Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39332e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          G8aSYPwojwWCf63mY/g4YmygU2iQHHjJEBqVbIhXaHE=
Subject key identifier:   83:37:C5:64:64:49:03:88:36:99:6B:48:E0:02:A0:21:9C:CA:78:58
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       2519438D82A0EAE4B545D8027EC5C79CD2E0D949
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:27 +0000
ROA not before:           Wed 27 May 2026 17:03:27 +0000
ROA not after:            Wed 26 May 2027 17:08:27 +0000
asID:                     271612
IP address blocks:        179.63.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:43:8d:82:a0:ea:e4:b5:45:d8:02:7e:c5:c7:9c:d2:e0:d9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:27 2026 GMT
            Not After : May 26 17:08:27 2027 GMT
        Subject: CN=8337C5646449038836996B48E002A0219CCA7858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:d4:f7:ef:6c:0f:ac:9c:df:f3:07:33:f3:
                    11:de:00:76:13:e8:af:69:8b:8c:bf:5e:8c:09:3e:
                    d7:45:9f:47:ab:a5:c5:e4:b6:bc:51:6f:e4:f6:8e:
                    61:4f:9f:b5:0b:8e:fc:45:4b:1c:1d:8f:64:fa:4d:
                    33:af:d5:de:dd:39:9c:5a:d5:29:5e:38:89:bb:76:
                    58:c3:24:30:bc:ad:b3:d0:73:3b:e8:73:45:a2:32:
                    8e:1f:11:b0:e3:2d:32:39:25:89:c2:db:96:79:23:
                    16:a2:76:c6:7c:7e:14:69:62:92:55:74:31:ce:30:
                    33:51:7a:2b:44:e9:53:9e:fb:63:0b:c2:b0:a9:f0:
                    64:f9:cb:e7:7b:59:48:9f:cb:4e:b3:e6:6d:fa:16:
                    1f:6b:c3:c0:5c:30:0f:e0:7d:82:91:12:dc:e8:01:
                    c5:56:4b:a3:70:82:64:e2:8d:1b:d9:c4:b4:e0:07:
                    5d:6b:d1:ee:3b:f1:78:0e:b3:83:0c:2a:19:f3:b4:
                    87:62:63:06:3f:34:88:7d:f0:bb:5b:55:d1:31:b2:
                    11:5e:82:75:59:09:e5:6b:ff:01:c3:78:8a:5e:36:
                    81:d0:ac:43:70:ef:d2:38:e2:2c:e0:cf:6e:46:57:
                    3f:ad:c8:9f:d2:8b:84:ec:6f:e7:e8:1e:05:75:d4:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:C5:64:64:49:03:88:36:99:6B:48:E0:02:A0:21:9C:CA:78:58
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39332e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:1e:f4:f7:db:30:79:ee:ea:0b:5d:4e:98:d2:4d:59:66:31:
         cf:f3:f4:7e:c3:bd:43:dc:b3:85:66:e6:c9:f8:20:65:46:ce:
         43:75:a3:bc:30:ec:58:f1:92:22:f9:5a:95:75:ac:6d:90:a8:
         64:4c:52:20:36:ba:95:97:05:e6:d5:10:de:a6:6a:4c:0d:52:
         d5:d2:14:de:fe:dd:5a:87:a8:e5:60:2a:59:61:4a:a7:46:fd:
         ec:e2:60:42:7f:2f:29:2f:9a:7e:0c:e7:fb:93:8d:09:9d:13:
         28:60:a8:31:8e:70:15:95:3e:78:da:e6:cc:67:36:ea:01:26:
         6f:5c:92:af:cb:f6:2f:27:8d:ba:64:18:54:9d:c3:c7:27:27:
         b2:49:71:e6:ea:76:0b:8f:5f:1d:37:de:85:a0:cd:56:ec:01:
         ef:90:d5:c1:8f:07:fb:4f:9d:33:f4:39:f1:3f:36:30:36:82:
         90:76:bb:d8:6a:6a:f0:5b:fe:67:7b:57:47:7e:e1:59:ee:6d:
         50:9a:57:13:c6:31:51:2c:58:ec:bb:15:3b:62:d5:e8:29:08:
         10:16:3c:89:dd:99:25:7c:73:f6:f5:87:08:72:38:ea:28:49:
         1b:5c:ad:25:3c:04:1f:c7:f2:a7:30:5b:90:fa:ab:df:74:95:
         0a:53:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:26 2026 by rpki-client