Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3137392e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          q1BQPZvB1uN6e6a9AwVFKRLe07WajVTvARBv9R1Ti5g=
Subject key identifier:   A1:FB:2B:A8:E6:BE:FF:86:7B:C5:AD:EF:20:64:0E:64:BA:CF:B3:B4
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       26D380369E05A50A423B3BF501967D6F0DB48B90
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:34 +0000
ROA not before:           Wed 01 Apr 2026 19:23:34 +0000
ROA not after:            Wed 31 Mar 2027 19:28:34 +0000
asID:                     52580
IP address blocks:        179.191.179.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:80:36:9e:05:a5:0a:42:3b:3b:f5:01:96:7d:6f:0d:b4:8b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:34 2026 GMT
            Not After : Mar 31 19:28:34 2027 GMT
        Subject: CN=A1FB2BA8E6BEFF867BC5ADEF20640E64BACFB3B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:7e:05:8f:b6:25:66:e0:d9:24:bf:cd:9b:
                    aa:d0:a8:08:c7:97:a0:f6:5d:f2:98:a4:57:c3:ff:
                    e0:a4:12:71:87:29:8a:66:27:bd:0e:5b:d4:fd:29:
                    ad:3a:4b:48:ab:cf:8b:c4:c5:77:24:fd:67:ee:32:
                    de:ec:6d:b6:16:ce:ea:ad:93:8f:bf:ff:c2:02:c3:
                    d6:2c:1c:7a:2a:2f:6d:18:a0:82:0c:be:09:55:17:
                    57:0e:67:87:9c:4e:04:4f:19:bc:b8:88:54:cb:69:
                    cd:2e:43:f4:75:24:1e:7c:0c:e0:6b:d6:96:6e:75:
                    68:c8:12:76:d3:72:c3:c2:74:98:d4:78:ce:4d:ba:
                    96:bc:5a:af:99:eb:a6:a1:2b:48:7c:d5:7a:c0:07:
                    79:24:9e:ab:79:cd:5c:e7:10:b0:92:4a:4f:c9:01:
                    9d:cf:83:b7:46:1b:4f:72:d0:e4:45:8b:08:17:88:
                    96:f8:3c:e5:0f:56:5a:de:32:96:80:53:6c:82:ac:
                    b0:ce:28:43:dc:24:0d:93:48:82:bc:8d:bb:8b:ce:
                    d0:06:35:83:8e:f0:45:e1:ad:7b:ed:cb:cd:1a:55:
                    04:35:c4:00:28:e0:38:dd:5a:43:cd:1a:c8:f1:9d:
                    9c:a2:41:83:54:86:20:18:66:dd:c8:a3:24:01:49:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FB:2B:A8:E6:BE:FF:86:7B:C5:AD:EF:20:64:0E:64:BA:CF:B3:B4
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3137392e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:c4:cf:d9:2e:1f:ee:fa:d2:da:85:bb:6c:1b:d8:cb:5f:11:
         4d:bf:f2:b9:19:f2:f9:33:e0:ae:20:b5:5c:ad:fb:e7:9b:3b:
         85:ca:aa:8f:1b:b0:8e:1e:80:53:ee:bc:f0:95:99:85:d4:af:
         b2:db:a1:7b:57:d9:61:da:c0:df:7b:8d:88:f0:fe:48:9d:2f:
         06:e2:f1:26:4a:e6:9f:2e:fc:d2:78:c1:ec:90:c1:f6:ca:de:
         c8:e5:d0:25:aa:c4:65:06:03:56:ab:02:d9:20:83:f8:b2:e5:
         72:9e:b2:90:b4:2a:02:a9:3d:b6:cf:f1:d3:77:ee:1b:7a:e8:
         0e:32:f7:68:0f:b5:5e:c9:0e:4d:1d:5f:4d:b9:53:14:35:fe:
         07:ac:1f:59:b8:33:bc:13:28:d1:62:5d:8e:92:f9:96:d9:5b:
         6d:7f:ef:6f:eb:14:26:d4:fe:73:c6:d5:e5:dc:c8:56:1b:79:
         58:7f:3b:09:6c:fc:73:20:41:46:c4:15:54:40:39:14:a9:6b:
         27:97:ce:94:b3:3c:e6:20:94:53:98:60:68:06:f3:26:42:8d:
         c1:4a:60:42:6b:56:9f:b2:96:58:ce:33:41:07:1b:bc:c1:4e:
         73:53:0d:10:f5:ef:e4:96:46:11:13:1b:81:0f:fa:e4:53:cc:
         88:28:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:54:44 2026 by rpki-client