Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32322d3332203d3e20323730393539.roa
File:                     3139302e3138342e3231362e302f32322d3332203d3e20323730393539.roa (raw, json)
Hash identifier:          8VRC5QfH0SY4TtgnKLdGr7xfr95U+bO/ndYaQYlkNkw=
Subject key identifier:   00:38:C6:8A:B1:DD:BA:E9:0E:9C:37:99:F0:52:B4:EB:84:97:4E:77
Certificate issuer:       /CN=19765B7E797B246EDB361ED3AEECE7B636538C60
Certificate serial:       485CE4E27805B8BCBCE139BDC1E0D0F56358F7F8
Authority key identifier: 19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32322d3332203d3e20323730393539.roa
Signing time:             Wed 27 May 2026 22:04:21 +0000
ROA not before:           Wed 27 May 2026 21:59:21 +0000
ROA not after:            Wed 26 May 2027 22:04:21 +0000
asID:                     270959
IP address blocks:        190.184.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl
                          rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:e4:e2:78:05:b8:bc:bc:e1:39:bd:c1:e0:d0:f5:63:58:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19765B7E797B246EDB361ED3AEECE7B636538C60
        Validity
            Not Before: May 27 21:59:21 2026 GMT
            Not After : May 26 22:04:21 2027 GMT
        Subject: CN=0038C68AB1DDBAE90E9C3799F052B4EB84974E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:79:fc:ef:f9:d8:d0:10:43:22:e1:79:00:
                    b2:f2:2c:e8:91:87:2c:47:29:fa:ef:25:fa:0a:e6:
                    c8:aa:83:82:bf:6d:57:dd:22:33:11:ea:15:13:c3:
                    36:8b:ae:32:a0:ed:ac:c9:07:89:78:33:3e:c4:bf:
                    33:ea:dc:02:ba:57:0e:e3:e3:1d:f9:ae:4c:db:e0:
                    cc:ce:62:0d:fa:7c:ec:e5:1d:50:d6:4c:6f:b0:ed:
                    03:a7:cd:04:8b:00:6d:66:7f:d8:ab:81:48:8d:aa:
                    86:3b:80:f5:3d:e3:97:d0:ba:d4:27:4b:44:53:1d:
                    4f:4d:d5:ac:35:2b:02:50:04:15:c4:8b:7d:c5:5a:
                    59:51:f4:5c:e4:37:f7:48:a0:da:13:21:b9:f1:00:
                    15:89:d5:07:04:8b:a0:67:89:cf:dc:58:6b:d6:0f:
                    64:3a:63:bf:d5:f7:5a:c5:6c:0c:f8:c5:2a:af:e6:
                    a1:89:50:80:cc:b6:f2:72:ba:fe:2b:1e:17:57:a2:
                    8f:5c:f4:2a:54:8f:7a:38:aa:1e:4d:be:df:da:82:
                    20:28:d6:c8:1b:08:c9:b9:50:4c:24:66:de:eb:54:
                    c9:db:e4:94:fc:f0:2f:a1:69:8f:ba:48:97:55:a6:
                    5e:8c:75:94:8a:39:f9:c0:03:5e:c8:92:91:03:97:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:C6:8A:B1:DD:BA:E9:0E:9C:37:99:F0:52:B4:EB:84:97:4E:77
            X509v3 Authority Key Identifier:
                keyid:19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/3139302e3138342e3231362e302f32322d3332203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:c5:e1:c0:a8:b4:f5:fc:20:34:8a:0c:01:92:4f:0c:1c:9f:
         97:79:f6:08:79:58:c6:e8:16:ea:f1:9c:40:b0:2c:4f:14:4f:
         b0:ce:95:1c:43:65:7b:60:d2:7b:5f:0b:87:86:d6:a7:4e:10:
         de:d6:8d:70:17:ef:5b:53:97:f8:f9:e5:48:33:66:1b:5d:b8:
         80:ea:5d:c4:01:9f:97:75:05:03:b7:e1:5f:b7:2c:4b:bc:18:
         fb:52:a4:4b:ad:3b:45:27:ba:c7:7b:64:e5:7d:2b:e0:f6:1e:
         2a:71:44:91:a1:a2:c7:af:65:7d:3e:68:97:d1:6a:84:95:27:
         2a:9e:ea:e9:64:c6:7f:bf:d4:af:0d:48:0c:52:df:fa:9e:fd:
         01:c5:1e:f7:f7:7a:71:45:ec:da:07:55:fa:29:6b:e5:ca:4d:
         dc:e3:9d:57:0f:c7:cd:3c:1f:9a:4a:c8:32:a9:6d:3d:36:37:
         16:7d:09:00:e0:a0:f7:b6:0b:dc:1a:11:93:d1:a5:59:ae:a0:
         58:de:b3:7a:d0:71:84:dd:aa:3d:bf:6e:3b:fe:ed:f2:0e:81:
         8e:81:57:16:f8:25:43:16:96:30:0a:44:7f:55:0e:4c:56:cf:
         b6:77:53:a2:bc:48:1a:0e:32:ab:3f:35:8f:9d:30:d3:6c:49:
         50:1b:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:42:06 2026 by rpki-client