Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132372e302f32342d3234203d3e20323633363132.roa
File:                     3137392e3138392e3132372e302f32342d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          SX4+I7EczD0NpakfVI5y+5Xp+dDPOZrH956NyeZsmqI=
Subject key identifier:   66:77:26:C3:75:3F:00:78:C0:4A:56:94:31:1E:85:C1:8B:54:02:49
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       72DB70A5B7EEAE9482E48CE56DD970726AC03ABA
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132372e302f32342d3234203d3e20323633363132.roa
Signing time:             Sat 04 Apr 2026 00:30:30 +0000
ROA not before:           Sat 04 Apr 2026 00:25:30 +0000
ROA not after:            Sat 03 Apr 2027 00:30:30 +0000
asID:                     263612
IP address blocks:        179.189.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:db:70:a5:b7:ee:ae:94:82:e4:8c:e5:6d:d9:70:72:6a:c0:3a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: Apr  4 00:25:30 2026 GMT
            Not After : Apr  3 00:30:30 2027 GMT
        Subject: CN=667726C3753F0078C04A5694311E85C18B540249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:08:72:19:27:94:a6:2d:c0:8b:d3:12:e7:
                    ed:83:fa:7e:a2:28:f3:50:52:7b:b1:4b:fb:64:84:
                    be:97:1c:55:de:56:9a:e3:f6:c4:a4:bf:6a:9c:e4:
                    49:9f:a6:65:de:db:33:bf:a8:cf:fd:59:a8:4a:4d:
                    dd:79:3a:1e:ec:36:bd:2a:88:cd:98:14:11:28:73:
                    02:85:16:a1:bc:6e:ae:0f:a8:ac:65:58:dd:22:52:
                    b6:b2:e1:ed:ab:69:f4:3f:62:1d:d7:05:88:cc:aa:
                    d3:80:cc:e9:4b:5a:a8:68:4b:c0:aa:67:33:e9:72:
                    c9:a3:66:3e:1f:9d:22:fa:23:72:33:7a:00:fd:e7:
                    d0:f1:ed:d5:91:14:61:da:dd:7f:5f:67:87:b6:c3:
                    92:77:1a:98:95:20:16:f9:07:49:d7:07:7f:23:a0:
                    d8:4d:a5:22:1e:fa:9e:95:00:c7:c1:73:96:bc:b3:
                    09:35:3d:40:79:7e:ad:9e:f5:34:aa:ad:46:2d:6f:
                    57:e0:65:5d:f3:3d:64:af:8e:56:01:05:9a:be:97:
                    b5:c8:94:8d:da:de:8c:fb:4c:2c:5e:5f:a7:dc:0f:
                    a5:8c:6b:54:56:55:cd:ea:f8:47:cb:0f:f2:09:b4:
                    f5:57:37:d2:dd:62:91:0f:34:bd:ee:00:c6:16:73:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:26:C3:75:3F:00:78:C0:4A:56:94:31:1E:85:C1:8B:54:02:49
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3138392e3132372e302f32342d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:77:29:d8:1a:7f:66:67:08:4a:8e:5a:b1:bf:fb:06:ff:0d:
         31:3a:fb:b3:d6:3b:7e:d9:fc:fa:fb:d1:61:84:0e:0c:09:49:
         29:d3:be:0f:59:a8:13:67:82:2e:e8:1d:c7:01:9b:b1:af:ca:
         2d:5d:b1:00:bc:26:77:b4:5b:3c:1f:22:e1:e9:51:9a:c2:f3:
         09:a7:e6:31:75:77:90:68:5f:2c:54:ad:6e:a0:da:ad:41:a4:
         ba:60:5a:27:12:41:95:de:6b:9b:a0:3e:60:3f:60:50:77:e9:
         8a:6c:b1:19:c3:e2:ca:94:bc:11:24:84:d4:cd:0f:b6:54:16:
         11:24:cc:16:3c:6a:82:d7:8f:39:4f:4e:a8:60:bf:9d:a1:bf:
         0d:d0:c5:75:70:b8:4a:a8:ab:b7:d2:e8:45:f4:e1:51:64:b1:
         a9:40:df:b1:b7:86:d9:04:0b:7a:d8:b7:a0:09:77:39:73:df:
         eb:16:98:ca:fa:8d:45:a7:78:eb:b4:01:ee:03:b3:7f:92:9f:
         2c:b6:d5:41:04:dd:6c:11:c3:c8:4a:5e:47:cc:5a:c3:aa:b5:
         7a:9b:1a:1e:b1:49:55:b3:ff:60:99:3a:2b:88:35:ec:de:6b:
         2a:66:10:e8:c8:e3:b4:33:ac:71:8e:11:29:7a:cf:bd:03:08:
         f0:b1:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 14:41:49 2026 by rpki-client