Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          raADWujMNOL29EwnYbIXAXApur66V59cMReENSi60yw=
Subject key identifier:   82:45:16:08:30:F4:B7:6B:30:D0:68:02:55:8E:AA:0C:DA:80:67:E7
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       425C9E91CE929504652A918EA6C0432FE0BFDF31
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:10 +0000
ROA not before:           Tue 19 May 2026 12:33:10 +0000
ROA not after:            Tue 18 May 2027 12:38:10 +0000
asID:                     263641
IP address blocks:        179.127.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:9e:91:ce:92:95:04:65:2a:91:8e:a6:c0:43:2f:e0:bf:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:10 2026 GMT
            Not After : May 18 12:38:10 2027 GMT
        Subject: CN=8245160830F4B76B30D06802558EAA0CDA8067E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:4d:48:be:d6:fa:1d:70:bb:53:f9:8f:46:
                    22:ce:f8:42:0d:fa:4b:cf:51:4c:c7:c9:97:c9:30:
                    61:7e:2a:58:97:d3:5d:75:ce:42:59:71:88:b4:1f:
                    3f:5b:75:05:2d:42:c1:e9:f1:45:fb:5f:f6:4d:2c:
                    ae:59:a2:44:66:25:c9:12:b5:ac:02:2d:b7:a8:c2:
                    88:b9:e4:df:47:15:c8:57:82:e5:8a:71:fd:b1:cf:
                    cc:a9:18:18:01:7b:dc:63:84:bd:71:d3:05:0d:a0:
                    ee:3e:3b:49:74:88:ed:4f:b4:13:c2:8f:82:4d:79:
                    e4:77:14:a3:dd:0c:a7:ce:d0:ea:c9:45:34:19:65:
                    bc:06:3c:22:a1:18:95:6f:44:61:2d:be:9e:49:5a:
                    1b:1f:4e:37:92:a3:7b:60:00:50:a2:fa:f3:1a:42:
                    d1:e1:50:b5:3d:2b:3c:c8:e7:4d:fd:05:fc:71:d0:
                    89:fc:56:c8:04:2d:a6:1a:a3:82:1e:09:15:ac:99:
                    2b:7c:92:fc:d1:d2:9e:39:1d:93:89:9e:fe:c8:2b:
                    08:34:e2:3a:9b:d2:c2:e8:fd:1d:d0:ac:00:de:78:
                    bb:ce:f5:74:e6:05:f9:15:b8:88:d9:ba:db:5c:3e:
                    b3:87:f7:24:be:b9:43:d9:55:f9:6c:d2:b6:6a:e2:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:16:08:30:F4:B7:6B:30:D0:68:02:55:8E:AA:0C:DA:80:67:E7
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:bf:67:b6:64:cc:1c:ef:77:39:9a:7f:11:2b:48:a2:3c:5b:
         22:cc:a9:45:ca:e6:60:27:85:09:d7:3a:3b:a0:90:6d:a0:94:
         34:7f:4a:46:3f:39:a3:d4:c4:c8:95:99:d7:a0:15:b1:fd:23:
         ed:a1:fe:22:e2:d2:4c:c6:f5:45:a5:38:03:58:a7:bd:a7:e6:
         dc:6c:5b:2d:e6:3c:2f:bb:d9:7f:9b:2b:29:c7:19:8b:69:7a:
         60:db:2f:22:fb:58:0c:7a:42:e8:f4:fd:d7:73:bc:ac:cc:a2:
         f5:26:6e:0a:1e:50:94:d2:06:d3:49:75:57:92:95:5c:4d:0f:
         d3:90:44:96:5c:40:66:92:9b:ba:f6:3e:d8:7a:1e:86:48:3a:
         b3:0b:46:ce:b9:78:19:25:94:c6:e7:a2:e5:90:5a:6a:24:8f:
         ad:84:75:ea:07:8c:11:17:67:c6:88:d0:44:d2:7d:c0:44:e6:
         c2:f6:b7:61:59:e2:71:e4:48:ba:71:93:38:69:06:5a:13:01:
         d6:3d:c1:d4:5e:8c:87:ee:11:69:f0:7d:dc:30:31:6a:8d:e3:
         ee:a2:5c:81:32:84:63:8a:bc:8b:ab:e9:a4:68:08:d0:a5:61:
         e8:d1:6a:fd:71:55:4e:4e:a4:f4:3c:22:02:e7:7c:61:8f:30:
         4a:f3:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:22 2026 by rpki-client