Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          KKdrLTD7Ek1UE+xN7Fxx5xnDd8kj0LEEzvyNKUzRB+o=
Subject key identifier:   E0:21:BD:CB:D7:CB:0A:D5:7F:19:52:EF:62:E3:0B:12:31:01:68:9C
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       4D65A2D84A3EABFF0A119B75D1A145DD806C8D9E
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:27 +0000
ROA not before:           Sat 04 Apr 2026 00:25:27 +0000
ROA not after:            Sat 03 Apr 2027 00:30:27 +0000
asID:                     263612
IP address blocks:        179.124.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:a2:d8:4a:3e:ab:ff:0a:11:9b:75:d1:a1:45:dd:80:6c:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:27 2026 GMT
            Not After : Apr  3 00:30:27 2027 GMT
        Subject: CN=E021BDCBD7CB0AD57F1952EF62E30B123101689C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:04:c8:84:0d:69:8e:55:92:96:27:cf:da:
                    c3:a0:fd:bc:45:6c:40:e3:cb:4a:e2:77:30:b3:7e:
                    53:d2:df:cf:fc:71:73:72:b8:f4:a9:b3:0d:8d:ca:
                    99:e2:fb:ae:d8:80:cb:ed:7e:5c:68:3e:ed:2d:9d:
                    c8:11:15:7c:52:31:c3:46:cd:54:6a:d6:c5:d4:b6:
                    76:99:ec:51:95:59:24:e5:7d:e7:15:a6:1d:e6:8d:
                    7d:8c:2f:3d:fd:c8:63:ca:15:a3:ef:19:5e:4f:2e:
                    58:be:5c:95:ff:fd:4f:4a:2b:f0:a6:fd:47:6e:ef:
                    d3:12:9f:01:48:77:d3:76:e4:9d:66:80:5d:68:03:
                    7e:29:87:6d:64:ea:9e:bc:de:a1:6e:65:48:51:04:
                    4a:60:53:b1:1b:da:a0:46:79:4c:63:e6:ce:c7:b8:
                    1c:38:45:82:26:63:37:be:d5:73:08:fd:82:22:e9:
                    82:52:09:4c:7f:07:af:a2:ae:5e:3b:c9:4a:86:1d:
                    59:0b:31:34:88:b5:0f:82:33:7a:bd:92:ce:4f:ba:
                    c2:c7:5f:ea:76:5e:5e:e3:ad:82:4f:41:3f:22:96:
                    32:b5:17:72:fb:bb:da:80:ef:a7:ae:2c:a7:b6:6e:
                    6e:a4:99:33:a8:22:d2:58:86:39:2a:5d:35:2e:e3:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:BD:CB:D7:CB:0A:D5:7F:19:52:EF:62:E3:0B:12:31:01:68:9C
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7f:21:01:65:00:2c:e2:6d:f1:12:9a:ce:57:b1:b8:f8:20:
         66:15:90:4c:2e:3e:2c:d6:6e:8b:bc:93:55:e3:97:46:7a:59:
         c0:b7:d4:34:2a:87:8d:a6:74:a9:cc:64:4d:ca:fa:6c:3f:6e:
         32:fd:bf:7c:14:b9:94:f2:9b:cf:ce:1d:99:ab:98:2e:e6:80:
         0c:da:b8:20:b9:a1:f2:f9:d8:26:e6:48:db:6b:18:ad:2c:e3:
         c5:d8:70:05:ca:fa:d4:30:77:b9:f9:c9:64:eb:0d:63:d2:60:
         74:eb:e8:a5:62:93:7e:ab:74:b8:8a:01:61:73:f4:00:21:38:
         4f:db:2a:b6:24:e8:5d:c7:04:a5:37:23:27:68:be:dd:ea:8b:
         ca:c5:2c:1e:9a:f2:85:03:53:a3:f0:76:60:0a:d6:33:cb:e8:
         52:76:af:a4:07:6b:37:f9:16:cf:06:fe:b5:7d:73:43:18:f6:
         67:f4:fb:e7:5f:50:51:a1:1d:44:27:7e:56:8c:2f:33:55:e4:
         fc:fa:3c:fa:18:46:39:d0:e5:13:2a:9f:ad:fc:2e:36:49:3d:
         94:d9:a7:09:82:cb:c3:57:6d:96:af:7b:e3:84:0b:a8:dc:9a:
         82:01:a2:78:da:93:af:77:53:d5:2d:64:ca:39:e4:1f:58:ff:
         10:3f:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:38:00 2026 by rpki-client