Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3137392e3132352e32342e302f32312d3234203d3e20323633363236.roa
File:                     3137392e3132352e32342e302f32312d3234203d3e20323633363236.roa (raw, json)
Hash identifier:          hJdaGfKEzH9U28DmZwlDYb3jNyMCzqadthBF0G515nY=
Subject key identifier:   D0:CA:73:78:20:0D:5E:58:48:3C:05:E9:2D:33:34:E5:3E:FB:5D:8A
Certificate issuer:       /CN=EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B
Certificate serial:       36B6BAB04076D6C435BD374B6C6566A2D733EECE
Authority key identifier: EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3137392e3132352e32342e302f32312d3234203d3e20323633363236.roa
Signing time:             Sun 05 Jul 2026 21:54:44 +0000
ROA not before:           Sun 05 Jul 2026 21:49:44 +0000
ROA not after:            Sun 04 Jul 2027 21:54:44 +0000
asID:                     263626
IP address blocks:        179.125.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.crl
                          rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b6:ba:b0:40:76:d6:c4:35:bd:37:4b:6c:65:66:a2:d7:33:ee:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B
        Validity
            Not Before: Jul  5 21:49:44 2026 GMT
            Not After : Jul  4 21:54:44 2027 GMT
        Subject: CN=D0CA7378200D5E58483C05E92D3334E53EFB5D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:9c:1c:33:e0:40:03:51:de:39:8e:fe:2f:
                    81:99:30:34:a6:4a:72:f3:79:de:e7:ca:39:8d:c3:
                    d7:4a:53:21:29:51:02:6c:e4:b2:a3:ff:c6:a6:43:
                    61:74:14:1a:da:9d:43:bb:d2:9f:ff:aa:07:1a:80:
                    84:6b:98:98:7d:f6:80:6a:e9:30:61:5e:db:fa:d1:
                    52:59:14:95:56:9b:a9:be:84:d5:a5:0d:02:08:f2:
                    10:36:1f:3e:fe:dd:b2:31:47:25:05:54:3a:29:3a:
                    1a:2d:6f:6c:07:f2:bd:ea:c5:ab:27:f4:25:70:ed:
                    5a:78:a2:77:25:7c:ad:56:b5:08:9f:3a:16:ab:8b:
                    e5:20:49:01:9d:18:76:88:53:b8:70:0b:f6:2e:b7:
                    fa:dd:33:be:8e:cc:cb:e8:3a:9f:14:bd:17:93:52:
                    36:e6:e9:e2:b6:b9:9b:17:ba:06:66:0a:3d:30:19:
                    0a:11:a4:da:d3:2d:af:91:d0:2b:56:84:de:81:78:
                    6c:c7:0e:f7:45:ba:d1:b5:cd:fd:ff:91:cd:9d:1c:
                    ce:2a:18:7c:6d:01:c8:3a:6f:80:fa:93:7d:57:56:
                    b2:dc:5a:13:04:44:ab:0e:78:c1:7c:73:46:d7:f7:
                    06:bf:11:12:60:13:14:21:c7:02:de:95:ba:e0:8a:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:73:78:20:0D:5E:58:48:3C:05:E9:2D:33:34:E5:3E:FB:5D:8A
            X509v3 Authority Key Identifier:
