Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139392e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3139392e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          1t2ZDPzjm2NDwtlt1jiuzd0YgmGACJfXzksHyWxHqmg=
Subject key identifier:   C1:95:C9:D6:7D:A0:79:0A:87:72:EC:7D:5C:7C:F5:24:EE:DE:F8:E9
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       067A24DE5D477A1BB3E8F3F5B27C7EF14A5C0B17
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139392e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:54 +0000
ROA not before:           Mon 21 Sep 2026 12:25:54 +0000
ROA not after:            Mon 20 Sep 2027 12:30:54 +0000
asID:                     27715
IP address blocks:        191.6.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7a:24:de:5d:47:7a:1b:b3:e8:f3:f5:b2:7c:7e:f1:4a:5c:0b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:54 2026 GMT
            Not After : Sep 20 12:30:54 2027 GMT
        Subject: CN=C195C9D67DA0790A8772EC7D5C7CF524EEDEF8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:af:19:9d:ed:ec:eb:b0:16:8b:cb:09:63:
                    77:b8:ce:98:4f:a8:b4:24:d2:4c:8d:f6:9a:81:87:
                    b6:f5:49:91:0c:16:9e:ce:b1:0c:52:c2:0c:5a:6e:
                    98:87:c7:4f:46:3a:fa:0a:4a:4c:e2:52:75:dd:83:
                    85:17:ec:36:48:12:62:c9:a0:ba:a5:34:1e:c0:a6:
                    2e:3d:31:e3:f7:80:fb:22:e3:e7:ef:29:59:8f:f5:
                    31:af:6b:b3:0d:2d:be:17:1f:07:c7:31:26:ff:84:
                    8a:27:94:a9:a4:8c:ff:37:58:e2:3d:69:7e:4c:1e:
                    f4:e5:b2:46:4c:ad:e0:ab:5b:d7:ed:7f:a3:98:70:
                    7f:ee:d6:40:cc:53:8f:a6:51:7f:e8:f0:68:54:0d:
                    73:bf:54:4e:d8:11:fe:a2:c2:ca:2d:b7:4e:2f:52:
                    48:59:24:d1:b1:68:a3:55:2d:c3:d3:55:49:cb:40:
                    1c:2f:6f:90:6b:82:72:13:9e:5f:10:a1:7d:3f:f8:
                    b0:1c:24:1c:2c:9d:3c:19:a4:8a:f6:a9:fc:29:4c:
                    bb:bd:11:ee:28:08:e1:51:36:41:83:f2:26:fb:41:
                    0c:8e:de:5f:25:c5:dd:47:25:2d:e0:5d:dd:f3:8b:
                    9a:bb:7c:b6:9b:7c:f5:d5:b2:40:d3:c7:0a:93:67:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:95:C9:D6:7D:A0:79:0A:87:72:EC:7D:5C:7C:F5:24:EE:DE:F8:E9
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3139392e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:02:87:9f:0b:3f:a9:98:2d:e4:bf:03:10:20:6e:4d:75:7b:
         1d:10:e5:a8:3a:8b:4e:b0:04:b4:c1:14:34:c0:4a:2b:f9:b7:
         f1:c3:48:d8:3b:f2:f6:e0:7c:ee:1f:55:79:c2:4d:d9:89:5c:
         ba:19:30:7d:34:74:e0:b7:39:0d:2f:86:41:8a:55:11:16:64:
         71:25:8b:1d:c5:ae:00:51:7f:8d:a5:27:70:f8:7b:39:a5:ee:
         47:7b:9c:8e:5b:b2:03:64:52:9f:d6:6c:cb:88:b8:ce:86:18:
         40:a0:f7:6d:e7:18:87:08:33:f6:78:e0:42:6f:58:ec:2c:fd:
         64:81:c9:3e:49:ab:4e:1a:c7:42:f7:fd:8a:aa:52:da:3a:cc:
         13:b9:20:2d:1f:ee:e2:58:42:2f:c5:4e:68:a4:2d:46:da:c1:
         cf:62:fd:f3:40:37:c5:ac:55:d3:62:cc:5c:91:1d:bc:fa:95:
         56:f6:4a:dd:45:d7:77:f5:5f:1f:ea:45:4b:73:39:b2:a4:d5:
         8d:27:9e:89:5a:21:c2:36:1e:08:17:a6:aa:a7:8c:0a:14:e8:
         40:26:37:e6:96:37:8a:68:86:d3:62:f9:fb:e2:e7:42:93:81:
         be:3d:fb:31:96:06:8a:cd:2f:8b:16:cc:b6:1d:a7:e0:e1:b0:
         90:c1:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:59:55 2026 by rpki-client