Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa
File:                     3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa (raw, json)
Hash identifier:          QBbJ7niNxb3H9lytAt/V0Z+pWU+TohFd2D6PqNilQRk=
Subject key identifier:   56:EE:9D:9D:6E:AD:75:B6:F5:BB:76:68:0C:A6:6C:FD:B2:12:CA:CB
Certificate issuer:       /CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
Certificate serial:       417B97509E9A3C0789470DA6848B5E8AD915AB03
Authority key identifier: B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa
Signing time:             Wed 13 May 2026 23:11:05 +0000
ROA not before:           Wed 13 May 2026 23:06:05 +0000
ROA not after:            Wed 12 May 2027 23:11:05 +0000
asID:                     271179
IP address blocks:        179.51.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl
                          rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7b:97:50:9e:9a:3c:07:89:47:0d:a6:84:8b:5e:8a:d9:15:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4
        Validity
            Not Before: May 13 23:06:05 2026 GMT
            Not After : May 12 23:11:05 2027 GMT
        Subject: CN=56EE9D9D6EAD75B6F5BB76680CA66CFDB212CACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:0a:1c:e4:4a:fc:3f:45:69:d6:de:78:2c:
                    52:2d:33:b7:d3:16:43:d5:76:d2:23:6b:a2:a3:35:
                    42:7c:f6:1d:14:b1:33:92:ce:dd:be:e4:1d:b9:6b:
                    14:28:6f:11:15:bc:11:70:02:27:f1:40:eb:bb:fa:
                    07:65:89:78:31:5b:61:77:e0:5c:63:75:21:03:43:
                    09:84:a2:42:84:39:50:94:dd:06:b8:9d:3e:9d:d1:
                    35:e5:d2:9e:ea:a0:6b:a0:17:93:8a:32:1d:79:47:
                    43:11:a1:d8:f9:e1:11:f6:db:34:ac:9b:3d:70:80:
                    69:14:1a:71:a6:45:85:54:4c:3a:22:e5:0a:56:7b:
                    5f:a9:ad:c7:02:70:52:1d:76:88:31:c6:37:da:70:
                    db:9c:15:9b:a1:4a:89:11:6f:63:d4:54:44:cb:a2:
                    2e:e3:a0:85:11:10:69:ec:92:ff:17:1d:6a:18:dc:
                    ed:68:e0:a9:d1:dc:74:e9:fa:f5:de:5b:79:4e:54:
                    b0:94:54:04:5b:50:e5:83:38:4d:55:d4:bf:5b:0f:
                    58:c2:b7:a6:cd:15:36:56:99:1b:74:86:a7:14:53:
                    8e:45:24:db:93:07:5b:47:75:e9:0f:a9:ba:6e:46:
                    11:6a:35:09:11:87:7c:23:f4:2f:07:81:c0:a1:bf:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EE:9D:9D:6E:AD:75:B6:F5:BB:76:68:0C:A6:6C:FD:B2:12:CA:CB
            X509v3 Authority Key Identifier:
                keyid:B9:EF:F2:DC:C8:D3:B6:92:8E:51:6E:6A:2D:F0:86:E0:8C:B8:91:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9EFF2DCC8D3B6928E516E6A2DF086E08CB891E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YgUCFjENbiLg4FLBzokWDgjo7UHN8LKjWJDzhoSx1ZH/1/3137392e35312e3134382e302f32322d3234203d3e20323731313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:08:7f:3b:33:49:e9:cc:3f:67:f5:53:ab:73:6e:8a:e3:22:
         aa:66:c1:71:3c:ec:aa:de:93:b1:3b:df:d1:9c:af:e4:fe:24:
         e5:9f:32:55:6f:56:61:2a:ee:64:99:68:67:22:51:da:bc:3d:
         56:da:53:3c:e8:83:a4:4f:ad:8c:5e:92:e8:39:98:b1:77:b1:
         23:7d:82:5e:97:f6:32:26:46:92:78:15:8c:18:26:4f:55:13:
         0f:a4:f0:9f:fb:0f:4b:c4:c1:fc:fa:c9:f0:df:65:0c:31:c3:
         43:48:9a:e7:cd:8e:fb:07:72:41:ba:69:ac:9a:25:b3:ac:68:
         b2:ca:32:21:04:a4:94:ef:a3:23:db:ed:1e:6d:82:e3:17:0b:
         8a:fa:66:8a:da:73:ce:e6:ef:58:e0:21:d9:80:d3:20:68:da:
         fa:6a:7d:26:4b:23:31:0e:de:c9:88:92:6f:be:ee:84:f6:55:
         40:17:5e:cf:e3:6e:7a:a0:f6:40:44:53:b5:88:3a:dc:c9:a2:
         05:cb:4e:b1:a1:19:a5:52:32:24:24:9b:8d:2c:b0:41:c0:75:
         f5:89:6f:c0:16:b7:fa:e3:be:04:7c:5f:53:b6:2b:bd:0e:37:
         57:f7:2c:23:d5:86:49:e9:b4:7d:27:05:3b:12:ae:c3:0b:46:
         0e:d6:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 18:54:26 2026 by rpki-client