Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31362e302f32332d3233203d3e20323633363131.roa
File:                     3137392e3132342e31362e302f32332d3233203d3e20323633363131.roa (raw, json)
Hash identifier:          tARnvk6Fpwm22GVRMW24kpfmmtQuaKdq953QMNTjOZ4=
Subject key identifier:   A4:3C:AC:46:91:39:F4:22:C2:1D:53:A8:5A:39:4C:83:5B:EA:43:3C
Certificate issuer:       /CN=D6831111E8797708FF0562D131A197B0F3A4815F
Certificate serial:       6EE58D6E04581CA21C50FCD6C40A4C45A2B34A3B
Authority key identifier: D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31362e302f32332d3233203d3e20323633363131.roa
Signing time:             Mon 27 Apr 2026 19:29:58 +0000
ROA not before:           Mon 27 Apr 2026 19:24:58 +0000
ROA not after:            Mon 26 Apr 2027 19:29:58 +0000
asID:                     263611
IP address blocks:        179.124.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e5:8d:6e:04:58:1c:a2:1c:50:fc:d6:c4:0a:4c:45:a2:b3:4a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6831111E8797708FF0562D131A197B0F3A4815F
        Validity
            Not Before: Apr 27 19:24:58 2026 GMT
            Not After : Apr 26 19:29:58 2027 GMT
        Subject: CN=A43CAC469139F422C21D53A85A394C835BEA433C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d4:c3:e8:05:1c:3d:29:ec:47:15:dd:eb:75:
                    ce:e8:4b:62:33:ac:9c:db:dd:4f:7d:9f:da:d3:f3:
                    80:2b:43:c2:c7:bd:ff:75:a2:84:cd:30:2e:1f:85:
                    43:1d:f5:52:e6:84:63:74:b6:2c:41:48:a9:4c:3f:
                    f2:7f:56:22:a1:e7:6e:0c:73:f8:37:32:00:e7:b5:
                    ae:af:88:d4:0d:5a:bd:db:cd:42:58:fa:d4:7f:4b:
                    6b:a3:64:e5:5d:2c:e6:f3:d9:38:93:af:90:26:f3:
                    a3:ec:29:51:f8:87:96:a2:27:fa:5f:ed:34:4b:21:
                    b2:44:46:d6:57:ec:52:86:cc:52:b8:b5:4e:75:d5:
                    be:d6:ba:e8:9c:f8:9c:06:06:b2:3a:d7:50:03:56:
                    16:b4:37:f3:aa:c7:21:d5:be:dd:79:0d:f2:1a:fb:
                    d2:90:c2:c3:7f:88:3c:e8:0f:52:63:2b:a3:3f:29:
                    f7:ab:fd:4c:2d:9b:d7:a3:11:30:e0:97:37:56:e3:
                    ef:c9:51:8a:4c:5b:e3:c6:65:bb:ff:2c:0d:16:e1:
                    2c:96:6f:7a:da:d3:91:ce:0c:ae:5e:8e:04:f3:c3:
                    b6:42:27:51:73:b3:a6:64:9d:b9:e3:cc:20:13:b4:
                    e3:ed:8d:dd:02:fb:8c:4b:b3:f9:7f:4f:3a:3a:3b:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:AC:46:91:39:F4:22:C2:1D:53:A8:5A:39:4C:83:5B:EA:43:3C
            X509v3 Authority Key Identifier:
                keyid:D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31362e302f32332d3233203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:d4:55:ff:7c:bc:d0:33:1f:1c:22:80:21:da:3b:3a:dc:20:
         1b:da:cd:90:43:f8:d5:c1:9c:49:b2:09:c5:d7:b4:c7:db:b3:
         ba:72:9f:e7:62:95:0b:14:e4:0a:41:3b:e5:14:10:97:b5:75:
         c7:23:7b:cb:2d:84:3e:d9:b4:1d:49:b9:55:98:e6:99:ea:41:
         89:95:bb:a6:42:6c:a2:a5:f4:11:be:2a:20:df:b8:21:d3:44:
         81:9a:2c:24:14:44:b7:15:90:05:fc:9a:99:0d:71:0b:c4:80:
         51:fb:8b:28:30:19:9f:2e:3e:d1:52:e0:4c:da:1d:c9:f7:b2:
         c1:c3:43:cc:2e:80:19:42:8f:9e:0c:65:f9:48:a3:09:dd:05:
         8f:ca:ec:ab:5d:1a:9f:0d:49:08:b0:84:2b:ff:52:b7:43:b5:
         8a:32:cc:27:bf:b0:52:1b:3c:33:d2:b7:b3:d0:fc:45:fd:88:
         17:6d:6b:51:4e:e3:6b:58:2c:fc:b1:db:47:07:54:b3:2a:03:
         c3:a4:7d:d4:a7:d8:2f:26:9e:fd:ef:86:28:48:82:8b:ae:61:
         24:40:63:11:1c:13:dd:c5:41:e4:dd:0a:07:2d:df:d7:84:72:
         89:8c:3d:27:79:b0:a0:98:37:96:dd:1d:fd:b0:04:18:b6:eb:
         81:a9:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:02 2026 by rpki-client