                keyid:EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3137392e3132352e32342e302f32312d3234203d3e20323633363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:78:da:9a:19:f0:ef:d9:f5:7a:17:13:57:ba:50:88:04:79:
         6b:62:b2:10:e5:a9:89:cf:ff:55:d2:77:9c:6b:1e:30:96:80:
         23:f6:f8:70:87:89:17:bb:78:f3:eb:dc:be:86:1b:ef:02:14:
         63:58:a8:fe:3c:0b:63:7c:0c:0c:22:2f:10:54:2e:70:fb:9e:
         9a:0a:51:8f:7d:c5:88:2f:40:fa:3c:fe:4d:c6:68:61:df:f8:
         42:e3:6a:a8:fe:1b:9a:7a:75:bf:bc:a0:a5:86:b1:60:69:11:
         47:2e:ec:5c:17:6d:66:96:95:a4:33:27:7c:40:4b:be:1b:9e:
         c6:1e:1e:0c:5a:49:0b:fd:92:65:d7:6e:cf:91:c5:ec:be:3b:
         7b:c0:01:cc:27:e5:be:80:6a:62:ba:67:9b:ea:4c:92:2c:48:
         25:68:39:d7:76:d9:4a:ca:60:43:2c:5d:a4:04:bb:0a:68:0c:
         b4:68:1b:17:54:bb:d9:be:99:66:05:48:0e:50:eb:80:ae:17:
         d5:ba:60:9b:19:82:29:15:d6:21:9e:f2:e1:bd:6a:5f:f6:ed:
         93:d4:3d:ec:47:5f:65:2b:37:1e:8d:b1:9d:60:0b:59:b5:c6:
         d1:2e:81:bd:89:9a:fb:fc:14:59:6f:70:e6:73:d8:a4:52:41:
         70:76:03:84
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNra6sEB21sQ1vTdLbGVmotcz7s4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBNTBDRjg2NTI2OUZGNjU1QkZEM0YxMzRCM0JCNEYx
QUMyREM5QjAeFw0yNjA3MDUyMTQ5NDRaFw0yNzA3MDQyMTU0NDRaMDMxMTAvBgNV
BAMTKEQwQ0E3Mzc4MjAwRDVFNTg0ODNDMDVFOTJEMzMzNEU1M0VGQjVEOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCpwcM+BAA1HeOY7+L4GZMDSm
SnLzed7nyjmNw9dKUyEpUQJs5LKj/8amQ2F0FBranUO70p//qgcagIRrmJh99oBq
6TBhXtv60VJZFJVWm6m+hNWlDQII8hA2Hz7+3bIxRyUFVDopOhotb2wH8r3qxasn
9CVw7Vp4onclfK1WtQifOhari+UgSQGdGHaIU7hwC/Yut/rdM76OzMvoOp8UvReT
Ujbm6eK2uZsXugZmCj0wGQoRpNrTLa+R0CtWhN6BeGzHDvdFutG1zf3/kc2dHM4q
GHxtAcg6b4D6k31XVrLcWhMERKsOeMF8c0bX9wa/ERJgExQhxwLelbrgiuZtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0MpzeCANXlhIPAXpLTM05T77XYowHwYDVR0j
BBgwFoAU76UM+GUmn/ZVv9PxNLO7TxrC3JswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZ5NXlMeVZoZlNzVWtUVjdtWTVIYnY3VXFvb0ZtRVJEWHNxazVRMXE4
MVcvMC9FRkE1MENGODY1MjY5RkY2NTVCRkQzRjEzNEIzQkI0RjFBQzJEQzlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGQTUwQ0Y4NjUyNjlGRjY1
NUJGRDNGMTM0QjNCQjRGMUFDMkRDOUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2eTV5THlWaGZTc1VrVFY3bVk1SGJ2N1Vxb29GbUVSRFhzcWs1UTFxODFXLzAv
MzEzNzM5MmUzMTMyMzUyZTMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOzfRgwDQYJKoZIhvcNAQELBQADggEBAGV42poZ
8O/Z9XoXE1e6UIgEeWtishDlqYnP/1XSd5xrHjCWgCP2+HCHiRe7ePPr3L6GG+8C
FGNYqP48C2N8DAwiLxBULnD7npoKUY99xYgvQPo8/k3GaGHf+ELjaqj+G5p6db+8
oKWGsWBpEUcu7FwXbWaWlaQzJ3xAS74bnsYeHgxaSQv9kmXXbs+Rxey+O3vAAcwn
5b6AamK6Z5vqTJIsSCVoOdd22UrKYEMsXaQEuwpoDLRoGxdUu9m+mWYFSA5Q64Cu
F9W6YJsZgikV1iGe8uG9al/27ZPUPexHX2UrNx6NsZ1gC1m1xtEugb2Jmvv8FFlv
cOZz2KRSQXB2A4Q=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:12 2026 by rpki-client