Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          FqgDZ2FnMrEkOfGB1bCsPELx/ToIHpd7nYYwR5sq1I8=
Subject key identifier:   1A:B7:03:86:B4:5D:B4:EA:70:C9:9B:7F:88:F9:0A:DA:BD:94:5B:66
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       79221D813225BC79A6939E73FBBAF06B69317E07
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:28 +0000
ROA not before:           Wed 01 Apr 2026 19:23:28 +0000
ROA not after:            Wed 31 Mar 2027 19:28:28 +0000
asID:                     52580
IP address blocks:        179.191.175.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:22:1d:81:32:25:bc:79:a6:93:9e:73:fb:ba:f0:6b:69:31:7e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:28 2026 GMT
            Not After : Mar 31 19:28:28 2027 GMT
        Subject: CN=1AB70386B45DB4EA70C99B7F88F90ADABD945B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8e:07:68:a1:3a:43:26:4c:04:6a:c8:2f:c3:
                    0d:60:95:8e:2f:2f:db:73:f0:94:75:6a:a7:c6:01:
                    83:6a:87:c5:c2:82:65:72:a8:13:7a:cd:81:ce:da:
                    14:1d:56:94:ad:53:6c:1e:46:c6:72:d7:1a:25:6c:
                    fc:4c:db:fd:13:db:d8:6c:74:89:49:ec:8d:e6:96:
                    87:bd:45:a9:27:f3:98:8e:51:9b:c7:10:d5:4f:5f:
                    94:98:39:e2:de:8d:67:68:79:3d:04:2e:27:25:e3:
                    ea:c4:36:0b:1a:9f:89:37:22:1c:1b:69:44:85:ed:
                    57:e1:c4:d5:ae:2f:43:39:9b:8f:24:51:2f:c0:4c:
                    9c:d0:fe:de:8b:67:b2:15:81:c1:f0:f2:0d:a0:5b:
                    f0:68:0a:28:40:6e:52:84:cf:41:b3:79:0b:c8:d7:
                    f0:06:77:75:83:d8:91:30:39:39:08:c4:eb:eb:7d:
                    5c:cc:64:92:65:68:af:98:72:22:c8:a8:03:2f:df:
                    e8:b2:3f:b3:56:87:85:30:3e:74:ff:ec:e5:8c:ff:
                    dd:97:ab:aa:12:b6:9b:bc:1d:1a:e6:3a:5d:b3:68:
                    57:02:56:da:0d:29:b4:7b:e4:2b:9d:14:3c:f5:f8:
                    d8:86:a4:7b:ce:97:d6:2b:05:11:48:b5:fe:57:16:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B7:03:86:B4:5D:B4:EA:70:C9:9B:7F:88:F9:0A:DA:BD:94:5B:66
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137352e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:d9:e1:d0:7b:ef:72:38:8e:cd:c8:88:13:31:06:26:c7:
         21:d1:02:3a:a1:ca:ee:f9:46:6e:6e:e4:aa:38:64:0a:3b:4b:
         7e:c0:fd:22:91:0c:a4:a6:a2:be:26:96:cc:65:8b:ed:a8:e5:
         fd:40:65:fd:c4:f3:01:9a:ab:c1:10:45:aa:4d:b2:7b:ef:c1:
         37:14:a1:00:a1:ef:ec:6d:4d:e5:91:3f:82:6a:ae:32:cc:c5:
         2f:ea:40:16:9a:73:9a:5d:f8:1f:a2:a7:e4:05:bd:26:9a:62:
         18:e6:08:f6:2f:9e:b4:d7:34:c3:a4:00:02:b9:c4:71:fb:d3:
         3b:6d:76:34:be:ad:43:46:43:22:a4:9a:42:f9:d3:f1:aa:b8:
         fe:14:0f:37:77:9d:5d:3e:2b:3b:06:5f:1f:2b:41:13:15:2f:
         81:bb:df:4d:4c:76:78:27:65:14:a5:a7:39:50:8b:af:98:24:
         59:24:a0:f8:39:82:20:dd:0e:12:af:78:7e:c2:28:a7:eb:53:
         42:50:4b:50:50:65:59:56:1e:8e:44:02:2b:a5:44:38:8f:45:
         0d:f4:2d:4d:25:74:d2:b3:ca:d7:ae:5d:dd:88:dd:11:de:2f:
         39:e5:4d:a0:56:3e:e2:39:ae:04:a7:e9:0d:e3:e2:95:f7:7c:
         d4:bd:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:55:47 2026 by rpki-client