Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          ZyXqg4T1AEBsVhdThlhoc7ADm/qT3YWRrinAz9LcW4I=
Subject key identifier:   04:8C:50:54:2D:F2:57:5C:51:3E:3D:65:07:1F:E4:10:92:11:B1:67
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       0E7762F5D52036AF2EBD7344D83ADAEC20C67B80
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:22 +0000
ROA not before:           Sat 04 Apr 2026 00:25:22 +0000
ROA not after:            Sat 03 Apr 2027 00:30:22 +0000
asID:                     263612
IP address blocks:        179.189.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:77:62:f5:d5:20:36:af:2e:bd:73:44:d8:3a:da:ec:20:c6:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:22 2026 GMT
            Not After : Apr  3 00:30:22 2027 GMT
        Subject: CN=048C50542DF2575C513E3D65071FE4109211B167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f7:45:2c:fa:4a:49:c6:8d:cd:bc:f2:7a:75:
                    97:91:01:d0:d0:4f:55:80:f2:78:08:e0:50:e0:5b:
                    55:3a:9a:a0:df:ed:e8:c8:1c:87:1f:6b:71:e8:cf:
                    f1:53:a8:9f:48:16:a6:c7:ce:01:92:b1:0d:55:b9:
                    02:5a:01:33:89:5a:7b:5f:17:1e:c6:8b:43:5d:26:
                    a7:84:3a:3b:91:1c:94:fb:1d:0a:bd:34:54:9c:a1:
                    06:05:ba:6d:5f:cd:be:44:71:33:ec:af:35:12:92:
                    7c:f1:69:fd:c6:ca:44:03:05:3c:12:b5:52:72:83:
                    42:42:09:b0:fd:02:c8:af:1f:46:6a:6d:bb:0e:7f:
                    b6:9e:e6:12:57:1c:fc:30:59:cc:9e:3d:1f:f1:2f:
                    dd:8c:b5:7a:92:f7:1a:81:fb:6b:02:99:81:0d:61:
                    7f:33:c8:fb:bb:71:f5:f1:3e:68:23:a4:d6:80:e8:
                    95:a7:74:d9:b5:64:64:8c:1f:9b:f5:9a:b2:a3:85:
                    28:ae:90:8f:e6:0e:f1:2b:49:52:10:02:b7:3c:72:
                    30:a7:32:88:c3:51:96:24:34:7d:50:e3:44:ad:59:
                    ec:50:53:23:51:d7:1e:3b:0e:0d:e0:4a:af:e0:19:
                    4d:40:d9:ea:bb:e2:8c:d1:c6:6a:b5:e3:29:09:a0:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8C:50:54:2D:F2:57:5C:51:3E:3D:65:07:1F:E4:10:92:11:B1:67
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3131342e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:ef:5c:c0:89:af:0b:a4:df:6c:eb:dc:10:e5:4c:dd:aa:a0:
         e7:6f:21:49:6c:f3:f5:19:d9:5b:9e:ba:d8:0f:55:c6:fa:24:
         69:a9:8b:0b:e5:4c:e7:11:a2:67:5e:4a:10:c8:9b:c7:9b:38:
         80:35:75:b4:d6:8f:13:bb:be:e3:69:b8:5b:35:1c:47:36:53:
         7c:ea:54:3a:05:66:a9:c7:57:f7:4c:d4:ad:71:22:5b:5e:82:
         4a:08:bc:52:8c:13:24:32:3b:94:1d:b9:4e:90:3b:ea:d2:2a:
         d8:da:11:2d:51:a4:be:c4:7e:0e:16:ed:3c:23:e1:4e:c9:a0:
         49:51:c5:05:18:e7:08:9c:85:8a:ca:c3:f8:94:26:0c:5c:91:
         02:9f:aa:a8:64:5e:89:b8:78:1b:0d:c7:14:8f:84:35:c4:04:
         9e:87:e9:f9:78:86:e7:b7:68:b2:89:89:39:ea:4e:1c:1e:a0:
         9d:52:46:8e:23:52:1a:20:d8:c1:81:75:29:71:1f:c2:12:81:
         aa:56:ad:99:7b:75:c5:ff:5d:3b:f8:95:21:52:f3:75:4c:97:
         d7:f3:ac:4b:46:ad:45:56:35:e5:2f:d1:a7:50:c6:63:c8:44:
         25:8b:86:90:f8:45:52:37:a7:c7:8c:df:9d:07:b0:1b:8f:8a:
         ba:14:3a:c9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDndi9dUgNq8uvXNE2Dra7CDGe4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QkUzRENBRTJFRUI0ODk1Q0YxNjRFMURDM0JCQTM2
MDIzQTlBMTAeFw0yNjA0MDQwMDI1MjJaFw0yNzA0MDMwMDMwMjJaMDMxMTAvBgNV
BAMTKDA0OEM1MDU0MkRGMjU3NUM1MTNFM0Q2NTA3MUZFNDEwOTIxMUIxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk90Us+kpJxo3NvPJ6dZeRAdDQ
T1WA8ngI4FDgW1U6mqDf7ejIHIcfa3Hoz/FTqJ9IFqbHzgGSsQ1VuQJaATOJWntf
Fx7Gi0NdJqeEOjuRHJT7HQq9NFScoQYFum1fzb5EcTPsrzUSknzxaf3GykQDBTwS
tVJyg0JCCbD9AsivH0ZqbbsOf7ae5hJXHPwwWcyePR/xL92MtXqS9xqB+2sCmYEN
YX8zyPu7cfXxPmgjpNaA6JWndNm1ZGSMH5v1mrKjhSiukI/mDvErSVIQArc8cjCn
MojDUZYkNH1Q40StWexQUyNR1x47Dg3gSq/gGU1A2eq74ozRxmq14ykJoNm1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBIxQVC3yV1xRPj1lBx/kEJIRsWcwHwYDVR0j
BBgwFoAU54vj3K4u60iVzxZOHcO7o2AjqaEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHF4ZWFYd3htdlRkckJ3MkZVaDI1TTc5OEdTMkdzRVY2Z1JIYzZRZDI0
WEMvMC9FNzhCRTNEQ0FFMkVFQjQ4OTVDRjE2NEUxREMzQkJBMzYwMjNBOUExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3OEJFM0RDQUUyRUVCNDg5
NUNGMTY0RTFEQzNCQkEzNjAyM0E5QTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxeGVhWHd4bXZUZHJCdzJGVWgyNU03OThHUzJHc0VWNmdSSGM2UWQyNFhDLzAv
MzEzNzM5MmUzMTM4MzkyZTMxMzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALO9cjANBgkqhkiG9w0BAQsFAAOCAQEApO9c
wImvC6TfbOvcEOVM3aqg528hSWzz9RnZW5662A9VxvokaamLC+VM5xGiZ15KEMib
x5s4gDV1tNaPE7u+42m4WzUcRzZTfOpUOgVmqcdX90zUrXEiW16CSgi8UowTJDI7
lB25TpA76tIq2NoRLVGkvsR+DhbtPCPhTsmgSVHFBRjnCJyFisrD+JQmDFyRAp+q
qGReibh4Gw3HFI+ENcQEnofp+XiG57dosomJOepOHB6gnVJGjiNSGiDYwYF1KXEf
whKBqlatmXt1xf9dO/iVIVLzdUyX1/OsS0atRVY15S/Rp1DGY8hEJYuGkPhFUjen
x4zfnQewG4+KuhQ6yQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:38:45 2026 by rpki-client