Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32342e302f32312d3234203d3e20323633363131.roa
File:                     3137392e3132342e32342e302f32312d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          /OApk4JkbSHFfUWHjvB/O8Yq6CWGpZBfCHukJjEJDI4=
Subject key identifier:   56:BD:53:1A:98:5C:54:2A:A0:15:E5:08:8D:25:1E:9C:B6:DD:FE:C9
Certificate issuer:       /CN=D6831111E8797708FF0562D131A197B0F3A4815F
Certificate serial:       284BEA03C5C5879752A12277253BECD9ECFE7624
Authority key identifier: D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32342e302f32312d3234203d3e20323633363131.roa
Signing time:             Tue 19 May 2026 16:01:25 +0000
ROA not before:           Tue 19 May 2026 15:56:25 +0000
ROA not after:            Tue 18 May 2027 16:01:25 +0000
asID:                     263611
IP address blocks:        179.124.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4b:ea:03:c5:c5:87:97:52:a1:22:77:25:3b:ec:d9:ec:fe:76:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6831111E8797708FF0562D131A197B0F3A4815F
        Validity
            Not Before: May 19 15:56:25 2026 GMT
            Not After : May 18 16:01:25 2027 GMT
        Subject: CN=56BD531A985C542AA015E5088D251E9CB6DDFEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:81:48:90:21:54:6b:c6:94:d0:55:f8:95:
                    a6:1a:54:64:23:96:81:2c:cf:25:40:08:ac:3c:98:
                    d6:60:5c:90:c5:d2:60:61:82:6e:f9:24:ec:db:ae:
                    cc:97:10:cf:bc:28:f7:2b:9e:56:56:ee:ff:ff:fb:
                    d8:5e:0e:15:1b:50:23:4e:dc:7f:5a:38:a2:45:10:
                    e5:8d:57:b7:76:c8:6d:6c:01:69:30:d7:6f:ff:65:
                    bb:30:72:05:3a:1f:e3:30:7b:73:63:04:de:01:ec:
                    3d:76:e1:e1:94:74:5e:5a:0b:73:49:db:1a:82:e2:
                    50:98:34:29:ee:06:8b:70:dd:20:5a:b7:9c:40:91:
                    99:f5:a3:85:61:78:85:df:8d:ef:61:ac:68:f2:24:
                    5a:7e:e6:d6:1d:9b:48:94:12:3e:1b:c9:a9:59:10:
                    6b:5d:08:80:91:57:6b:31:e9:19:cd:7b:9f:9b:ae:
                    2a:2f:1c:e8:60:8c:ea:49:40:c8:64:3a:53:e3:93:
                    61:33:96:87:d3:42:2c:67:f6:34:96:c3:be:a9:43:
                    9c:71:f2:f3:2c:e2:f9:52:a4:9a:a4:97:f7:ac:e0:
                    da:1c:ce:a0:d9:e9:7e:b6:e0:3c:d2:90:58:d4:5b:
                    d0:ec:cd:c5:7a:e3:61:89:72:d3:49:b8:d1:e8:6c:
                    15:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:53:1A:98:5C:54:2A:A0:15:E5:08:8D:25:1E:9C:B6:DD:FE:C9
            X509v3 Authority Key Identifier:
                keyid:D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32342e302f32312d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:fa:81:6e:48:57:cc:a7:bf:f6:a7:85:d5:31:5d:6d:07:
         2d:49:e5:af:89:2a:95:77:1a:b9:9e:d2:de:12:2a:d6:11:8f:
         55:8b:f1:c6:16:60:ca:dd:8b:91:f6:a2:13:2c:fb:03:eb:f2:
         60:92:9a:93:63:8f:ae:59:ac:b9:46:5c:05:73:a0:94:30:d5:
         1b:4a:95:bd:3e:6f:ed:ee:8c:df:72:fd:22:4e:fd:66:f9:05:
         b2:85:6d:cb:ec:1e:c9:c5:d4:2c:32:06:d6:99:e3:40:96:84:
         62:7f:1a:cd:18:38:06:6e:1c:81:aa:1f:d8:41:3a:d3:6a:dd:
         5a:76:a3:f9:39:f9:db:d1:34:8b:11:8e:47:59:e2:60:10:8c:
         50:be:52:e1:52:40:1e:53:72:f3:33:b7:bb:ee:d3:a4:cd:bd:
         9c:a7:fc:9d:c2:27:cf:df:c2:5a:71:21:5e:e0:40:e3:d1:19:
         b4:ba:3f:40:a5:f6:7a:65:8c:71:4b:e1:31:ec:b6:e7:88:f2:
         ae:f1:10:0d:6b:43:64:d2:43:3b:67:01:77:94:3c:be:d5:b5:
         53:d5:c4:d0:47:0d:bb:78:9b:5a:2f:8a:7d:76:02:1d:53:a5:
         cd:ff:51:cd:74:f7:32:ee:03:e3:49:e3:ed:ed:e7:50:7b:0f:
         7d:67:36:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:41:06 2026 by rpki-client