Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32332d3233203d3e20323730333732.roa
File:                     3139302e38392e3131302e302f32332d3233203d3e20323730333732.roa (raw, json)
Hash identifier:          zlUPYG9StGhOZpwgEbrq1DNzc+5XZDDM23TGij+uudY=
Subject key identifier:   7D:E5:84:B8:ED:89:21:EE:31:57:A3:84:18:0A:AA:69:63:67:C9:11
Certificate issuer:       /CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
Certificate serial:       5981DB456C35FB3FCF9CDADB47DC09FE9CC3834F
Authority key identifier: 2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32332d3233203d3e20323730333732.roa
Signing time:             Thu 28 May 2026 12:23:47 +0000
ROA not before:           Thu 28 May 2026 12:18:47 +0000
ROA not after:            Thu 27 May 2027 12:23:47 +0000
asID:                     270372
IP address blocks:        190.89.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:81:db:45:6c:35:fb:3f:cf:9c:da:db:47:dc:09:fe:9c:c3:83:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
        Validity
            Not Before: May 28 12:18:47 2026 GMT
            Not After : May 27 12:23:47 2027 GMT
        Subject: CN=7DE584B8ED8921EE3157A384180AAA696367C911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:fe:f8:48:0d:4a:a1:82:12:56:51:43:75:
                    c2:12:d6:f1:4a:4c:3f:34:3b:63:42:0e:d0:3f:6c:
                    bd:93:7f:1b:a7:5b:a7:a0:c9:a9:3b:f5:55:37:62:
                    8e:d0:98:6c:79:84:ca:09:23:d4:ef:47:f1:56:15:
                    ab:d0:1d:1d:a9:5b:62:c9:e8:62:53:96:35:85:29:
                    09:5e:27:dc:42:87:0b:a8:43:6b:3f:a2:1b:ee:61:
                    a9:13:fc:78:c7:26:3e:8d:3d:5f:5c:a4:36:1f:b5:
                    e3:3c:40:f8:96:74:d8:9b:34:52:29:63:a4:af:65:
                    8f:51:56:b2:c1:13:e3:8d:ca:c8:c2:b9:dd:3c:d8:
                    cd:9c:12:9d:fe:95:c0:6d:66:a2:b5:5f:67:4b:c0:
                    40:04:28:c9:d4:ec:1a:10:f4:4b:66:ef:d1:eb:dc:
                    1f:3b:d9:ef:6c:ac:3d:b3:9e:2b:bc:a0:1d:cf:d8:
                    8e:97:a1:4f:0f:de:e2:55:b0:38:c4:9e:a1:cf:f3:
                    39:7a:40:b5:9b:49:ca:29:c3:39:78:96:0e:ba:ed:
                    ab:f6:f1:46:23:11:38:04:e2:d6:3f:2b:d2:ab:f6:
                    98:29:91:30:63:4c:9a:94:6a:3d:37:fc:03:f6:8c:
                    60:3c:ce:8a:f2:86:43:0d:7f:0a:36:9a:ed:dd:39:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:84:B8:ED:89:21:EE:31:57:A3:84:18:0A:AA:69:63:67:C9:11
            X509v3 Authority Key Identifier:
                keyid:2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131302e302f32332d3233203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:60:f5:84:55:4c:5c:ea:87:dd:4d:a3:7f:11:78:a9:8e:
