Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa
File:                     3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa (raw, json)
Hash identifier:          K9NfuZCDo+S8XZ0LGoG5FZ3WLKOh2vrogjDv1mQIDis=
Subject key identifier:   34:5B:D3:54:85:14:D8:81:39:24:8E:AF:C9:A6:04:68:04:55:87:D6
Certificate issuer:       /CN=F61AA6D04968E2222C81499C46D03813F1070400
Certificate serial:       32A14AF210C59EA61C3B94738AC7473BD96F055D
Authority key identifier: F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa
Signing time:             Mon 10 Aug 2026 17:31:48 +0000
ROA not before:           Mon 10 Aug 2026 17:26:48 +0000
ROA not after:            Mon 09 Aug 2027 17:31:48 +0000
asID:                     28171
IP address blocks:        179.107.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl
                          rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 10:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:4a:f2:10:c5:9e:a6:1c:3b:94:73:8a:c7:47:3b:d9:6f:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61AA6D04968E2222C81499C46D03813F1070400
        Validity
            Not Before: Aug 10 17:26:48 2026 GMT
            Not After : Aug  9 17:31:48 2027 GMT
        Subject: CN=345BD3548514D88139248EAFC9A60468045587D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:06:68:9e:4e:76:40:c5:98:bb:90:84:1c:c6:
                    c7:2f:45:96:93:d7:7f:cf:58:c8:b7:f2:16:6e:90:
                    54:f6:86:7f:39:20:22:27:87:5c:9a:38:df:05:9f:
                    55:bf:c8:45:3c:31:63:0b:15:95:41:0e:62:15:12:
                    67:71:b0:31:d8:c3:51:9b:89:b0:6b:68:ff:27:62:
                    e3:92:f1:98:7c:3d:c2:56:13:49:c0:22:32:a8:70:
                    ee:34:a9:68:05:39:ab:80:00:8d:ce:4d:0a:1f:cd:
                    75:11:5f:c3:4f:93:cb:ec:e3:0e:01:23:28:5c:9c:
                    c9:b4:ba:73:73:fd:e5:91:a3:b9:8a:a3:79:5f:1f:
                    70:2a:95:4c:55:b2:b0:34:5c:6a:1c:60:d5:6b:58:
                    54:63:f8:21:f2:81:41:dd:55:88:4a:39:81:b2:6d:
                    87:8e:72:0b:f1:ef:9b:15:d9:f1:08:79:9e:50:9e:
                    bf:da:5d:6f:45:67:9d:11:c6:79:ba:17:ae:77:29:
                    cf:b3:d3:ad:6f:81:0c:9c:0d:3d:f6:f5:84:c7:5f:
                    ee:f9:18:51:1f:f3:ab:e6:36:96:6f:7a:30:a7:5f:
                    6a:85:c2:ea:82:92:af:f8:23:fd:c2:bb:c5:49:8e:
                    ba:0c:78:06:c9:be:80:2a:9e:70:a1:17:9e:60:c5:
                    ee:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5B:D3:54:85:14:D8:81:39:24:8E:AF:C9:A6:04:68:04:55:87:D6
            X509v3 Authority Key Identifier:
                keyid:F6:1A:A6:D0:49:68:E2:22:2C:81:49:9C:46:D0:38:13:F1:07:04:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/F61AA6D04968E2222C81499C46D03813F1070400.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F61AA6D04968E2222C81499C46D03813F1070400.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/0/3137392e3130372e3132382e302f31392d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:e0:04:29:7b:6c:48:76:cd:ac:d3:b6:a5:c9:42:af:e4:
         3b:55:9b:95:bb:be:fe:7f:7e:32:83:89:ca:c4:c1:92:5c:dc:
         98:7d:4c:08:0b:72:93:b9:64:8a:01:8b:56:b3:bf:73:e1:9a:
         a3:59:40:96:35:8f:ef:4b:87:94:88:5f:b0:ad:8a:40:88:d6:
         56:4f:26:65:c5:08:6a:25:52:45:d2:01:17:95:2a:9f:c5:f3:
         e5:b6:28:d4:25:e2:bc:ff:29:96:f7:2d:a4:a8:d1:18:28:de:
         32:9e:09:5d:fa:35:64:39:8e:10:a6:e1:60:1c:85:77:7b:59:
         98:27:a0:e9:cf:b2:e3:f6:8a:08:c3:7d:fe:f1:12:28:4b:70:
         8e:b5:e5:4d:e0:ea:4f:f6:30:49:f8:51:ab:48:2f:fd:9e:11:
         29:54:ac:de:b8:91:23:68:54:98:b3:e6:c9:86:c7:ab:14:8d:
         ba:74:bc:67:e6:15:fe:81:2f:17:62:b1:3f:26:39:fe:e2:b1:
         1c:13:ea:0c:c9:f3:af:0c:31:09:7b:c1:bd:a5:c1:94:d0:d8:
         37:00:b0:f6:07:45:be:cd:64:8d:95:54:f4:b6:fa:7d:50:8b:
         26:88:43:d9:53:91:3f:9e:4c:ae:3c:e9:e8:90:41:ef:91:45:
         27:d7:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:39:19 2026 by rpki-client