Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139362e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3139362e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          UqM+RFRfbmV86QgHaDHQjHtxplawGqIe2wfUW6OcYvE=
Subject key identifier:   AA:C5:C4:26:58:1E:DF:9A:4F:4F:14:8E:3F:42:FC:7C:D9:52:F0:DF
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       435701E7D14A9F74D2EA7EA7F36D70842F1A1CAD
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139362e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:54 +0000
ROA not before:           Mon 21 Sep 2026 12:25:54 +0000
ROA not after:            Mon 20 Sep 2027 12:30:54 +0000
asID:                     27715
IP address blocks:        191.6.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:57:01:e7:d1:4a:9f:74:d2:ea:7e:a7:f3:6d:70:84:2f:1a:1c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:54 2026 GMT
            Not After : Sep 20 12:30:54 2027 GMT
        Subject: CN=AAC5C426581EDF9A4F4F148E3F42FC7CD952F0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:8f:1a:36:a8:4e:91:6f:70:44:0c:bf:f7:
                    38:82:82:f5:89:97:05:fe:eb:f7:11:6a:0f:fd:ad:
                    7a:e9:99:5d:99:52:da:32:c4:54:68:2f:7c:20:6c:
                    7b:e4:2b:4d:b2:1f:37:58:cc:d3:01:de:51:e9:8f:
                    13:aa:70:12:f6:cb:07:88:5f:96:bb:66:d5:b1:91:
                    bf:f9:89:27:57:0a:e4:3d:ce:b8:50:7b:28:3c:b6:
                    bc:82:20:66:1d:46:68:db:79:e4:9c:83:e7:7d:c2:
                    fe:d9:1c:28:d9:04:70:56:ce:fc:fb:69:57:e1:b1:
                    1b:f8:c2:db:6f:42:01:b1:ca:24:98:cc:05:e2:f7:
                    8e:a6:60:f2:a0:0f:66:9c:d0:42:28:84:1b:4c:e5:
                    a0:db:31:01:cd:08:dc:55:66:cc:3b:22:6e:f5:17:
                    b9:60:ef:ea:01:66:94:2a:78:a7:74:19:7a:c4:b8:
                    65:e7:0f:09:3b:13:d9:7b:d2:67:bb:34:d9:19:9c:
                    ff:fe:c3:2e:17:22:28:27:88:05:a6:48:d9:f0:96:
                    84:61:75:40:ed:39:5d:f7:cc:f8:0f:5f:3b:2b:26:
                    da:b2:2b:08:3e:e4:47:45:1c:44:74:4f:d7:fa:99:
                    de:41:49:69:b0:e3:bf:73:1e:00:ea:15:c1:d2:9c:
                    4e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:C4:26:58:1E:DF:9A:4F:4F:14:8E:3F:42:FC:7C:D9:52:F0:DF
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139362e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:26:72:62:a5:7e:1a:94:25:b5:0b:9c:8b:d8:d4:58:82:52:
         87:75:d6:65:f5:4f:33:53:29:e0:2a:42:9c:97:04:74:1a:ce:
         e2:52:90:9e:1c:fa:a1:1e:c4:1c:a6:c5:82:78:83:c0:35:18:
         c4:41:ef:be:94:8b:33:07:68:a6:09:39:e7:ef:48:6c:09:73:
         1b:96:57:c4:ca:0a:e5:50:51:16:0b:ac:45:48:c7:1a:b3:ba:
         db:01:55:5e:5f:d2:b7:20:f0:a6:16:d1:b4:0d:4e:6b:cb:1f:
         f3:e9:46:0c:3a:6b:4f:48:d2:8a:10:74:f3:04:ac:67:4e:19:
         73:b1:b8:48:dd:b3:bc:c2:9f:ca:88:a6:b1:73:85:fa:4a:09:
         97:16:7f:11:f4:32:c8:f0:df:62:76:9d:0f:90:13:6a:90:ff:
         30:86:df:b3:c9:d3:6c:c3:5c:21:0f:0e:74:71:6d:d3:0a:f6:
         96:d1:44:42:21:c2:49:36:29:ea:32:5b:6c:6f:f3:70:dc:bb:
         dd:0c:e8:11:9c:a1:34:bd:5e:e1:04:8a:32:4c:58:e5:8d:3f:
         68:23:78:64:83:23:de:94:8f:4f:55:15:ef:50:e0:9e:ac:09:
         25:b7:7c:f7:89:fd:b2:50:9c:47:0e:75:d9:76:08:37:88:05:
         fd:aa:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:00 2026 by rpki-client