Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa
File:                     3137392e3138392e37322e302f32312d3234203d3e203532363130.roa (raw, json)
Hash identifier:          KRmIU8C1v1YEBWFZs2m02yhlB0LxeSQAq+BZaAkrgP8=
Subject key identifier:   74:BA:6F:8C:98:FF:05:B8:1A:4C:EA:E3:76:2A:B1:1F:A4:D4:3A:90
Certificate issuer:       /CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
Certificate serial:       6B53FAFE912CA8C2FDEB636FD55D63B5C4AFF8E6
Authority key identifier: 5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa
Signing time:             Mon 30 Mar 2026 17:11:45 +0000
ROA not before:           Mon 30 Mar 2026 17:06:45 +0000
ROA not after:            Mon 29 Mar 2027 17:11:45 +0000
asID:                     52610
IP address blocks:        179.189.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl
                          rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 13:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:53:fa:fe:91:2c:a8:c2:fd:eb:63:6f:d5:5d:63:b5:c4:af:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551
        Validity
            Not Before: Mar 30 17:06:45 2026 GMT
            Not After : Mar 29 17:11:45 2027 GMT
        Subject: CN=74BA6F8C98FF05B81A4CEAE3762AB11FA4D43A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:f4:11:fa:23:08:ca:df:c1:aa:bf:9e:ee:
                    55:ad:31:40:78:67:4f:c1:d8:33:18:52:42:61:93:
                    40:3b:c8:40:8e:11:d7:1d:b3:66:08:e4:a5:72:b0:
                    0b:86:e9:e1:49:b7:db:d7:ac:88:16:86:dc:e0:60:
                    79:79:48:db:92:87:2f:cf:d5:49:74:02:6b:a4:11:
                    ad:58:5e:1b:ca:77:a2:0f:96:b1:a4:19:9f:66:1c:
                    12:96:0c:8a:c6:d9:e8:78:15:6e:9d:1b:18:05:d6:
                    b3:97:8a:93:23:bd:ba:1f:20:a1:ca:f9:a8:98:e7:
                    87:fa:0a:a8:36:6a:1f:5b:b4:94:56:b9:e3:7b:d6:
                    25:ae:85:b6:b1:ba:b6:43:f3:b8:0b:ae:ce:92:9e:
                    52:68:11:a7:9a:26:df:9b:26:3b:4b:3b:24:a2:b1:
                    cb:e9:78:78:e4:c5:d0:da:46:60:49:c1:41:1b:74:
                    4a:8f:de:2b:f4:fc:be:3e:00:31:7d:08:81:68:b4:
                    6d:f7:ef:92:ef:3a:ec:3e:69:89:c3:89:a2:ad:88:
                    a8:1c:e4:5f:c5:d2:6a:e3:0e:06:e1:82:97:39:9b:
                    4c:8a:53:ae:f3:57:8b:b7:43:7a:d6:e6:ed:41:0a:
                    4b:e8:05:d9:f0:d5:d6:2b:7d:4d:df:b9:4d:f6:23:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BA:6F:8C:98:FF:05:B8:1A:4C:EA:E3:76:2A:B1:1F:A4:D4:3A:90
            X509v3 Authority Key Identifier:
                keyid:5D:1A:69:4A:D3:A6:B6:DB:C8:AF:D1:A4:17:EE:3B:F5:C6:AC:85:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A694AD3A6B6DBC8AFD1A417EE3BF5C6AC8551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/33bzAP6mxbc5KiNm3BvVSDJqQ2XDcbrYANk7WfpnokQC/0/3137392e3138392e37322e302f32312d3234203d3e203532363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:75:8a:db:57:63:c3:3f:cf:2b:6d:ee:99:7c:04:11:4e:
         93:04:dc:cd:98:0f:11:e4:25:84:4b:79:0f:e9:3e:77:17:2b:
         9e:08:2a:1d:5e:bd:cf:d3:f6:69:80:1e:48:aa:42:70:fd:ca:
         e0:74:b5:c1:8e:1b:e7:39:a6:ef:cd:6b:40:1b:4b:0e:cd:40:
         9a:ba:a7:13:5d:47:31:f6:66:af:11:ae:20:ea:91:63:69:42:
         44:21:0f:87:01:0a:2e:49:7c:03:ce:8a:ab:c3:f3:7c:5c:43:
         43:6c:07:0d:08:24:fb:16:a6:36:dd:1c:70:25:07:97:dc:d8:
         cc:7f:39:fe:a4:5a:7f:0c:59:6e:6d:9b:8d:59:21:b9:40:40:
         28:f8:33:8b:cf:4e:f9:1e:79:3f:72:58:81:ea:c1:83:e0:67:
         54:23:b1:6e:9d:c9:56:6f:0c:a7:53:e0:34:7c:99:2a:6c:87:
         69:16:f5:d5:36:bf:f4:7e:3e:3b:68:6d:99:ff:46:e3:c8:e6:
         f9:59:67:7e:51:00:15:9a:c6:0c:f0:cc:f7:b6:09:8d:4a:1e:
         f4:b4:e7:13:7d:51:73:b4:5d:df:74:96:2d:ff:e9:6a:3a:20:
         8c:0f:ce:6e:b8:4d:1c:26:8d:cc:2c:cd:3b:cc:16:50:1e:76:
         f7:b8:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:39:36 2026 by rpki-client