Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa
File:                     3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa (raw, json)
Hash identifier:          2lO7vjfyDEWbfSNoSg6jqpC8X3B6myT4sWIIw2LtugM=
Subject key identifier:   29:D9:84:40:24:82:CC:7E:A7:1B:F1:0C:40:2E:D8:0E:27:D0:37:77
Certificate issuer:       /CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
Certificate serial:       20620DABECB869F994E86574CC2EBC98F4EDC5B3
Authority key identifier: 9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa
Signing time:             Tue 19 May 2026 16:46:49 +0000
ROA not before:           Tue 19 May 2026 16:41:49 +0000
ROA not after:            Tue 18 May 2027 16:46:49 +0000
asID:                     271095
IP address blocks:        179.48.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl
                          rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 08:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:62:0d:ab:ec:b8:69:f9:94:e8:65:74:cc:2e:bc:98:f4:ed:c5:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFFE41F94284AC5688E8D8774EDA7CE818E4D89
        Validity
            Not Before: May 19 16:41:49 2026 GMT
            Not After : May 18 16:46:49 2027 GMT
        Subject: CN=29D984402482CC7EA71BF10C402ED80E27D03777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:79:d5:7d:7d:c7:e5:91:6f:fc:74:ec:a0:
                    e1:2a:d6:69:25:e2:35:86:54:24:b5:da:dd:72:e3:
                    47:06:2d:48:aa:5c:2e:41:53:56:67:e5:22:4f:f5:
                    e9:f8:c7:04:ea:c0:97:cb:23:a7:94:7a:40:15:28:
                    8b:56:d2:64:ce:90:10:ee:31:eb:07:35:0d:eb:2c:
                    da:80:f3:f1:2e:e6:84:7e:9e:d8:ba:d5:4b:2b:b8:
                    b4:45:c4:13:e0:10:af:da:4d:d2:ae:f1:6f:a7:37:
                    77:d2:4f:cc:8b:4b:a1:d3:06:ab:e7:9f:55:33:9a:
                    f7:ed:f4:f1:bc:69:17:d4:52:38:73:1b:fc:ba:f7:
                    00:76:80:f1:72:41:42:fd:85:0b:cc:3a:dd:2a:77:
                    b6:6d:ac:88:c0:d6:a0:6e:92:b8:3b:7a:bb:f7:83:
                    97:4e:f5:ca:27:72:7b:9a:bc:5a:56:6a:ed:36:23:
                    1f:1e:58:cd:d2:d6:23:9e:fa:23:5b:80:96:b5:02:
                    5a:16:05:ad:63:8c:16:0d:63:96:24:67:f9:35:7c:
                    22:03:37:0d:08:67:92:64:a3:d3:54:b1:54:a3:bb:
                    1f:bd:85:97:9d:90:00:7e:a8:af:fa:67:23:fd:de:
                    d1:ee:ec:82:88:d7:8f:ba:e5:48:5d:a3:fa:c1:f9:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:84:40:24:82:CC:7E:A7:1B:F1:0C:40:2E:D8:0E:27:D0:37:77
            X509v3 Authority Key Identifier:
                keyid:9A:FF:E4:1F:94:28:4A:C5:68:8E:8D:87:74:ED:A7:CE:81:8E:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFFE41F94284AC5688E8D8774EDA7CE818E4D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVKbshoQVuFGjfegkHSCk2N2HHo5bshXzQMe3GbcNYG/0/3137392e34382e3138342e302f32322d3332203d3e20323731303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:51:20:05:e4:a1:23:72:69:a4:1e:c6:da:d5:b3:1a:3e:c7:
         aa:46:2f:c5:cb:ea:30:c7:1c:1d:7c:95:9a:76:12:cc:6a:a1:
         43:01:ea:85:22:c2:08:a5:20:4e:73:08:ae:32:aa:8e:0b:7b:
         59:5c:aa:f9:df:82:26:29:40:d9:15:8f:ce:47:36:5b:61:a3:
         af:40:4a:7a:da:78:67:ad:40:e1:e6:04:1d:84:b4:15:a1:cf:
         55:7f:fd:f7:aa:3c:fc:2d:f9:79:9f:b4:89:32:69:45:4f:e1:
         8d:b0:78:6f:f0:e8:8f:75:d2:31:e4:06:3a:fd:3c:29:07:4d:
         7f:f3:f8:d2:96:fb:1a:bc:0d:c6:5a:e3:40:b7:15:30:41:73:
         36:73:94:da:60:87:bd:a0:47:bc:f7:16:44:a0:7f:ba:29:4b:
         21:30:e5:08:1c:77:11:b9:29:8d:38:af:6b:e0:17:d4:b3:a9:
         9e:49:57:dc:25:a6:34:9a:46:f8:d8:03:86:6d:c3:6c:4a:43:
         32:16:5f:d3:0c:64:8d:d5:a2:d4:0b:56:e7:e1:85:40:c1:81:
         2f:f5:ba:10:53:50:69:d3:d0:ea:40:4d:89:ab:d1:dc:19:f8:
         13:74:50:36:e3:4b:7a:76:e7:08:97:e9:39:fb:2f:8e:b5:cb:
         58:d5:7d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:31 2026 by rpki-client