Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31382e302f32332d3233203d3e20323633363131.roa
File:                     3137392e3132342e31382e302f32332d3233203d3e20323633363131.roa (raw, json)
Hash identifier:          chpYjONlHvkzOQG2LZ6uCG+1T8euC9gUfX+zaVG9eXg=
Subject key identifier:   44:13:BC:5B:DD:DD:3C:1E:F5:E5:D4:8B:22:2B:4E:09:77:21:BB:71
Certificate issuer:       /CN=D6831111E8797708FF0562D131A197B0F3A4815F
Certificate serial:       5A85A65C1EC5F59D4DF5D7423D90D4BE2E13303F
Authority key identifier: D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31382e302f32332d3233203d3e20323633363131.roa
Signing time:             Mon 27 Apr 2026 19:29:58 +0000
ROA not before:           Mon 27 Apr 2026 19:24:58 +0000
ROA not after:            Mon 26 Apr 2027 19:29:58 +0000
asID:                     263611
IP address blocks:        179.124.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:85:a6:5c:1e:c5:f5:9d:4d:f5:d7:42:3d:90:d4:be:2e:13:30:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6831111E8797708FF0562D131A197B0F3A4815F
        Validity
            Not Before: Apr 27 19:24:58 2026 GMT
            Not After : Apr 26 19:29:58 2027 GMT
        Subject: CN=4413BC5BDDDD3C1EF5E5D48B222B4E097721BB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:12:97:a2:14:0d:f2:6a:a5:87:79:fa:9c:
                    8c:3d:88:f9:6d:fa:53:ac:6c:e5:ba:c9:ed:dd:66:
                    72:b1:84:13:05:78:d7:25:e1:c8:22:24:09:13:3c:
                    73:0e:2c:56:59:af:83:f5:60:5b:d2:88:28:56:c2:
                    b8:d4:58:08:3a:f9:c1:25:6d:93:20:31:2b:53:12:
                    08:fa:86:39:1e:62:ce:94:f2:88:08:49:f2:60:07:
                    1d:c8:c8:40:79:45:7b:ca:f9:f2:8c:14:98:85:fb:
                    2b:c2:d8:6d:6f:7e:61:ae:3d:de:f6:70:86:f6:8b:
                    ee:3a:6d:73:d5:32:77:3d:00:e0:59:ad:a3:37:fd:
                    02:65:f4:c9:ec:be:76:3f:26:e0:12:e7:c7:9e:39:
                    89:b3:1b:1e:0b:62:d1:e6:60:6c:22:3d:50:48:df:
                    bc:cd:dd:1a:c8:d8:9c:fb:8b:04:76:e1:82:f4:b6:
                    31:21:36:d4:3e:c5:93:88:14:95:51:8c:f9:b4:eb:
                    25:50:8a:7c:ca:58:d4:3d:3e:a0:b2:27:e6:36:e5:
                    2a:be:08:f1:87:4f:2a:8d:7a:0b:a6:33:de:87:2d:
                    42:34:79:ac:df:9e:fa:ad:25:ec:dd:02:97:2a:96:
                    ad:14:52:c1:74:23:38:d2:c8:ac:bc:fa:6b:1d:81:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:BC:5B:DD:DD:3C:1E:F5:E5:D4:8B:22:2B:4E:09:77:21:BB:71
            X509v3 Authority Key Identifier:
                keyid:D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31382e302f32332d3233203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:b0:ed:76:ee:4a:59:21:ae:64:38:8c:49:62:ea:69:e6:09:
         ea:da:cd:8a:14:3b:69:4a:89:45:06:16:6c:0e:84:66:70:39:
         f2:78:5c:6c:ed:84:f2:ea:af:04:bc:c7:12:69:93:13:17:ba:
         54:ba:8f:99:3e:9f:8d:30:aa:ab:b6:86:55:27:98:70:54:2e:
         d4:9e:74:50:17:07:e6:b4:29:f4:43:cc:80:54:24:15:d9:f6:
         84:65:24:43:83:b4:5a:4d:5f:c7:76:5b:d1:af:81:32:d0:4a:
         d1:4c:3c:6b:2c:b9:a7:37:22:80:9a:87:61:63:d3:04:f0:f5:
         0d:a0:1b:1d:c5:75:59:4e:6e:5c:ba:a9:a5:36:0b:7d:ca:cb:
         fd:ea:14:2d:2a:d4:c0:02:e8:02:ba:e8:df:52:50:6a:f1:9c:
         e2:47:ad:bc:97:75:57:bd:5f:13:ad:a4:bd:49:d0:a3:b0:31:
         6f:9e:4a:57:c9:1d:38:ad:bc:46:78:5d:d5:c6:b0:d8:46:29:
         38:30:0e:e6:f8:01:00:2f:71:5c:10:0e:fb:e0:f9:3c:6a:6c:
         42:d6:61:01:36:15:ae:4b:cb:35:c6:1a:33:0b:36:d1:8c:2e:
         53:6c:5a:bf:da:ce:91:ec:0c:23:aa:7e:47:e9:b7:b9:be:33:
         60:22:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:02 2026 by rpki-client