Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          QbR5bwi1+zG8V+kgptgi7FXvwsHqDvPOCIVj69b5zM4=
Subject key identifier:   0C:6B:60:EB:F7:19:80:BD:51:00:71:84:81:FF:E0:D0:BC:81:E2:D8
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       3B11131204CC0064F99993364855358001280B9D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:30 +0000
ROA not before:           Wed 01 Apr 2026 19:23:30 +0000
ROA not after:            Wed 31 Mar 2027 19:28:30 +0000
asID:                     52580
IP address blocks:        179.191.171.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:13:12:04:cc:00:64:f9:99:93:36:48:55:35:80:01:28:0b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:30 2026 GMT
            Not After : Mar 31 19:28:30 2027 GMT
        Subject: CN=0C6B60EBF71980BD5100718481FFE0D0BC81E2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:42:de:1d:95:a3:f7:ee:0a:e3:ed:aa:51:cd:
                    27:59:91:b7:8f:de:5a:a3:e3:f2:0d:45:03:cd:ae:
                    02:5e:29:4b:73:0d:67:a8:93:02:45:0f:62:e5:42:
                    de:cb:f3:30:8c:ef:2a:d1:fe:f0:b1:91:e0:dd:8d:
                    b4:7c:04:81:1c:39:0c:bf:fd:66:cf:f6:56:11:a3:
                    ec:e1:e7:50:90:7c:4d:60:c7:10:a0:78:46:41:c8:
                    79:82:1f:b5:ce:8b:8c:5e:b1:b7:0d:38:8e:a7:da:
                    eb:9f:af:11:4f:87:37:b7:28:3f:28:30:5f:6b:bd:
                    0a:7c:ce:2d:b9:7c:ea:ed:26:d3:36:54:12:6b:f2:
                    6e:bd:80:c3:78:95:59:b3:76:29:47:75:0d:7a:a2:
                    ac:e6:b7:0d:44:54:93:e6:95:47:20:39:10:61:ec:
                    07:5e:e1:58:0d:2c:bb:97:d9:67:c1:3b:2b:2a:88:
                    6a:42:d9:7b:c6:78:57:48:7f:fb:6d:19:99:1c:09:
                    e7:73:2d:19:f5:d1:5b:fd:c2:ae:3b:ae:e9:11:79:
                    18:61:ca:70:68:b6:5a:0c:67:66:d9:85:d7:d6:26:
                    54:c3:00:23:c4:7f:92:92:88:2c:9f:02:51:64:b0:
                    39:66:ef:3f:c3:d9:9c:18:cd:30:0a:d3:05:0c:a2:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6B:60:EB:F7:19:80:BD:51:00:71:84:81:FF:E0:D0:BC:81:E2:D8
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137312e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5e:e4:53:1f:ed:56:1e:4c:fd:2e:f2:9c:71:93:2e:39:68:
         bf:bf:20:c6:ee:a7:c2:d2:34:6b:8a:41:22:c9:26:26:78:75:
         b3:dc:8b:1f:7f:be:cf:67:ee:c9:ba:19:10:fb:e6:c1:8c:0d:
         74:81:42:eb:6c:d2:4e:f0:ed:10:07:0f:33:b4:f3:0b:a2:fe:
         5a:01:60:cf:9f:95:fa:b2:6b:1d:8f:cd:e9:7e:6f:f0:6c:73:
         a8:4f:a7:fe:73:b6:fd:3b:ab:b9:f0:6a:63:6e:cc:1a:75:bd:
         e6:1a:ec:e3:62:bd:2c:e1:d8:b1:c0:b5:17:92:13:50:b3:16:
         97:7a:f6:11:53:a0:75:61:a9:97:14:20:ba:3d:d0:3d:70:b3:
         05:f5:ce:04:7f:68:89:3a:d5:bc:e1:fc:70:e1:23:8e:2f:97:
         e2:70:7e:6a:ee:86:ae:15:f7:81:42:09:3c:88:b7:ca:df:e1:
         e9:ce:14:b5:88:8d:30:81:4d:0a:e6:c1:bc:3b:e8:7b:43:42:
         d5:eb:01:7b:6f:34:26:27:f9:a1:a7:f5:3e:20:24:6f:6f:4f:
         dd:35:fe:5c:87:b4:ea:57:b6:34:79:8d:94:a3:6f:14:21:31:
         34:17:f7:fc:a9:1d:1f:92:73:0a:e7:b4:48:bd:c1:27:83:6b:
         ea:7f:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:41 2026 by rpki-client