         40:47:2e:b9:11:96:bc:67:cf:05:b5:23:8b:3b:06:f3:5d:a1:
         f3:3f:23:b5:f8:b8:87:94:78:24:ff:25:11:34:ae:f9:ca:0f:
         cc:22:76:a1:32:96:1f:a1:7f:d8:d7:de:ee:bf:9a:9e:ba:ba:
         f6:a8:b3:87:01:47:14:33:9f:2a:a0:2e:17:8f:f5:12:98:6a:
         7b:f6:8a:af:83:dc:41:3b:e2:3b:da:04:28:8d:92:91:ea:7d:
         42:07:31:29:54:a2:2e:44:c8:56:cc:6a:a3:48:3a:e7:7a:cf:
         59:e1:4d:b5:fc:17:d5:a6:f4:2a:1e:14:eb:ee:77:54:cc:2e:
         3d:10:db:1b:e4:da:8b:0b:1b:b2:9c:b0:7c:ec:be:a4:c5:5d:
         3e:0f:dc:c4:24:6b:6f:52:77:92:02:41:c7:df:e1:da:81:ec:
         54:d8:fb:ef:4c:2a:f1:f6:ab:e0:d7:22:eb:c6:f0:2e:19:6d:
         75:39:af:33:24:6a:20:bd:2a:35:0f:e8:e1:cd:2e:dd:60:cc:
         90:e2:a3:24:13:24:e5:9a:4c:d2:04:56:df:9d:c8:71:dd:0c:
         96:0a:6e:fb:f7:f1:e3:28:f2:75:e4:5f:dc:62:13:97:69:2e:
         85:20:95:ce
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWYHbRWw1+z/PnNrbR9wJ/pzDg08wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ2OTVBNDgzRUFGQ0IxQ0MyNEM4NzIwQzBEM0JCRTMw
M0Y0MjQ0NjAeFw0yNjA1MjgxMjE4NDdaFw0yNzA1MjcxMjIzNDdaMDMxMTAvBgNV
BAMTKDdERTU4NEI4RUQ4OTIxRUUzMTU3QTM4NDE4MEFBQTY5NjM2N0M5MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuBv74SA1KoYISVlFDdcIS1vFK
TD80O2NCDtA/bL2TfxunW6egyak79VU3Yo7QmGx5hMoJI9TvR/FWFavQHR2pW2LJ
6GJTljWFKQleJ9xChwuoQ2s/ohvuYakT/HjHJj6NPV9cpDYfteM8QPiWdNibNFIp
Y6SvZY9RVrLBE+ONysjCud082M2cEp3+lcBtZqK1X2dLwEAEKMnU7BoQ9Etm79Hr
3B872e9srD2zniu8oB3P2I6XoU8P3uJVsDjEnqHP8zl6QLWbScopwzl4lg667av2
8UYjETgE4tY/K9Kr9pgpkTBjTJqUaj03/AP2jGA8zoryhkMNfwo2mu3dOcI1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfeWEuO2JIe4xV6OEGAqqaWNnyREwHwYDVR0j
BBgwFoAULWlaSD6vyxzCTIcgwNO74wP0JEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFlVSEVSSnNVQUdOTlp6YTRZdVlaMWVDcWl6R2E4ZGN3dEZ4UHBuekU1
c1YvMC8yRDY5NUE0ODNFQUZDQjFDQzI0Qzg3MjBDMEQzQkJFMzAzRjQyNDQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENjk1QTQ4M0VBRkNCMUND
MjRDODcyMEMwRDNCQkUzMDNGNDI0NDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hZVUhFUkpzVUFHTk5aemE0WXVZWjFlQ3FpekdhOGRjd3RGeFBwbnpFNXNWLzAv
MzEzOTMwMmUzODM5MmUzMTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzAzMzM3MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG+WW4wDQYJKoZIhvcNAQELBQADggEBADszYPWE
VUxc6ofdTaN/EXipjkBHLrkRlrxnzwW1I4s7BvNdofM/I7X4uIeUeCT/JRE0rvnK
D8widqEylh+hf9jX3u6/mp66uvaos4cBRxQznyqgLheP9RKYanv2iq+D3EE74jva
BCiNkpHqfUIHMSlUoi5EyFbMaqNIOud6z1nhTbX8F9Wm9CoeFOvud1TMLj0Q2xvk
2osLG7KcsHzsvqTFXT4P3MQka29Sd5ICQcff4dqB7FTY++9MKvH2q+DXIuvG8C4Z
bXU5rzMkaiC9KjUP6OHNLt1gzJDioyQTJOWaTNIEVt+dyHHdDJYKbvv38eMo8nXk
X9xiE5dpLoUglc4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:11:18 2026 by rpki-client