Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          SPZx7pyNqjvEkQcxvVWgGNwhe+P9v0vPQfLaPnNwtcA=
Subject key identifier:   1E:78:9C:66:71:34:B8:B9:E6:99:EB:20:38:95:5E:D5:45:56:D1:4E
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       7A37629DAAC1817756BDA620741B21A1F4A6BAEF
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:10 +0000
ROA not before:           Tue 19 May 2026 12:33:10 +0000
ROA not after:            Tue 18 May 2027 12:38:10 +0000
asID:                     263641
IP address blocks:        179.127.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:62:9d:aa:c1:81:77:56:bd:a6:20:74:1b:21:a1:f4:a6:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:10 2026 GMT
            Not After : May 18 12:38:10 2027 GMT
        Subject: CN=1E789C667134B8B9E699EB2038955ED54556D14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:7e:5c:b5:cf:04:7c:01:7e:d8:b9:8c:99:
                    2f:d7:d5:53:a4:6d:4b:a3:e0:a4:56:a5:1e:49:a1:
                    e7:d6:e7:c0:bf:c3:db:f0:05:87:04:17:62:26:e0:
                    be:99:3f:67:57:06:de:d2:62:8f:e2:00:dc:5a:b1:
                    7e:6f:8f:3a:82:64:74:5e:2c:4e:53:1a:14:a4:ed:
                    c1:3f:0e:dc:5f:4e:e8:76:86:e0:4a:b8:1f:7f:12:
                    46:f5:b8:40:60:1d:75:d2:1b:e3:b4:a6:09:16:02:
                    b8:99:30:ac:7b:c1:09:69:7b:69:79:9a:59:7a:ee:
                    63:a7:d1:75:4d:da:52:fd:26:ef:24:f8:d8:b1:f6:
                    9b:5c:e3:fb:e9:29:d3:43:94:b1:07:d9:67:a6:91:
                    bf:61:70:11:dd:d2:40:23:30:d8:54:7f:0b:5c:9f:
                    2a:94:a4:26:fa:f2:71:1c:cd:5d:0f:fb:62:e0:e2:
                    9d:2a:c1:10:4a:ed:0a:51:e2:95:1d:dc:c7:64:89:
                    12:8e:73:03:50:9b:12:d6:57:eb:d5:81:b9:95:55:
                    c0:53:82:03:56:6c:24:2a:19:26:90:3b:8c:94:2a:
                    d9:85:2f:66:cf:3b:72:48:ee:85:7a:0a:b4:ef:fb:
                    3b:91:bf:dd:8b:0b:cb:70:92:fd:02:3b:c7:4c:e9:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:78:9C:66:71:34:B8:B9:E6:99:EB:20:38:95:5E:D5:45:56:D1:4E
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d4:a5:85:86:f0:03:29:77:83:65:c1:63:c9:28:2d:69:ea:
         2a:d0:5b:f5:80:0a:30:43:60:98:60:90:c6:fb:8d:6f:7b:60:
         e7:5e:3c:6e:da:9b:4f:c1:87:6c:28:a3:e6:90:3d:15:83:27:
         08:10:b4:83:0e:42:3a:30:23:77:27:d4:8d:96:f7:17:50:e0:
         2a:ab:81:47:56:8b:1f:1f:d5:50:b3:0a:ba:b5:ff:45:15:80:
         ed:2b:1e:25:7f:f2:1c:48:98:c9:78:ea:2e:51:66:5b:f8:0d:
         d7:9b:c2:59:2d:f6:39:1d:24:d0:f1:41:b6:80:a4:15:5d:af:
         6b:f9:0e:15:c7:66:3d:11:6f:21:6a:82:1f:03:94:1f:1a:b4:
         e3:de:a6:f0:bc:82:ae:d4:5f:72:6b:b5:5d:5e:f5:1c:fd:e8:
         d1:68:39:d0:ff:86:d3:d4:0b:c6:f2:81:52:94:6d:79:a3:40:
         d1:e5:0a:9f:b5:97:af:a4:3a:7d:a0:56:65:3c:a1:2b:f6:26:
         8c:0a:f4:d1:4c:c3:75:80:c5:61:4c:4a:27:f5:71:5e:98:cd:
         87:e0:52:80:d0:40:57:af:60:d5:56:db:85:77:5f:74:7b:48:
         a6:a9:3f:e8:71:67:ea:a8:29:a2:b3:08:39:99:62:bf:2d:ba:
         01:1a:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:14 2026 by rpki-client