Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138382e302f32342d3332203d3e203532353830.roa
File:                     3137392e3139312e3138382e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          OUXsyMylkAFMEeafuzQpRCegOi/gs5YZT5xTFgIH388=
Subject key identifier:   6A:AF:F8:D5:BC:F5:03:14:F9:09:7A:B0:E1:C0:54:DC:F5:AA:96:3D
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       0D585F39867923A980CAF5563853EB904B3A906D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138382e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:16 +0000
ROA not before:           Wed 01 Apr 2026 19:23:16 +0000
ROA not after:            Wed 31 Mar 2027 19:28:16 +0000
asID:                     52580
IP address blocks:        179.191.188.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:58:5f:39:86:79:23:a9:80:ca:f5:56:38:53:eb:90:4b:3a:90:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:16 2026 GMT
            Not After : Mar 31 19:28:16 2027 GMT
        Subject: CN=6AAFF8D5BCF50314F9097AB0E1C054DCF5AA963D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:66:46:81:d0:b7:20:0b:c1:37:96:96:f0:
                    a2:2f:7b:9c:3c:b2:7c:af:1e:12:1d:13:fa:83:c3:
                    59:47:3b:67:26:c7:03:6f:51:88:3b:67:87:32:9b:
                    bd:62:a7:ce:c7:14:81:d7:d0:e8:96:38:f5:ac:1c:
                    38:1b:0c:2b:e3:95:05:cf:e9:b9:82:b4:8b:7a:d4:
                    b4:d5:ff:ea:9b:3d:eb:c4:71:b9:56:a7:99:7f:78:
                    e6:4c:b2:03:1f:43:84:11:9c:6b:c3:5e:ac:6c:4b:
                    e7:2d:b2:b8:43:51:7c:da:39:6b:ce:f0:93:35:7c:
                    1f:82:d5:e2:3f:b7:bc:58:ae:b5:9b:3a:45:1b:0b:
                    34:d7:36:3a:76:e0:4f:2d:eb:cd:57:57:ce:9f:16:
                    f1:8f:9f:ae:16:9f:22:c5:a5:a6:0b:e6:de:55:58:
                    a7:34:24:fb:24:f0:1d:c9:db:b6:c0:45:da:e1:33:
                    90:fe:fc:c4:cb:95:66:e8:15:46:dc:07:6d:36:8e:
                    ab:be:ae:84:21:1b:37:f7:81:33:09:89:de:d5:36:
                    54:48:27:bc:0b:da:a9:70:0b:cf:cc:99:57:a5:50:
                    77:13:53:26:ca:87:1c:98:2d:e1:5c:f3:82:a4:27:
                    d0:96:82:6d:e1:93:eb:64:d0:84:9b:5d:ba:16:df:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AF:F8:D5:BC:F5:03:14:F9:09:7A:B0:E1:C0:54:DC:F5:AA:96:3D
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3137392e3139312e3138382e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:72:59:02:f5:a2:26:64:87:ae:3a:30:7b:97:61:89:5b:
         13:76:bc:f4:73:fa:f2:34:43:73:b8:c8:53:95:fb:5f:b4:b3:
         6f:09:15:db:1f:4e:30:c0:e5:e0:f6:63:af:75:8f:65:50:a9:
         96:89:9e:6d:bc:44:16:e7:54:ad:8d:cd:e1:78:57:ef:8c:f0:
         bd:6c:6c:73:88:8b:49:30:25:75:b0:48:aa:83:ab:32:5e:b3:
         39:59:f7:49:d0:d5:92:a1:f1:ea:28:bd:10:4f:d2:02:18:6e:
         88:10:6e:c8:da:9f:27:30:9f:19:39:e5:97:5e:76:8b:f3:0e:
         b5:a7:a7:c8:13:ff:c2:6c:9f:bb:ad:52:b6:bf:94:60:0c:a2:
         21:b4:1c:6d:16:80:f6:b7:bd:16:51:b7:f1:16:07:85:af:ed:
         ad:16:27:ca:a4:a0:31:03:69:23:3b:24:44:f4:d7:aa:41:4b:
         d5:37:b0:5d:e3:7d:cb:e2:7b:bd:e4:4d:0d:14:83:69:bf:82:
         60:11:a0:92:52:35:63:39:f5:a8:37:1a:ce:b1:54:97:48:02:
         76:f3:75:79:50:10:c0:fd:3e:82:5d:6b:86:fa:3d:3d:a6:a1:
         ff:a2:18:d6:67:18:0c:ff:c9:c6:1a:ae:f2:cb:cb:a9:38:89:
         6b:b4:2f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 16:03:50 2026 by rpki-client