Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138362e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138362e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          ZykHYdR2gW1KqD4eDuiH1rmTJ66j6sbnkQdsNMvsfNQ=
Subject key identifier:   8B:5E:48:3B:90:ED:6E:60:E2:BA:EB:01:EE:E4:0A:28:C1:04:0D:52
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       20A3B4EEC063EB22C1C7D58D3590D2BA756E6314
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138362e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:21 +0000
ROA not before:           Wed 01 Apr 2026 19:23:21 +0000
ROA not after:            Wed 31 Mar 2027 19:28:21 +0000
asID:                     52580
IP address blocks:        179.191.186.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a3:b4:ee:c0:63:eb:22:c1:c7:d5:8d:35:90:d2:ba:75:6e:63:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:21 2026 GMT
            Not After : Mar 31 19:28:21 2027 GMT
        Subject: CN=8B5E483B90ED6E60E2BAEB01EEE40A28C1040D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:d1:4c:3f:2e:b9:a4:02:14:06:31:2e:6f:
                    26:90:25:38:01:2c:97:2b:07:3e:68:04:1d:68:b5:
                    2a:a7:86:54:fc:53:a8:a2:a5:7d:8a:8d:83:3e:e8:
                    b2:a3:9e:74:e2:72:dc:42:d0:75:c8:11:42:5e:74:
                    8c:cc:9e:9e:26:d2:dd:30:a0:c1:dc:31:71:1c:b8:
                    ed:47:e7:05:ed:cd:ac:26:71:69:98:e7:f1:90:d6:
                    1d:c8:b4:8a:92:f0:0c:28:af:b4:c7:78:dc:c4:90:
                    87:b2:c4:c5:63:f4:c4:c6:5f:08:94:a1:d1:72:e5:
                    be:ba:91:78:93:ee:b6:8b:be:db:de:dd:a9:e9:d0:
                    4d:8c:58:42:99:67:25:be:2b:30:ab:05:a0:1b:5e:
                    6a:d1:b3:74:7b:53:46:28:fa:5a:55:e3:ba:43:80:
                    eb:cd:26:ef:90:79:cf:14:8c:a2:68:42:2a:d2:eb:
                    03:95:e6:b0:c1:c1:38:ce:ea:1f:2c:83:3d:9d:7f:
                    ee:fd:e4:70:70:14:2b:b7:bd:65:cc:b8:3a:cc:62:
                    4a:32:f8:dc:1d:38:0d:62:76:0a:d7:b0:38:07:27:
                    59:99:30:09:c4:49:6e:c1:bb:3f:72:ce:ca:11:23:
                    4d:da:e4:54:6d:c6:c7:ef:3b:b8:37:84:68:68:7f:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:48:3B:90:ED:6E:60:E2:BA:EB:01:EE:E4:0A:28:C1:04:0D:52
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138362e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c2:11:4b:3f:1b:26:c2:17:36:33:c8:3a:97:84:da:1e:e5:
         31:20:cf:9b:37:f6:3e:b0:e9:c9:5d:e9:90:0f:f7:2b:98:15:
         ec:a5:a4:e7:92:14:85:25:ea:4d:d0:ae:16:39:29:6b:ab:e2:
         37:4c:05:71:b9:22:84:43:99:74:11:f3:24:0f:7e:d2:31:b2:
         81:b6:e9:6a:74:c4:33:c8:a9:52:b6:ee:d2:7a:91:f6:6b:c8:
         9b:94:16:5a:f0:e3:2e:b7:98:5c:b7:4d:a8:75:0e:30:a4:2d:
         f8:15:2f:50:ae:5e:5b:f1:b2:4a:58:a4:1a:61:4e:40:0d:0a:
         38:8c:7b:c6:09:71:33:d9:f6:a6:e1:15:32:40:d6:d5:e5:13:
         ff:b5:ce:62:7d:24:b9:56:07:64:4b:91:4d:d3:d3:7e:62:ce:
         a8:5b:3d:ff:1e:1b:a0:2e:11:50:fb:3e:8c:b3:b0:df:f2:b0:
         89:14:cf:61:b5:50:5a:d8:f5:5e:dd:74:e3:d8:a0:38:01:c5:
         a3:e4:d3:cc:b2:c5:e0:9f:85:30:db:f9:b2:fb:2b:55:ba:12:
         7a:e2:5b:06:af:b2:c3:4e:50:f9:77:13:41:d6:0d:3f:c8:78:
         f4:fe:f6:3f:a1:b0:2c:f3:28:fd:90:5d:c5:34:29:c5:8e:8a:
         d1:bb:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:55:35 2026 by rpki-client