject: CN=EA80234396AC7C7C1BC67CE8B525D2833F53991D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:66:a0:89:33:84:17:56:19:26:0b:82:4f:
                    b9:1f:47:d2:da:52:d8:d2:a1:5a:a5:6c:ee:ac:88:
                    1f:db:fb:f7:9b:4a:d1:b4:cd:35:cb:55:dc:e5:02:
                    cd:e4:21:53:03:6a:08:32:f1:bc:3b:66:27:43:03:
                    c9:4f:8b:82:80:e6:0d:38:63:b3:1c:e4:03:c1:5b:
                    6c:44:6d:9c:8b:ef:45:88:54:c2:9f:95:91:34:46:
                    32:b8:ec:dd:ad:e1:11:ce:62:58:e7:e3:7e:fd:e6:
                    ab:5f:9f:9f:ce:5a:c0:7f:47:4a:83:e9:d3:8a:58:
                    9e:7a:66:4a:cb:1d:ac:46:d4:29:ad:20:29:b6:33:
                    56:d8:71:0e:a2:ca:81:dd:29:92:77:0e:9d:e1:3a:
                    2f:5d:9a:17:f5:da:c9:f1:cf:6b:1b:97:9d:2d:b5:
                    0b:54:a0:c8:31:4e:47:9e:8b:37:2c:40:fe:a5:4d:
                    ea:3e:55:e5:dc:e2:42:17:b2:7e:0b:97:eb:86:62:
                    1d:75:cb:02:d4:15:a9:df:41:95:ae:df:45:4a:53:
                    37:bc:36:38:13:f8:16:8a:a4:10:41:e5:8d:ef:d9:
                    a0:8b:57:74:2f:92:ec:69:f4:e1:56:0e:89:59:96:
                    a2:5c:7c:a1:a4:e3:23:05:19:23:cb:ae:19:45:9a:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:23:43:96:AC:7C:7C:1B:C6:7C:E8:B5:25:D2:83:3F:53:99:1D
            X509v3 Authority Key Identifier:
                keyid:C9:2B:47:19:BF:30:08:DE:7A:CE:22:26:48:35:8F:4A:99:38:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/C92B4719BF3008DE7ACE222648358F4A993884DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C92B4719BF3008DE7ACE222648358F4A993884DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/3139302e3138352e39392e302f32342d3234203d3e20323731363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:a0:15:bc:cc:da:be:7e:67:48:2b:bd:99:bb:78:4b:9f:
         9f:1c:9f:0f:45:2b:ba:88:db:e6:b2:0e:d6:66:be:4a:a6:f3:
         47:3a:af:fb:45:a4:a5:dc:6b:87:ee:d4:59:9e:fd:11:fb:4b:
         bf:fd:b7:4a:b2:d1:32:42:13:03:59:dd:d9:1c:35:f9:39:03:
         70:69:cb:f6:02:32:6d:9a:28:05:e7:c7:a0:5a:9f:50:36:bc:
         11:aa:03:61:ea:7e:99:9e:c6:72:78:70:9b:0e:bd:91:1c:92:
         05:31:9c:4c:eb:48:9e:b5:87:6c:83:07:af:65:4b:04:29:ee:
         0a:9f:5d:01:9f:12:21:3c:ab:14:09:7b:c1:68:4e:c2:88:2c:
         47:06:0d:68:ad:5f:2d:5b:53:87:03:d0:cb:4a:0b:8d:aa:40:
         ea:d9:20:c3:ca:cb:9b:1f:7c:ab:a6:1b:79:81:c1:0f:29:6d:
         c1:51:dc:cc:6b:31:7b:96:83:91:ab:0f:51:65:f3:c4:3b:55:
         75:a3:f8:be:1e:28:0d:68:24:03:82:cc:29:9d:7d:64:a7:a7:
         18:d2:6e:53:95:ef:b6:5b:f5:8e:b5:21:e8:0a:5d:60:db:98:
         da:99:29:48:9e:bf:e1:e2:b4:11:fc:15:66:67:a2:a6:7e:c5:
         1f:e8:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:26:20 2026 by rpki-client