Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          Zo5Jtdzm6XHoKuNx9YWyixVB68DvcnhdbTz/KLx77dA=
Subject key identifier:   FE:6E:90:F6:BC:E7:EB:DE:79:93:D7:0E:8C:62:99:E3:6D:A9:D7:BF
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       566DDCB967244EF71DD51243CF1A6AD75842C3EA
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:24 +0000
ROA not before:           Sat 04 Apr 2026 00:25:24 +0000
ROA not after:            Sat 03 Apr 2027 00:30:24 +0000
asID:                     263612
IP address blocks:        179.189.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:dc:b9:67:24:4e:f7:1d:d5:12:43:cf:1a:6a:d7:58:42:c3:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:24 2026 GMT
            Not After : Apr  3 00:30:24 2027 GMT
        Subject: CN=FE6E90F6BCE7EBDE7993D70E8C6299E36DA9D7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:c2:66:45:ce:40:46:1f:aa:a7:fd:22:d5:
                    b9:24:5a:37:30:62:35:47:ed:f0:1e:af:90:e9:65:
                    9b:27:99:8c:c3:e7:1b:b1:c5:c0:44:80:47:ed:50:
                    81:53:9a:7a:43:31:1a:6b:9c:dc:43:79:12:10:57:
                    bc:f2:2d:7b:f3:13:2e:82:e3:52:3a:0a:e4:7b:21:
                    9b:28:4e:da:d2:7a:45:b9:a7:95:2a:79:59:f4:fe:
                    46:bf:94:fa:08:4e:84:51:4c:5f:d9:2e:06:9b:53:
                    94:f1:66:ea:17:5a:6d:a1:4d:ee:55:01:47:26:1c:
                    82:83:85:92:b2:af:c0:13:7b:47:f0:85:dc:8c:e6:
                    e8:e4:b9:48:f5:e3:36:f4:2c:9c:7f:bd:b5:44:4c:
                    ee:4d:80:bf:c4:ab:ed:a3:e2:0d:03:00:41:14:be:
                    f5:99:c0:af:cb:78:3e:11:f3:41:d6:c3:b8:00:47:
                    ab:e1:69:fc:86:ee:c5:8e:b1:94:03:39:5a:73:d7:
                    24:80:47:a4:c5:41:30:74:73:21:36:ac:b5:dc:74:
                    f2:ea:ea:d1:14:d0:0c:71:93:3f:e9:e5:38:28:bf:
                    43:03:41:53:f1:45:9f:25:36:54:e2:2e:c5:01:f7:
                    c3:94:da:3b:2e:32:7f:5e:13:ed:b5:95:17:5e:92:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6E:90:F6:BC:E7:EB:DE:79:93:D7:0E:8C:62:99:E3:6D:A9:D7:BF
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132312e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:5e:5b:eb:40:13:f4:65:7e:87:cc:c1:87:77:9a:2c:62:
         2d:42:61:17:6b:38:51:ba:76:07:85:5c:c6:e3:7b:c0:07:bc:
         37:2a:e5:d8:5b:fb:57:ad:46:68:7f:4d:69:0a:18:72:08:6f:
         e9:f2:e1:8d:1b:bc:10:d9:31:9b:49:38:90:ca:cb:a9:e9:d0:
         63:ea:d2:7a:20:e4:c4:2c:33:75:49:bc:61:41:ec:ce:82:85:
         d1:b0:5e:fd:05:10:1f:d7:2c:d3:7b:cb:72:c7:6d:55:f8:d2:
         0b:51:4b:ba:97:a0:d6:d2:b1:92:d7:5c:cb:a8:0a:8a:0b:1e:
         c2:2d:e6:2f:00:ce:8c:83:c6:27:a7:d6:68:57:1f:0a:49:c9:
         6a:8e:ed:f3:e3:24:1d:49:cf:21:04:78:fc:c8:be:ac:22:9c:
         72:bd:bc:09:67:21:e4:d3:d4:5b:b7:7a:64:cc:b7:9c:76:cf:
         53:18:99:9f:42:bb:d6:56:63:6b:f4:53:e1:f8:a3:80:0a:67:
         6a:b2:8c:36:3a:cd:5d:10:db:f4:59:d6:02:59:8e:8d:68:ae:
         3c:77:74:83:0a:49:f9:ef:e6:bc:0f:4e:99:15:dc:17:de:fe:
         96:a7:2b:c9:d0:3c:93:8e:0d:4b:20:37:be:a5:3d:93:46:94:
         23:bd:56:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:12 2026 by rpki-client