Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131312e302f32342d3234203d3e20323730333732.roa
File:                     3139302e38392e3131312e302f32342d3234203d3e20323730333732.roa (raw, json)
Hash identifier:          KeNv/WZxyksWkeRj9GK3VqpIzVBomGgwWY0kMQd5xL8=
Subject key identifier:   18:79:93:02:E5:09:F2:EA:3B:2A:20:AF:E4:EB:CC:03:89:3D:AF:58
Certificate issuer:       /CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
Certificate serial:       2203ED3B2E8EA80FB1FF552B968A9B3497E545CB
Authority key identifier: 2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131312e302f32342d3234203d3e20323730333732.roa
Signing time:             Thu 28 May 2026 12:23:47 +0000
ROA not before:           Thu 28 May 2026 12:18:47 +0000
ROA not after:            Thu 27 May 2027 12:23:47 +0000
asID:                     270372
IP address blocks:        190.89.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:03:ed:3b:2e:8e:a8:0f:b1:ff:55:2b:96:8a:9b:34:97:e5:45:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D695A483EAFCB1CC24C8720C0D3BBE303F42446
        Validity
            Not Before: May 28 12:18:47 2026 GMT
            Not After : May 27 12:23:47 2027 GMT
        Subject: CN=18799302E509F2EA3B2A20AFE4EBCC03893DAF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:ed:86:31:3c:4a:80:6e:f5:59:f3:ad:f0:
                    2e:c9:5e:8e:27:46:d1:37:d0:b4:bc:bf:5d:f6:e8:
                    9d:2c:25:cb:71:8d:2d:06:98:95:76:bb:c0:a2:56:
                    d2:ad:5e:a7:ca:56:a3:42:2c:71:5e:b2:8b:d8:e2:
                    81:9f:54:54:ea:a8:42:4c:3b:ad:c6:74:1c:78:e0:
                    fa:01:43:19:42:2d:dc:56:a2:5e:4c:d0:4d:15:5c:
                    08:13:16:c3:90:36:65:46:19:11:eb:0e:ec:fa:28:
                    75:d8:76:f0:fe:90:4b:e0:5f:9a:fe:7d:7f:bf:1a:
                    45:d1:ff:f4:4a:48:7e:b0:94:87:21:db:c0:51:ee:
                    1d:c2:ca:b0:0b:5e:29:cc:7c:7c:4a:15:60:de:9c:
                    5a:a9:b8:f7:65:7a:9b:95:f0:23:f2:fd:86:d8:32:
                    b7:09:60:9b:72:ee:00:ee:65:f8:8b:2f:10:d9:98:
                    a2:e8:0f:84:71:5d:0c:57:cf:dd:75:6e:fc:c9:29:
                    bd:ae:6b:86:dc:7d:04:b2:9f:5f:a3:c8:cc:1e:b1:
                    1d:59:9b:5c:72:3f:b8:05:2d:b2:3e:ab:e2:38:6a:
                    ea:02:4d:ce:f5:81:de:c9:1f:02:4e:24:1a:be:5a:
                    56:05:2b:e9:f1:fd:02:3f:99:fd:26:55:47:b2:4a:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:79:93:02:E5:09:F2:EA:3B:2A:20:AF:E4:EB:CC:03:89:3D:AF:58
            X509v3 Authority Key Identifier:
                keyid:2D:69:5A:48:3E:AF:CB:1C:C2:4C:87:20:C0:D3:BB:E3:03:F4:24:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D695A483EAFCB1CC24C8720C0D3BBE303F42446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/0/3139302e38392e3131312e302f32342d3234203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:32:be:52:44:9b:b6:be:4c:83:6a:14:cb:f8:c3:c6:6e:b9:
         47:1f:ff:69:5e:b1:bb:ba:f3:67:48:2d:cd:c4:59:9c:8b:cd:
         95:47:98:56:12:27:5f:8f:59:95:f6:b9:48:60:06:1c:74:79:
         35:9e:7b:c7:e8:21:c9:39:53:42:6e:ad:29:61:ec:5e:f1:20:
         8c:13:b9:0d:37:9e:76:da:7f:8c:e3:f2:61:c5:78:d3:99:70:
         94:82:56:4b:66:77:30:2c:e1:4d:eb:60:39:07:2d:3e:93:13:
         3d:4b:ed:4d:b6:f8:b0:f8:c4:ae:f7:ed:fc:90:59:31:7b:ff:
         1c:d2:23:98:04:e1:71:18:49:00:a0:1a:f2:14:25:60:46:ef:
         db:1c:be:f7:70:ae:15:d9:b4:7d:b4:57:25:b7:75:9c:33:d7:
         64:83:09:bd:52:e0:16:89:53:67:fd:af:3b:5c:2a:06:18:b3:
         e9:36:bb:36:df:f2:45:a2:14:d2:a1:47:56:ea:b9:c9:87:dd:
         29:dc:8a:5a:da:cd:72:a9:20:5e:c4:d3:0b:51:fe:39:b7:7c:
         2d:b9:13:89:d4:b8:e4:76:ad:be:96:ea:a4:38:28:9f:9f:00:
         ab:fe:5c:96:db:22:70:a6:a4:99:63:e9:bd:7f:87:08:4d:53:
         a5:71:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:47:28 2026 by rpki-client