Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          y01FQcQFphtG907J3PqRyX3s9uaGSX6f3UFR8ruPncY=
Subject key identifier:   2F:1D:A5:D4:C3:20:0C:68:FF:D6:64:54:76:31:55:A2:76:97:BA:E1
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       18A48C1D9869191F5A0D4068B73DA6977F40AE67
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:27 +0000
ROA not before:           Wed 01 Apr 2026 19:23:27 +0000
ROA not after:            Wed 31 Mar 2027 19:28:27 +0000
asID:                     52580
IP address blocks:        179.191.161.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 17:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a4:8c:1d:98:69:19:1f:5a:0d:40:68:b7:3d:a6:97:7f:40:ae:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:27 2026 GMT
            Not After : Mar 31 19:28:27 2027 GMT
        Subject: CN=2F1DA5D4C3200C68FFD66454763155A27697BAE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:15:39:75:0a:b4:1d:6d:60:76:64:d4:ba:
                    9d:bb:2f:8f:6b:09:ac:1a:63:35:08:74:69:5c:c6:
                    74:33:22:5a:6a:d7:7f:d6:ef:e8:b1:7a:0d:7c:d6:
                    60:4c:2c:5f:37:99:bd:a8:1d:c8:71:e6:23:a5:4c:
                    be:16:4f:22:36:11:41:d0:e8:f2:a2:e1:09:48:a0:
                    48:b1:c7:26:25:35:de:7b:5d:c6:bb:ab:4f:c4:d8:
                    94:12:37:d9:03:df:e9:08:b3:25:ba:a0:fb:9a:28:
                    2e:4e:5e:d9:bd:3c:01:a9:60:0c:87:76:46:d7:65:
                    bc:ff:20:39:95:97:1f:8c:1c:c8:96:d7:b8:3d:a2:
                    06:1a:4f:37:ba:dd:89:6e:0e:c5:c7:b3:a7:6b:e7:
                    cc:10:ad:d5:4a:32:67:91:e0:62:1c:01:a6:27:fd:
                    29:dc:de:a1:e1:c3:17:dc:cb:6d:95:eb:8f:98:79:
                    62:2e:3d:a4:f9:46:54:41:3e:be:a2:c4:9c:9f:61:
                    11:07:c1:62:10:01:12:59:39:4d:69:2a:62:dd:8b:
                    22:3f:d1:66:88:59:93:06:14:a8:1a:d0:2f:89:74:
                    4c:2a:44:72:0d:5d:c7:c5:5f:cc:ab:cf:17:b0:68:
                    0c:98:86:09:82:64:9d:a3:a5:e2:b7:29:18:31:3e:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1D:A5:D4:C3:20:0C:68:FF:D6:64:54:76:31:55:A2:76:97:BA:E1
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3136312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:32:a1:18:ed:7d:47:9d:8a:fc:5c:67:e7:99:30:1e:6b:a2:
         f1:8f:ed:68:be:e7:95:76:de:bd:90:83:61:91:59:5b:99:70:
         9d:a2:d2:ee:22:bc:a1:f4:a2:67:65:63:0d:44:5e:24:b4:a0:
         12:19:5c:31:2b:4d:0e:71:ac:1a:4d:62:93:53:a5:34:78:c5:
         3d:0a:f1:b1:7a:6c:b0:a8:a3:be:7f:e6:b5:da:c7:2c:93:45:
         17:30:33:b8:41:aa:c7:fa:3a:6f:5e:89:df:49:17:33:3f:fc:
         37:97:66:98:8a:ed:49:a4:6c:2c:27:27:38:44:49:fe:fb:fa:
         b2:34:26:4f:55:3a:27:05:72:98:dc:5a:65:55:3c:81:2e:3a:
         97:db:65:d7:8c:0d:6e:86:85:04:da:95:d8:04:ef:85:39:da:
         7a:38:86:ff:45:cf:b0:95:ad:ea:00:91:75:f0:18:c7:c6:eb:
         c2:69:dd:94:a2:be:aa:e3:05:1a:21:b7:86:81:26:70:16:cb:
         0e:eb:30:4e:09:87:f4:19:df:74:8b:a4:75:c5:d5:aa:35:3b:
         59:f6:2d:08:09:2b:49:7f:d7:fb:11:ea:99:9e:a9:03:99:ff:
         3a:ed:a9:ec:33:90:61:4d:b6:8c:36:0e:84:20:c3:ed:16:65:
         67:a5:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:05:06 2026 by rpki-client