Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          fGo6qPNvdc3H8oVm4Q/vzj+0GN+hI0KLFeizyMnUOMM=
Subject key identifier:   C8:EF:2F:EE:80:97:E9:23:E7:A3:F5:EA:99:23:BA:67:7C:36:61:DF
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       53AF52EE921F430C67F8827333A661AAB58413FF
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:37 +0000
ROA not before:           Wed 01 Apr 2026 19:23:37 +0000
ROA not after:            Wed 31 Mar 2027 19:28:37 +0000
asID:                     52580
IP address blocks:        179.191.160.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:af:52:ee:92:1f:43:0c:67:f8:82:73:33:a6:61:aa:b5:84:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:37 2026 GMT
            Not After : Mar 31 19:28:37 2027 GMT
        Subject: CN=C8EF2FEE8097E923E7A3F5EA9923BA677C3661DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:1c:cb:d8:2c:15:a6:b0:23:55:ce:be:92:
                    40:06:52:84:14:3b:9b:a3:6c:d4:09:27:03:f2:0a:
                    e5:bc:21:75:7d:61:48:31:dc:7c:0d:63:0b:4a:d5:
                    55:f6:6c:1c:05:dd:e6:0e:a7:78:c0:09:f4:ad:5a:
                    40:c2:49:06:fb:8e:ad:c6:09:fe:8d:65:ac:0c:11:
                    42:7d:bf:7d:71:98:7e:28:aa:5f:53:08:fd:51:2b:
                    19:6c:8e:7d:da:9c:e7:e1:20:e9:00:c5:64:c5:6d:
                    9d:1b:ea:c3:c0:03:ff:a5:f5:62:db:2f:0d:28:00:
                    ca:89:0e:db:58:59:cc:f7:f5:24:50:71:63:4d:7a:
                    8f:fd:e1:00:8a:d3:9e:34:b9:3f:23:fa:19:f2:23:
                    99:4c:ed:ae:fd:ce:a5:fa:a1:28:b1:a9:17:a6:8a:
                    c2:29:f1:4b:22:e2:d2:f0:49:36:48:3e:25:3f:ba:
                    1b:c1:83:6d:22:a3:34:c9:9b:60:8a:22:c2:de:22:
                    c2:ca:2a:f5:06:8a:ef:9d:f8:7e:ea:02:d1:b3:28:
                    fd:45:44:56:28:f5:20:35:11:d3:d7:bb:b4:5e:82:
                    aa:dd:a8:03:47:ae:ae:d7:ba:73:53:e1:27:4d:85:
                    f9:e0:7e:f7:57:43:ff:98:9d:ad:b8:df:69:e6:5f:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EF:2F:EE:80:97:E9:23:E7:A3:F5:EA:99:23:BA:67:7C:36:61:DF
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136302e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:42:f5:8c:d0:53:c1:48:8b:a1:f7:8f:6d:ed:7d:36:8b:dc:
         d3:2c:c7:12:24:28:ea:90:ee:8f:da:f6:bd:85:86:f5:62:81:
         fb:29:c8:76:17:9b:9a:a8:c3:56:bc:5d:d0:44:4a:47:fa:56:
         e0:80:c5:7d:aa:b3:99:17:28:b3:bd:cf:e9:b9:e7:dc:9f:b8:
         de:ef:bf:ff:cd:6d:1c:2d:98:82:7d:90:b4:8a:17:ec:69:ce:
         1b:c4:ff:3a:86:af:74:62:b7:59:8f:76:e1:ed:26:d9:97:1e:
         5c:a3:3a:d8:90:dd:eb:39:c5:f1:eb:b0:e8:fc:0c:4b:39:50:
         96:d0:02:84:e9:c5:dd:cd:3c:e8:bb:bb:44:be:86:b1:84:b3:
         e2:6f:a1:b8:4a:9b:0d:dc:46:d0:63:11:66:31:23:29:5d:9d:
         3d:5f:8c:cd:92:50:3c:4c:f5:e9:09:3f:06:6b:23:9b:a9:78:
         18:f4:08:66:03:cc:c9:23:41:96:2f:f3:0a:13:5d:d7:04:f7:
         ee:ef:2d:d9:04:ef:72:09:5b:d7:73:c6:6d:f5:8c:f8:6a:2a:
         b0:d9:72:11:2f:e1:06:16:16:27:bf:38:6b:ec:34:d9:fc:ff:
         49:40:b3:e7:b7:83:70:19:f2:29:01:d5:86:d3:e0:d5:7b:27:
         17:02:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:06:21 2026 by rpki-client