Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131332e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131332e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          k0SVXQwwkWW5r4XMXU+5Icwm+xTkFeJBdc2BJ7sxbgY=
Subject key identifier:   39:81:40:69:06:FC:A1:CD:CD:87:07:EC:6C:D5:B1:30:60:87:FE:E7
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       63CCD6FEA19CCA9190CD4D691F01AD2AB4E5AE5B
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131332e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:25 +0000
ROA not before:           Sat 04 Apr 2026 00:25:25 +0000
ROA not after:            Sat 03 Apr 2027 00:30:25 +0000
asID:                     263612
IP address blocks:        179.189.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:d6:fe:a1:9c:ca:91:90:cd:4d:69:1f:01:ad:2a:b4:e5:ae:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:25 2026 GMT
            Not After : Apr  3 00:30:25 2027 GMT
        Subject: CN=3981406906FCA1CDCD8707EC6CD5B1306087FEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:17:3b:a5:0c:2b:1b:ef:92:b5:b2:d1:c4:
                    c3:c8:a8:20:0c:68:06:f7:21:eb:52:f7:5f:50:32:
                    ab:2e:36:6b:f7:a1:bb:22:b5:65:ad:8b:ad:ad:d4:
                    11:a3:a1:6d:1b:e7:8d:c1:63:db:2f:fb:c8:76:37:
                    9f:0d:7b:d4:4f:ac:b9:b5:ff:02:dd:a3:0c:4d:49:
                    45:e6:26:df:eb:8e:9f:a1:09:9d:05:27:fa:80:27:
                    a2:ca:02:e8:72:ad:88:e1:b1:77:2a:13:3e:1d:72:
                    7e:fe:90:cb:e8:5d:04:4c:42:6e:88:db:93:48:2d:
                    40:cb:50:ad:75:06:4e:ae:cf:33:a5:6a:98:46:46:
                    84:ee:43:94:94:5b:1d:ce:a4:8f:17:3a:07:78:e4:
                    e3:17:79:e3:d4:af:9a:89:cc:f6:c5:40:a5:24:db:
                    88:b2:b1:ca:ff:ff:51:ab:03:4a:1e:26:71:31:9c:
                    7a:1c:ed:31:e6:02:e1:7e:47:3e:0c:06:d1:f9:86:
                    61:c3:5b:e8:f6:fa:04:60:cf:d4:a8:30:41:34:ea:
                    c8:73:7f:8d:61:e3:72:1c:8f:3c:a8:05:29:fd:cb:
                    ec:c5:6f:32:ca:71:b8:9e:b6:b1:23:85:41:76:70:
                    15:d7:41:1c:8d:31:1d:ae:a8:39:1e:29:3e:ba:e2:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:81:40:69:06:FC:A1:CD:CD:87:07:EC:6C:D5:B1:30:60:87:FE:E7
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131332e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:9b:02:b3:0c:81:d8:08:ff:d2:b5:50:56:98:0a:d6:cc:71:
         67:5a:d3:8f:a7:bf:ff:62:8c:e2:92:88:d0:0e:40:c1:84:9e:
         2b:a1:b1:a7:0e:be:3a:d2:da:d1:45:c7:c6:21:91:fb:35:1b:
         d5:89:b4:f8:54:99:2e:0f:eb:f7:cb:3d:df:01:0e:99:95:49:
         6c:7a:59:56:72:4f:db:19:10:9a:69:38:55:8f:e0:f8:f0:7f:
         40:e2:77:30:ea:0e:d7:6a:e1:fd:ab:00:05:37:b1:a8:19:42:
         e7:e9:03:68:89:42:22:51:9b:9c:7f:27:d1:97:25:a9:97:be:
         43:df:00:17:13:d8:63:55:2c:71:60:33:ce:33:fe:00:b5:ee:
         bc:c3:37:3d:d2:2a:59:ac:dd:96:4f:96:6e:16:2f:ac:c5:39:
         41:1c:d9:ab:e7:f9:1c:8a:a0:cf:cf:dc:f4:03:aa:c6:4f:0e:
         2e:99:72:f9:73:8f:af:a6:f4:a6:62:4c:8e:b6:fc:80:6e:bd:
         d3:53:11:be:81:01:c5:64:c9:f8:64:ae:12:d8:de:01:db:6d:
         d5:cf:5b:92:fe:fb:13:0f:83:e7:b9:95:70:95:02:fb:b7:df:
         a3:29:51:d4:4c:1e:48:03:fe:c3:81:ca:e4:dc:f5:69:10:fb:
         0c:70:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:51 2026 by rpki-client