Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          V41c/BJ3YSI+fkDP3NldVB6qCgV4kc5LLjXSpevCLTA=
Subject key identifier:   67:45:7E:81:B5:A0:13:BA:76:4F:A8:0A:69:4C:B2:3B:25:D5:7E:BB
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       0B1ABCFEBD0539AF948C6325B1FEF944278F6171
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:18 +0000
ROA not before:           Sat 04 Apr 2026 00:25:18 +0000
ROA not after:            Sat 03 Apr 2027 00:30:18 +0000
asID:                     263612
IP address blocks:        179.189.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:bc:fe:bd:05:39:af:94:8c:63:25:b1:fe:f9:44:27:8f:61:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:18 2026 GMT
            Not After : Apr  3 00:30:18 2027 GMT
        Subject: CN=67457E81B5A013BA764FA80A694CB23B25D57EBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:1d:fc:61:5a:9d:57:22:21:22:b8:b4:4f:
                    4a:07:c7:7c:67:ff:cb:07:69:58:eb:0c:33:08:43:
                    ed:c8:5e:38:96:ae:44:4d:83:ae:59:87:27:95:9f:
                    7e:69:78:50:75:bf:99:48:54:d7:67:1e:b3:74:b7:
                    12:2c:bc:68:f0:f6:18:2d:cb:2b:46:8b:87:06:88:
                    0a:93:89:b3:4b:b8:86:cf:b1:7b:88:4a:e8:c0:91:
                    99:34:e6:c9:2f:8a:42:57:97:ff:a6:0e:e6:ea:a8:
                    9d:b5:4f:7f:55:b4:34:ce:6a:4f:15:29:be:33:bc:
                    de:08:94:87:c1:79:95:17:12:60:ac:ee:49:e3:f4:
                    33:30:c4:ef:87:54:41:f3:8a:f8:f3:8e:4e:6c:b2:
                    b3:40:1d:c6:ea:c8:de:d9:bc:00:84:5b:c0:29:85:
                    4b:f4:16:3b:76:1f:06:94:96:6a:0a:b7:0d:bf:7f:
                    6e:e1:3f:fd:d0:ff:55:a0:18:42:2a:bc:cf:d8:f8:
                    ca:c2:66:5e:d3:ef:b0:14:f0:fb:78:33:72:60:c4:
                    a9:0d:19:e0:a0:07:d0:de:dd:35:76:11:05:50:52:
                    63:f1:ec:04:8d:45:d2:55:9e:91:64:c4:6b:39:e9:
                    f2:f4:aa:9a:13:ef:64:31:a7:a3:2b:59:4c:50:43:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:45:7E:81:B5:A0:13:BA:76:4F:A8:0A:69:4C:B2:3B:25:D5:7E:BB
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131322e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:0e:af:c2:21:40:0f:a8:4f:5e:02:14:ee:73:d5:50:29:
         2e:b1:e8:02:b1:0d:33:17:04:71:bf:a1:04:7a:a6:7d:20:0f:
         d7:2c:4e:fc:a3:d9:68:b8:81:b6:e3:8a:05:1a:29:f7:b6:02:
         75:c8:4a:78:4b:dc:e4:40:9d:56:58:7b:96:f0:4b:a6:7c:ac:
         e2:4d:69:96:d6:2c:f8:cd:68:60:e8:6a:11:58:77:ba:9b:83:
         f1:c7:c1:18:dd:42:ef:7e:79:66:1a:c1:e3:b5:5c:1e:fd:45:
         27:01:a6:8d:bc:4f:b4:69:13:d4:51:f9:06:cd:6d:f9:c3:20:
         40:50:66:68:07:d5:e1:f9:c9:a1:1e:80:63:08:16:1b:a2:71:
         07:9a:d0:c6:9a:82:88:48:fe:51:39:04:f3:83:cd:6d:ba:0b:
         40:45:b0:1b:a1:3b:05:9f:58:51:7a:98:18:53:f9:aa:11:f8:
         de:5d:69:00:87:76:e7:7b:dc:f1:32:e3:37:9d:3e:14:11:cd:
         18:a7:6f:ad:4e:55:96:7f:2f:20:6a:83:eb:25:01:5c:2d:12:
         e3:1c:8c:41:45:a1:d3:23:18:21:33:af:15:23:07:78:d4:fe:
         7a:ef:bf:78:75:45:ba:c3:5d:dd:4d:da:ec:80:71:d5:ac:57:
         ab:ce:c2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:43:26 2026 by rpki-client