Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230382e302f32342d3234203d3e203237373135.roa
File:                     3139312e362e3230382e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          3lUlFhX+UzOZZt1SDL+l6IXwLceWLLUUj0SzJ7q2mfY=
Subject key identifier:   00:32:DE:AF:1B:5C:B9:BF:54:D1:C8:DA:CC:71:7E:71:A4:BF:23:D9
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       5FA67B5526BD75E71DEAB79C8C7793F6D8E62809
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230382e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 21 Sep 2026 12:30:57 +0000
ROA not before:           Mon 21 Sep 2026 12:25:57 +0000
ROA not after:            Mon 20 Sep 2027 12:30:57 +0000
asID:                     27715
IP address blocks:        191.6.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 19:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a6:7b:55:26:bd:75:e7:1d:ea:b7:9c:8c:77:93:f6:d8:e6:28:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Sep 21 12:25:57 2026 GMT
            Not After : Sep 20 12:30:57 2027 GMT
        Subject: CN=0032DEAF1B5CB9BF54D1C8DACC717E71A4BF23D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:ee:b9:fb:d8:c8:69:5b:2c:e6:ba:a6:fb:
                    a5:2d:6f:2e:ea:65:e5:f7:ad:aa:b0:99:52:d8:16:
                    db:20:39:1c:cc:d3:dc:b5:23:72:2b:a6:22:0b:8a:
                    50:38:ee:52:1a:ca:35:a8:0a:ed:0f:10:86:80:9d:
                    c8:be:54:fc:7e:55:9d:b3:d3:6f:ce:9d:3f:d1:5b:
                    8f:18:54:e7:2d:ff:95:42:95:ca:9c:c6:2b:4a:ce:
                    61:0d:85:14:a4:96:1b:4d:c6:32:35:81:06:3d:5e:
                    b4:e8:cd:a4:0b:68:9a:27:b8:d4:18:6a:5b:89:1a:
                    8b:9c:02:d5:99:6c:e3:5f:1e:ed:7d:3f:55:13:1f:
                    46:35:42:43:cc:ab:e4:65:d4:db:7b:dc:e1:7e:f3:
                    5a:28:9d:c9:65:91:e2:3b:ca:1f:f9:3a:fa:46:87:
                    b2:bd:09:83:4f:5d:fc:71:79:2f:65:7b:62:84:03:
                    3e:19:62:27:c9:5e:25:0c:a5:9f:b3:15:b8:ea:28:
                    b5:9a:08:30:7e:33:4f:47:85:34:55:91:d5:16:35:
                    bf:e1:45:28:fe:b2:c5:36:1a:1e:7d:e5:be:81:d7:
                    11:4b:51:d0:d4:ea:cf:cb:b3:ac:1b:8c:fe:27:7b:
                    37:a2:02:3d:44:c0:fb:53:b5:af:3f:50:3c:37:db:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:DE:AF:1B:5C:B9:BF:54:D1:C8:DA:CC:71:7E:71:A4:BF:23:D9
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3139312e362e3230382e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:50:5e:cb:af:d4:e1:3d:9e:66:2e:f2:84:47:a7:6b:73:34:
         8d:7f:ec:7c:5e:bd:e5:ce:98:b4:73:5e:17:d2:3c:e8:df:9d:
         1d:51:61:4a:be:e8:c0:11:00:14:c1:c6:5c:c0:27:49:9a:14:
         eb:b9:d7:ed:d7:dd:c2:35:f3:0b:63:95:cd:4f:a9:40:68:5c:
         af:32:00:05:8a:25:6f:e3:50:87:ae:28:7e:a3:cd:ec:a9:3f:
         cf:48:48:b5:e6:a0:a9:46:30:5b:01:97:38:27:5a:fb:9f:f7:
         1c:ec:18:71:bd:37:f0:09:cf:ff:36:61:45:d1:ad:7e:be:d8:
         a4:68:25:b4:00:f1:7d:e2:c7:77:47:e0:52:b9:18:ea:b8:f9:
         c2:4f:6d:0f:20:89:3f:88:76:46:7f:03:da:53:78:c8:bb:90:
         ee:dd:3d:f9:58:bd:69:c4:d0:07:61:41:f7:4f:50:36:c9:42:
         3e:61:3a:9d:10:0f:c9:de:82:0f:03:b5:50:40:28:a4:8a:76:
         f2:50:06:40:d8:9c:65:de:fd:77:85:ad:7e:c1:aa:ce:4e:ad:
         f1:2a:4b:9b:f3:0d:90:9b:d7:54:ba:b7:63:ee:2f:62:8a:2a:
         a1:77:64:d9:6f:c2:59:7e:36:ad:27:5c:ff:b5:21:f9:bf:9a:
         3c:04:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:23:33 2026 by rpki-client