Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          CHdoLtejAnW0zpRTwhoDzy9f5H3figNcnxaznlmExUk=
Subject key identifier:   37:BB:B4:1C:2D:0C:67:40:4C:B8:6F:3A:97:DC:03:BD:92:61:5E:05
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       44BCCABE579D0498C789EE079C371E43374A0CAB
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:18 +0000
ROA not before:           Sat 04 Apr 2026 00:25:18 +0000
ROA not after:            Sat 03 Apr 2027 00:30:18 +0000
asID:                     263612
IP address blocks:        179.124.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bc:ca:be:57:9d:04:98:c7:89:ee:07:9c:37:1e:43:37:4a:0c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:18 2026 GMT
            Not After : Apr  3 00:30:18 2027 GMT
        Subject: CN=37BBB41C2D0C67404CB86F3A97DC03BD92615E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dd:68:f0:92:65:86:b7:2c:80:87:85:9f:94:
                    1b:23:c7:81:c8:bb:6e:1f:04:3a:7b:50:b1:a9:1a:
                    aa:0d:6d:4e:8a:81:ae:35:5a:cf:f4:3e:e8:66:f6:
                    90:ad:2e:fd:fb:e9:4d:b7:27:5b:8a:f4:d2:69:91:
                    4f:8b:85:92:06:b7:19:e6:31:86:14:dd:64:fc:1b:
                    8b:6b:ea:3e:5d:92:4d:0f:64:3e:0f:24:0a:11:99:
                    9f:e2:39:4a:d4:76:0c:d8:8a:d5:e9:47:b8:e8:1a:
                    e4:df:6d:2e:ff:c0:00:42:ee:58:de:6d:c0:a0:ec:
                    1c:39:fd:7f:ec:92:bc:b6:3a:7a:e3:e2:aa:10:1b:
                    1b:43:a6:d6:d3:10:61:81:ec:a8:71:44:ea:53:47:
                    cb:85:10:92:e4:ea:8c:28:93:2c:55:64:86:97:a5:
                    aa:7f:ad:08:66:68:4a:42:c6:e4:e4:86:c8:9d:5d:
                    4e:c2:0b:ce:41:c1:9c:b3:16:f2:14:69:25:61:e3:
                    67:79:32:05:2f:61:9a:1f:c7:e3:20:c4:a9:c6:d8:
                    2d:68:68:7b:08:c2:4c:71:b5:a7:f6:2d:62:5f:09:
                    7f:ef:f3:fa:02:46:31:b0:f6:06:4b:ee:70:6e:1a:
                    dd:e2:38:c1:2c:b7:b9:90:41:6a:90:63:59:ef:96:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BB:B4:1C:2D:0C:67:40:4C:B8:6F:3A:97:DC:03:BD:92:61:5E:05
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3133312e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c1:27:a1:5c:cf:9a:c3:a4:32:95:70:f0:33:6a:8a:f1:17:
         77:c2:16:14:33:b9:89:43:8e:f2:70:83:d6:2d:93:16:9d:f7:
         a1:ff:39:1c:e2:8a:51:0b:ad:0c:c7:07:f4:8d:f7:fe:17:63:
         66:00:03:95:dc:58:e0:f2:5a:4b:70:5e:0b:34:0f:5e:ca:74:
         79:26:c2:16:13:08:3a:93:02:7e:88:04:90:0c:53:60:45:04:
         a9:e2:9a:02:6c:53:24:4d:5f:df:78:cc:ee:e3:4b:aa:e9:3b:
         ce:2d:8b:a4:6f:65:11:c8:6c:58:57:d5:e0:bf:12:28:e3:9c:
         1f:78:b3:58:1b:14:ce:e0:40:8b:39:39:88:80:f6:d8:38:72:
         5e:43:50:e5:df:70:c9:86:82:c3:ae:ff:53:77:c2:95:da:6b:
         3f:4f:7f:42:88:12:ef:1f:82:59:3b:c0:81:ed:18:dc:34:00:
         db:4e:6e:65:5f:d2:85:ca:25:88:c6:12:72:b6:80:59:cd:d5:
         d5:5e:18:1c:c4:c7:4e:b3:17:92:32:d1:f4:ed:0e:48:27:cc:
         d1:f5:45:69:99:ef:0f:c5:b5:89:b5:a9:f9:13:fa:45:26:a0:
         d9:df:2f:3e:38:07:62:b8:6f:f3:73:1d:ad:1d:89:e2:2c:03:
         9b:b6:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:38:01 2026 by rpki-client