Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          t7lWzI/PELk5QVqpX2laQiUgdHxUccOy5v/VxMckpaY=
Subject key identifier:   78:4E:B9:AB:25:21:52:A7:68:E8:CB:D6:7B:EC:D9:C5:D7:A7:6E:DC
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       1FC39D530DECCAF1F96AFDF19E4FE58DC7F28651
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:33 +0000
ROA not before:           Sat 04 Apr 2026 00:25:33 +0000
ROA not after:            Sat 03 Apr 2027 00:30:33 +0000
asID:                     263612
IP address blocks:        179.189.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c3:9d:53:0d:ec:ca:f1:f9:6a:fd:f1:9e:4f:e5:8d:c7:f2:86:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:33 2026 GMT
            Not After : Apr  3 00:30:33 2027 GMT
        Subject: CN=784EB9AB252152A768E8CBD67BECD9C5D7A76EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:5c:ca:80:19:ef:54:6a:a9:f3:f6:2f:3d:
                    34:35:37:5f:4a:5e:67:85:06:38:af:2a:46:f1:8c:
                    9b:c7:83:01:6d:4e:7f:7e:58:00:d4:b5:7b:96:0c:
                    94:ac:83:26:d9:27:df:0a:8c:b9:e5:a5:19:12:0c:
                    28:c2:8f:2c:67:32:14:7d:56:ed:62:c1:2c:3e:e9:
                    34:ba:fd:92:08:28:4e:1f:9c:17:82:09:57:91:05:
                    ca:9a:d2:bf:29:47:89:51:91:21:bd:7f:e5:bf:26:
                    a2:ac:99:74:f1:7f:0e:dc:64:55:7f:28:8e:e5:5f:
                    e6:9b:42:52:17:f0:3c:e7:c2:41:8e:bf:9d:e3:81:
                    b5:98:b0:25:93:39:09:05:6c:6e:04:d3:d0:80:52:
                    a0:98:65:9a:b6:0a:15:39:21:c1:b4:23:c8:19:68:
                    51:ee:cd:e1:b9:21:d4:0d:b4:aa:47:c0:9b:14:3c:
                    6d:c4:a5:72:b4:3e:ff:e2:02:1a:7e:b8:98:c8:7e:
                    4f:6d:ac:a7:4b:1d:32:18:79:2c:f1:ee:3a:ea:f0:
                    4b:e5:4b:c4:e1:33:c4:d3:91:6e:14:83:f5:14:1e:
                    5d:f0:b4:64:15:e0:0b:20:df:ca:70:94:71:1e:02:
                    21:76:36:ab:e2:f5:60:ef:50:30:d1:18:7c:0b:7d:
                    cd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4E:B9:AB:25:21:52:A7:68:E8:CB:D6:7B:EC:D9:C5:D7:A7:6E:DC
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132352e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:77:ec:1d:2e:e1:a2:42:18:a8:41:4a:65:d2:67:33:40:7b:
         12:2b:68:ce:7f:bd:35:36:a4:fc:e8:f4:5d:7c:34:d3:49:50:
         c1:0b:66:a9:b8:60:5b:e4:25:5d:ba:40:6d:29:7b:7f:05:ee:
         c1:93:06:bd:b4:d7:d0:64:c4:11:f4:7d:65:eb:e8:2d:45:29:
         4f:8f:13:32:07:30:ea:b2:89:24:a9:5d:d2:a7:94:6e:ff:70:
         8b:9e:20:49:74:c8:2f:60:ad:0c:d6:a8:00:3f:3a:46:78:33:
         64:28:ba:8c:94:38:cc:d2:04:36:a3:f3:2f:3d:d2:28:8a:34:
         ce:29:c1:cb:9d:b7:4c:d5:45:db:08:47:f7:3c:ec:80:b5:5b:
         0f:aa:5f:3f:78:c9:95:59:bd:bb:07:80:a5:3f:dd:dc:d8:8d:
         80:5a:7c:c1:65:bb:db:7a:a9:fe:83:50:5b:ab:07:c2:ae:ee:
         e7:78:79:31:a4:be:d8:bb:b0:23:13:87:3f:6f:59:99:f9:a5:
         b7:b9:55:08:bf:da:2a:63:fe:62:bb:87:67:9e:16:fe:be:52:
         75:52:c0:c9:e1:dc:43:47:8d:84:f9:be:5e:64:6a:c0:aa:3f:
         7f:5e:28:14:75:58:4f:c2:16:ab:e0:f0:8b:e9:dc:5a:cc:d0:
         5f:ee:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:56 2026 by rpki-client