Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          BE578XtUKKd7g5Gv3rCLFO6zeKofhAfHWph7aNlfjlQ=
Subject key identifier:   9B:7B:12:D9:57:5F:47:E8:D6:46:B1:45:19:6F:FB:A1:CC:EC:4A:01
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       694E0AD5E64BF92DC0A759E122D96239E78E49BD
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:21 +0000
ROA not before:           Sat 04 Apr 2026 00:25:21 +0000
ROA not after:            Sat 03 Apr 2027 00:30:21 +0000
asID:                     263612
IP address blocks:        179.189.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4e:0a:d5:e6:4b:f9:2d:c0:a7:59:e1:22:d9:62:39:e7:8e:49:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:21 2026 GMT
            Not After : Apr  3 00:30:21 2027 GMT
        Subject: CN=9B7B12D9575F47E8D646B145196FFBA1CCEC4A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:49:78:86:03:91:55:28:ef:fa:49:b8:10:
                    04:d7:5a:65:de:cc:a8:d0:a5:5f:bf:1e:60:fd:01:
                    46:6d:9a:37:59:96:e6:a7:46:78:09:af:02:ff:c7:
                    b1:4d:79:ed:3a:15:79:15:75:4a:38:06:10:4c:f1:
                    e1:c1:12:1c:dd:36:2a:4d:5a:82:d0:3d:a3:12:7d:
                    e3:a4:d0:a2:cb:4f:05:49:07:4e:7c:76:f3:a0:c0:
                    89:e3:7b:59:85:db:79:15:64:f5:9a:68:34:22:fc:
                    0b:a6:3e:b9:0b:45:e9:55:e4:5b:8b:75:eb:45:93:
                    0a:70:75:96:08:a2:2c:60:ee:17:6f:ca:8f:c1:05:
                    2c:f6:c1:54:76:8c:ee:a2:16:74:b8:cb:69:11:89:
                    72:cf:27:17:ac:7a:84:c3:d3:24:40:49:7a:b6:ad:
                    80:f9:be:88:91:36:78:4d:ed:5b:0c:ef:02:04:ee:
                    45:7f:5a:9c:ef:12:3a:06:88:fc:3b:5c:71:2f:01:
                    b5:02:b4:f2:f1:38:8c:1c:31:19:bd:8d:65:5a:ef:
                    80:c4:ca:18:28:65:f9:b1:f6:da:32:0b:26:35:f0:
                    7c:e5:41:8e:10:a4:75:2b:ff:1e:6d:36:14:b0:32:
                    b8:3b:a0:56:c1:9d:1f:59:ad:89:98:d0:21:f6:28:
                    d4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:12:D9:57:5F:47:E8:D6:46:B1:45:19:6F:FB:A1:CC:EC:4A:01
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132332e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:e3:fd:d4:fd:c4:38:4b:de:cb:7b:61:fd:34:4c:7a:5c:
         41:24:0e:53:1a:85:68:4f:d0:f7:b8:60:de:85:6d:a8:a6:1e:
         3e:fe:e9:b2:98:bb:21:e0:5e:d3:7b:78:e3:03:ec:69:f5:66:
         c8:ea:72:61:ad:ae:b2:a6:94:51:ca:e6:4d:22:31:d5:b2:07:
         4c:bd:43:d6:96:fd:ee:a4:f5:1e:bb:a5:e5:62:cf:a8:1d:43:
         16:c2:82:e5:49:3e:ba:96:da:39:77:e2:43:03:05:09:fa:6d:
         ad:34:f7:12:31:c7:13:5e:73:2a:d6:c0:19:36:b4:89:d9:75:
         42:2a:10:b7:42:18:d4:bc:53:4e:38:69:c2:4c:62:42:3e:10:
         01:a3:9d:26:87:47:27:ed:90:b5:4d:ad:ee:bd:3e:38:03:14:
         c7:c5:1b:9b:6d:8f:da:bb:5c:26:9b:c9:aa:97:48:1f:2f:e8:
         75:4c:93:76:1a:1f:af:ae:49:53:01:90:1c:56:73:e7:34:45:
         9d:2c:40:8a:5c:b0:99:c1:f7:24:e1:db:7e:b2:88:64:40:74:
         39:9f:e2:5e:5b:4b:7e:57:4c:0b:35:0c:6c:24:74:ea:b6:a5:
         2a:e7:e9:75:a1:e9:18:1a:36:41:7f:16:2c:5e:c4:cc:6f:83:
         da:1d:6f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:13 2026 by rpki-client