Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232322e302f32342d3234203d3e20323633313434.roa
File:                     3139312e3234322e3232322e302f32342d3234203d3e20323633313434.roa (raw, json)
Hash identifier:          4jqdnJ2wyqL+jHtz3+RK0EE4o+XOopPPJh46Ml7QOj8=
Subject key identifier:   95:3D:41:D9:AA:13:F1:9D:34:F2:F0:D2:A8:E5:21:AB:B6:69:18:A5
Certificate issuer:       /CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
Certificate serial:       7F3C6C8EAE0C15702CD4A45D53D898ECB260B0DC
Authority key identifier: FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232322e302f32342d3234203d3e20323633313434.roa
Signing time:             Thu 17 Sep 2026 09:43:09 +0000
ROA not before:           Thu 17 Sep 2026 09:38:09 +0000
ROA not after:            Thu 16 Sep 2027 09:43:09 +0000
asID:                     263144
IP address blocks:        191.242.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.crl
                          rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3c:6c:8e:ae:0c:15:70:2c:d4:a4:5d:53:d8:98:ec:b2:60:b0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8
        Validity
            Not Before: Sep 17 09:38:09 2026 GMT
            Not After : Sep 16 09:43:09 2027 GMT
        Subject: CN=953D41D9AA13F19D34F2F0D2A8E521ABB66918A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1a:dd:fe:10:96:d9:21:62:c0:60:97:5a:f2:
                    2e:99:c6:f8:8c:14:fa:9b:10:84:ba:97:4e:7a:fe:
                    37:aa:80:68:65:8c:ff:16:8c:20:61:ff:b2:b5:df:
                    52:d3:4e:9c:61:85:73:47:68:7b:f0:49:2d:e1:17:
                    6b:02:dd:95:70:00:c1:ee:d6:68:e9:83:46:d5:73:
                    74:9a:65:58:58:81:ca:35:bf:51:8c:6f:4d:e0:5c:
                    32:f8:cb:6a:77:15:09:c9:b4:67:14:60:5f:fd:52:
                    16:4a:02:da:a6:e1:a2:ae:c2:ca:10:62:04:26:d1:
                    2f:d2:c4:38:43:1a:11:c8:72:5f:f9:ce:55:66:1a:
                    7f:d8:67:46:75:a9:39:06:2b:22:e5:28:c7:a0:5c:
                    b6:a5:1c:de:d0:1c:8a:06:0e:78:56:48:38:ad:ea:
                    5a:6f:2f:95:38:f9:53:5d:42:10:0b:92:cf:90:d9:
                    45:d5:78:88:03:ea:33:42:0a:77:54:9e:4a:41:d2:
                    29:ce:8f:a1:70:2f:ff:cc:1e:2e:0e:b2:d5:1b:4b:
                    d0:fe:86:b3:9e:73:ab:fd:b9:86:73:a5:a0:de:30:
                    57:c7:17:8f:fb:01:10:46:ca:7d:89:49:2a:3a:63:
                    5f:40:d8:cb:4f:cc:a0:7b:7e:59:e7:68:01:f1:94:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3D:41:D9:AA:13:F1:9D:34:F2:F0:D2:A8:E5:21:AB:B6:69:18:A5
            X509v3 Authority Key Identifier:
                keyid:FA:6A:FB:F4:4F:D0:C9:DE:0F:A4:AF:96:ED:F6:52:C6:AD:A9:F0:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA6AFBF44FD0C9DE0FA4AF96EDF652C6ADA9F0B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/0/3139312e3234322e3232322e302f32342d3234203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:a7:7c:fe:08:5b:ff:92:b5:45:c3:1a:c6:f8:17:3f:ec:
         3d:b1:cf:25:0f:f4:2e:33:26:67:18:94:b3:55:26:5c:c6:f7:
         e9:91:ee:fb:45:27:e8:b8:c3:c0:8b:5b:f4:38:a6:66:d1:01:
         b8:af:9f:76:f7:6f:b9:40:d1:ba:4a:ce:40:82:58:4b:38:b5:
         84:43:8b:6d:ab:3c:47:37:30:5d:de:3f:fe:f8:2e:ec:8e:aa:
         e1:20:d7:e3:79:f1:de:97:33:bf:d4:c5:cb:96:32:84:88:6d:
         68:01:95:5d:b9:7b:de:7d:34:ee:1f:8b:8a:f3:00:fa:f8:13:
         4a:6d:b5:e9:76:b1:e2:a8:44:49:ce:b4:09:8d:42:ff:f7:ef:
         fb:0c:18:dc:6c:66:59:10:09:6e:74:ae:ad:00:4f:39:5c:cf:
         27:f3:de:9d:a2:b1:28:20:2c:01:d0:25:38:89:93:94:16:53:
         2c:7f:c8:fc:64:1f:8c:0b:75:dd:3f:a5:bd:1b:85:c0:53:6f:
         71:23:49:f2:64:89:dc:54:e7:03:6e:ab:b1:e7:fb:e5:09:ed:
         2d:b3:4b:6d:8d:28:12:6e:33:82:4b:09:2a:1d:22:34:14:f1:
         e4:9b:c1:3b:31:2b:4e:80:52:5a:cb:f7:f6:32:30:c2:3f:13:
         fa:fd:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 09:23:12 2026 by rpki-client