Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa
File:                     3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa (raw, json)
Hash identifier:          0yOvmIq1fKScFtbT8j9YAjqXw5TfTQl3OG5HVu9tAKU=
Subject key identifier:   48:57:6E:DF:2E:BF:10:B0:4D:A6:32:36:1F:97:D5:CD:5B:71:8B:3F
Certificate issuer:       /CN=A588F6E4897B212F8D1AF153AFB170856EFC516A
Certificate serial:       37BD521848C86B35955B317F19058378FE983518
Authority key identifier: A5:88:F6:E4:89:7B:21:2F:8D:1A:F1:53:AF:B1:70:85:6E:FC:51:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa
Signing time:             Sat 28 Mar 2026 14:23:28 +0000
ROA not before:           Sat 28 Mar 2026 14:18:28 +0000
ROA not after:            Sat 27 Mar 2027 14:23:28 +0000
asID:                     271149
IP address blocks:        179.42.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.crl
                          rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 16:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bd:52:18:48:c8:6b:35:95:5b:31:7f:19:05:83:78:fe:98:35:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A588F6E4897B212F8D1AF153AFB170856EFC516A
        Validity
            Not Before: Mar 28 14:18:28 2026 GMT
            Not After : Mar 27 14:23:28 2027 GMT
        Subject: CN=48576EDF2EBF10B04DA632361F97D5CD5B718B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2c:59:72:95:c7:f9:6c:bd:ef:44:85:d1:ef:
                    ff:71:59:b8:a3:8a:aa:18:73:c3:a3:41:7e:4a:e1:
                    fd:b8:14:dc:f1:d8:ba:0e:52:f5:27:ec:64:43:58:
                    a9:19:77:a5:b5:e2:e8:23:94:3e:8b:a3:09:d9:a3:
                    64:28:18:26:57:a1:8d:96:ba:27:64:c8:9f:99:1b:
                    56:d3:05:99:8d:30:fe:ae:cb:5d:a9:89:28:e5:82:
                    8f:47:9d:63:46:3c:0b:7b:26:e1:0a:ec:01:55:c7:
                    2b:30:b7:d6:07:ab:52:83:44:88:f5:33:74:3d:1e:
                    e3:43:f7:0f:bb:65:a9:bd:5c:ab:82:4f:dc:a9:ac:
                    27:2b:c3:a3:d4:ce:f8:74:9b:1c:97:84:be:f4:b7:
                    b2:f9:09:58:d2:0f:f9:90:6c:56:69:4f:ac:1f:7b:
                    36:92:7f:da:9c:3b:59:e7:c4:dc:70:e0:d1:bf:6b:
                    cb:85:e2:cc:c8:5f:e7:c3:b2:b3:a5:5f:40:0d:c1:
                    8f:91:d3:92:f9:d8:94:cd:dd:17:53:47:7e:45:08:
                    dc:17:f8:2a:a8:74:a7:17:88:a8:e8:71:81:d1:9f:
                    c7:09:33:24:80:f4:2a:88:53:1b:06:98:75:0c:6a:
                    e1:92:77:28:0a:45:f9:53:d0:b1:47:3f:88:e2:0b:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:57:6E:DF:2E:BF:10:B0:4D:A6:32:36:1F:97:D5:CD:5B:71:8B:3F
            X509v3 Authority Key Identifier:
                keyid:A5:88:F6:E4:89:7B:21:2F:8D:1A:F1:53:AF:B1:70:85:6E:FC:51:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/A588F6E4897B212F8D1AF153AFB170856EFC516A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A588F6E4897B212F8D1AF153AFB170856EFC516A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9F82Wnnn9DBk41hG8QJ6KNpKYqhRz96paVqpDHH2dop/0/3137392e34322e3131322e302f32322d3332203d3e20323731313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:d9:d4:89:e8:a5:e0:f7:d5:e8:b9:68:de:ae:ca:21:9f:18:
         9d:df:17:9d:ab:c7:c3:5f:38:14:24:b4:89:bf:5a:90:a1:59:
         eb:55:8a:f3:5e:b8:c5:b1:19:d2:f2:7b:79:c3:2b:68:85:d9:
         d2:be:9d:7c:f7:36:4a:dc:de:6b:74:21:b9:7c:6d:bc:bd:56:
         87:4e:ea:54:1b:fa:95:cf:ba:a8:a5:30:a6:d1:dc:27:52:1e:
         74:db:ae:bc:be:ae:9d:c1:fb:02:f4:54:af:9d:55:0e:41:54:
         ea:06:8e:24:08:9c:6a:87:d7:5d:a5:39:95:ea:61:7c:88:fe:
         e4:7e:b0:7c:c9:95:77:51:c2:fa:58:cb:21:dc:89:b3:7e:90:
         5c:89:32:74:45:2d:2e:2b:06:ef:5f:37:3a:fe:3d:df:be:58:
         7c:68:bc:c9:0a:c1:2f:03:2c:14:d5:8d:8d:3e:5f:4d:4b:72:
         32:c7:f2:d4:08:f5:fb:5d:d5:81:dc:f9:39:22:a0:ca:05:36:
         af:a4:e4:77:cc:e4:c6:82:39:05:ac:89:ef:47:7a:f5:7e:d8:
         58:81:67:ff:1a:ba:8c:d9:3f:1f:aa:20:b8:3f:cc:1a:6d:31:
         cd:b5:ec:4b:93:ce:4d:7d:25:cd:82:f0:e6:32:69:7e:c2:a4:
         74:fe:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:44:27 2026 by rpki-client