Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          TVSMlYfUUFuWlFJ6PbYqO1DLg62zr9VKnVGLH2325h8=
Subject key identifier:   2A:FD:14:7E:CA:D4:B5:21:6E:F2:5E:3C:FD:C0:18:0B:63:DC:58:9A
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       12CEACE2009CEE08317607CCAC7B48AE0A081126
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:29 +0000
ROA not before:           Sat 04 Apr 2026 00:25:29 +0000
ROA not after:            Sat 03 Apr 2027 00:30:29 +0000
asID:                     263612
IP address blocks:        179.189.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ce:ac:e2:00:9c:ee:08:31:76:07:cc:ac:7b:48:ae:0a:08:11:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:29 2026 GMT
            Not After : Apr  3 00:30:29 2027 GMT
        Subject: CN=2AFD147ECAD4B5216EF25E3CFDC0180B63DC589A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:a8:a3:91:b2:9e:5f:58:52:81:94:1f:8a:
                    91:fe:b9:c3:1b:53:dc:01:f2:12:2a:03:f2:b3:fd:
                    7f:4d:80:29:2f:86:62:fe:32:4f:dc:67:80:76:2c:
                    80:37:b1:e4:a3:db:b5:48:1e:f5:90:17:7f:53:e2:
                    e9:f7:4f:9c:07:d0:32:a2:cd:9c:0e:0d:d4:b4:70:
                    e3:a0:c3:a4:53:4e:54:2a:f9:31:a3:8c:09:e9:e7:
                    47:5e:d2:41:ea:53:63:0c:35:d4:e8:66:2c:23:69:
                    db:96:61:ac:d0:03:cc:b4:ad:e3:21:a9:1f:bd:0d:
                    2f:8d:54:ff:bc:fa:47:d2:0d:17:84:7d:00:4e:3f:
                    cb:e4:a9:38:d3:1f:c1:14:33:b5:f2:c4:05:f2:62:
                    95:d0:a0:c2:07:ca:f9:5f:2e:30:93:29:ef:d6:1c:
                    5d:1b:ef:eb:f8:00:2d:e4:91:4d:61:d2:b6:13:7b:
                    73:f9:3c:21:69:7f:7a:36:04:83:77:03:27:93:d7:
                    d3:72:57:8f:79:bf:5e:03:ea:ad:ff:c8:bc:ca:b0:
                    2c:4a:fa:3f:63:bd:84:79:86:4a:cd:69:31:cb:98:
                    b9:bb:fc:cc:02:d0:38:76:20:24:9d:00:f1:44:b6:
                    24:10:6e:ab:67:52:12:4d:fd:e8:3e:e3:01:27:1e:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FD:14:7E:CA:D4:B5:21:6E:F2:5E:3C:FD:C0:18:0B:63:DC:58:9A
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132362e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:2c:d7:2c:32:20:43:0f:9e:4f:c1:29:89:60:47:ab:12:
         04:ec:33:00:76:11:bb:6d:43:83:62:5b:94:a8:21:be:63:3b:
         fa:40:24:82:99:2b:fa:1e:87:34:a7:e1:04:f1:1f:43:1f:0f:
         43:74:95:7b:6b:b9:f3:26:14:fb:94:9f:02:a1:68:91:4b:b4:
         51:22:a8:da:df:25:8a:db:fc:ca:09:69:22:4f:bd:63:77:6d:
         2b:69:48:e7:55:0c:5d:b3:dc:d9:ae:a6:50:99:b4:98:95:2e:
         7b:14:4e:31:ab:b1:a1:9c:c3:1f:74:11:8b:c8:95:6c:c0:d6:
         1a:9c:dd:6f:07:d0:f6:00:24:5d:95:38:d3:5d:20:36:7a:f9:
         5b:85:90:33:83:f5:35:33:79:be:7c:f3:0b:a3:da:a4:e1:38:
         13:2e:a9:98:28:01:27:19:8d:ef:f4:aa:d0:68:e2:84:45:42:
         6e:fa:60:b8:d1:70:4a:fb:0f:37:8c:e7:79:f2:7b:ec:35:2b:
         ea:f8:64:9e:e7:e7:ab:06:ec:56:d4:c2:7a:f3:9e:9a:6d:93:
         c6:5d:ab:24:14:07:24:96:d7:9a:7a:24:10:d7:69:53:f5:6e:
         25:5e:e5:5c:54:98:3c:d2:d8:64:6e:ee:92:09:33:6f:65:98:
         52:a2:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:56 2026 by rpki-client