Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31392e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e31392e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          aOv/FJQ31Vt7OhEO6PIQfFxZQLBH4GlI9z1/mm78be4=
Subject key identifier:   B3:99:63:93:07:97:76:6B:F9:C1:E2:87:41:23:28:DC:FC:A9:DB:30
Certificate issuer:       /CN=D6831111E8797708FF0562D131A197B0F3A4815F
Certificate serial:       6C7B36EB463B68FFA40FD21283231567CBFEAA99
Authority key identifier: D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31392e302f32342d3234203d3e20323633363131.roa
Signing time:             Mon 27 Apr 2026 19:29:57 +0000
ROA not before:           Mon 27 Apr 2026 19:24:57 +0000
ROA not after:            Mon 26 Apr 2027 19:29:57 +0000
asID:                     263611
IP address blocks:        179.124.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7b:36:eb:46:3b:68:ff:a4:0f:d2:12:83:23:15:67:cb:fe:aa:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6831111E8797708FF0562D131A197B0F3A4815F
        Validity
            Not Before: Apr 27 19:24:57 2026 GMT
            Not After : Apr 26 19:29:57 2027 GMT
        Subject: CN=B39963930797766BF9C1E287412328DCFCA9DB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:14:e7:3d:c3:51:72:d5:c3:d7:ef:3d:85:
                    e9:5e:37:60:5f:59:bd:4c:fb:33:7b:d5:d7:71:7c:
                    c4:d9:86:bb:de:0c:13:bd:c8:32:76:7f:cd:ed:07:
                    39:9c:07:10:de:f7:3a:0f:82:bb:08:07:03:e8:37:
                    1d:10:cd:61:ca:04:94:ac:74:9c:96:e6:1e:f1:a6:
                    d5:cb:3d:d0:4d:f0:4e:27:b9:9d:30:a8:ef:4b:2e:
                    9e:d8:cb:b0:74:2c:dc:8c:1d:29:ac:dd:4a:99:40:
                    15:fb:d1:45:7c:5b:6d:db:bc:1b:fe:42:27:6a:f9:
                    a0:80:be:b1:ce:53:c0:79:49:ee:ea:5f:12:f6:cc:
                    2d:14:4e:08:4b:99:11:3b:32:cf:4f:41:d1:53:a7:
                    c5:4d:ff:43:f7:09:85:d0:8a:78:8b:b4:9e:99:bf:
                    d2:ad:9e:16:c9:79:be:0b:a9:c0:10:2a:ef:fe:98:
                    f3:8e:4d:cd:59:1f:88:74:e2:db:d4:26:6d:f0:a9:
                    b7:b2:1c:e6:9f:8d:ab:bc:34:d0:7d:7f:13:55:90:
                    08:03:b6:40:52:ed:9e:6a:a5:2f:c4:f3:35:80:01:
                    9c:39:9b:41:da:8a:f7:ee:97:82:9c:5f:0f:7a:6e:
                    91:d0:12:7d:6d:4f:40:91:e9:e8:d3:4f:c2:46:b3:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:99:63:93:07:97:76:6B:F9:C1:E2:87:41:23:28:DC:FC:A9:DB:30
            X509v3 Authority Key Identifier:
                keyid:D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e31392e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:37:be:28:07:c9:4d:a7:2c:d8:f6:d2:83:27:28:a0:87:d2:
         60:53:bc:5d:0a:2b:ae:37:dc:84:a0:86:7f:e6:ed:27:52:08:
         ea:16:28:44:70:03:90:6e:09:fa:9e:dd:61:d8:13:79:0e:df:
         73:4e:0a:79:9f:43:f6:af:6c:9c:36:e9:dc:81:36:f0:22:8f:
         52:b1:e4:c2:c3:4d:b2:9c:67:72:45:64:ef:b4:bb:95:e6:3b:
         64:53:5f:ae:5f:12:50:5f:37:59:03:f3:61:d0:b6:3c:4a:cf:
         9c:eb:90:f4:cd:a3:4d:59:c5:2f:37:83:06:b0:fe:21:06:64:
         08:9e:24:07:c9:16:c3:d1:98:e2:18:ac:75:40:f3:e6:85:e4:
         61:45:b2:5f:6b:8e:80:a0:4b:1e:ee:37:d2:0a:e3:37:46:c7:
         f6:6a:d4:14:57:ac:0f:eb:33:c5:87:2d:be:c3:33:2b:15:a3:
         8f:3a:13:a8:78:2e:2b:2c:ee:92:47:60:c6:0f:c0:45:b1:7a:
         c4:61:81:df:ac:47:bf:04:1d:52:4f:22:af:5b:05:d0:3e:57:
         dc:3a:80:00:64:4c:de:db:75:82:02:b4:41:ed:6d:77:bb:23:
         73:a9:2b:5d:a2:a4:da:39:cc:e8:06:3a:0c:84:62:84:8e:be:
         2b:d2:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:55 2026 by rpki-client