Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa
File:                     3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa (raw, json)
Hash identifier:          DsozdbR4RGcqtElLKs6sOKnDYPI7nEZYcOCVXPyOXSw=
Subject key identifier:   9B:39:87:82:90:48:AA:36:32:7A:3A:D5:65:22:C9:72:6C:72:34:00
Certificate issuer:       /CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
Certificate serial:       63914B85D25FEC2DF7F16A6D10F007CEC2C206F9
Authority key identifier: B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa
Signing time:             Sat 04 Apr 2026 17:01:32 +0000
ROA not before:           Sat 04 Apr 2026 16:56:32 +0000
ROA not after:            Sat 03 Apr 2027 17:01:32 +0000
asID:                     271207
IP address blocks:        179.42.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl
                          rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:52:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:91:4b:85:d2:5f:ec:2d:f7:f1:6a:6d:10:f0:07:ce:c2:c2:06:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6B7C8107519DEE2DC60235DD84006DC63EB80FE
        Validity
            Not Before: Apr  4 16:56:32 2026 GMT
            Not After : Apr  3 17:01:32 2027 GMT
        Subject: CN=9B3987829048AA36327A3AD56522C9726C723400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:f4:00:b1:08:30:a0:10:d2:c9:39:ae:88:
                    17:6a:0b:0d:31:da:e4:5f:16:20:be:f5:c1:f4:1e:
                    cb:c6:b7:19:7f:40:57:56:35:50:2b:a0:a7:46:aa:
                    ce:8c:4c:f0:48:66:fb:d8:cc:63:0a:e8:cf:e0:40:
                    69:fd:88:48:49:54:57:41:51:d0:b4:5f:2c:2d:93:
                    0c:81:89:4b:fa:36:e2:d1:6d:ce:77:f6:58:77:9f:
                    6b:ab:90:0b:e5:32:68:62:e2:c8:cc:f2:98:bc:51:
                    76:a2:f2:8c:cb:aa:99:83:56:73:3c:f4:01:8a:2a:
                    42:7d:16:29:6a:f5:bb:d7:87:18:f6:6c:de:5a:45:
                    81:6e:0e:d2:90:29:33:9f:46:68:65:06:9a:41:9a:
                    99:65:ab:ad:ed:4a:fc:25:34:78:9a:24:4f:29:d0:
                    18:97:48:1d:02:0e:a9:9b:dd:92:7a:b9:4c:00:1e:
                    1b:61:1e:0b:1d:78:27:b9:08:22:63:4f:7e:92:a1:
                    50:ce:cb:a6:62:df:00:db:8f:99:0d:ed:b1:1c:cb:
                    fb:47:e5:a9:22:cc:4f:c5:77:af:70:23:25:cf:4e:
                    78:c6:78:73:7e:7e:e1:64:40:96:36:27:67:4d:2f:
                    67:e1:29:3a:46:0c:75:89:58:59:6a:ea:6f:6c:4b:
                    20:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:39:87:82:90:48:AA:36:32:7A:3A:D5:65:22:C9:72:6C:72:34:00
            X509v3 Authority Key Identifier:
                keyid:B6:B7:C8:10:75:19:DE:E2:DC:60:23:5D:D8:40:06:DC:63:EB:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6B7C8107519DEE2DC60235DD84006DC63EB80FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cm9eve9LZxzpD4bwZXbQ4bZfFYAcPzkZSV7gq4uDzxw6/0/3137392e34322e3133392e302f32342d3234203d3e20323731323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0b:19:d3:3f:43:bc:c4:2b:5a:54:f5:06:63:6c:66:e4:d8:
         de:8a:6f:55:f3:64:0e:d0:8d:bd:62:a1:19:7d:08:24:19:82:
         52:47:c6:ac:5f:e8:46:f3:21:d3:cc:7d:b1:4c:1e:ff:f7:ed:
         4c:fe:c4:fc:5b:f0:16:72:f3:51:6f:f0:20:80:a2:9d:00:dc:
         cb:5f:dd:53:1e:56:8d:07:8f:b5:48:70:2c:34:d5:c8:d2:5b:
         69:3f:34:35:6c:e1:c0:07:fd:1c:80:1f:b9:ea:48:b2:e9:26:
         c1:a1:fb:8e:84:da:9f:d6:4f:83:12:0b:98:b0:55:90:41:58:
         4e:81:b4:76:b2:89:55:20:7c:37:23:fa:f4:bd:ee:66:ea:e8:
         96:9d:ae:8f:c2:02:be:74:f2:e7:30:9d:f8:7f:15:71:95:00:
         3e:68:9e:3f:dc:ad:23:e4:d4:de:db:0b:15:2d:2a:a7:69:26:
         43:50:95:c1:0a:42:94:4b:f5:d6:11:82:65:b8:98:0f:53:36:
         4d:eb:b6:9c:ae:dc:39:25:4d:fe:7a:75:2a:de:98:bf:51:4a:
         e0:08:d4:d5:3a:2a:41:4d:ad:5b:5b:dd:f4:e5:1d:ce:55:7d:
         b9:d8:aa:2a:56:51:6c:6a:dc:08:10:4d:e4:20:80:90:60:26:
         8f:21:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:52:06 2026 by rpki-client