Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32312e302f32342d3234203d3e20323633363131.roa
File:                     3137392e3132342e32312e302f32342d3234203d3e20323633363131.roa (raw, json)
Hash identifier:          iAgwWt598i0dg/Rq99V0H69wpe2UkIXlOTitdCcBg5w=
Subject key identifier:   B1:F0:26:69:EA:75:4C:57:44:F2:D2:91:37:21:B9:AA:F0:72:7E:13
Certificate issuer:       /CN=D6831111E8797708FF0562D131A197B0F3A4815F
Certificate serial:       58DF321588A3350BEA917E9ABC82B83F618036B2
Authority key identifier: D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32312e302f32342d3234203d3e20323633363131.roa
Signing time:             Mon 27 Apr 2026 19:28:22 +0000
ROA not before:           Mon 27 Apr 2026 19:23:22 +0000
ROA not after:            Mon 26 Apr 2027 19:28:22 +0000
asID:                     263611
IP address blocks:        179.124.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl
                          rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:11:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:df:32:15:88:a3:35:0b:ea:91:7e:9a:bc:82:b8:3f:61:80:36:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6831111E8797708FF0562D131A197B0F3A4815F
        Validity
            Not Before: Apr 27 19:23:22 2026 GMT
            Not After : Apr 26 19:28:22 2027 GMT
        Subject: CN=B1F02669EA754C5744F2D2913721B9AAF0727E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:45:52:df:bf:a2:16:9d:80:f2:4d:a9:6d:
                    9a:5f:22:f6:57:46:9f:98:af:c8:2d:ec:8e:5b:fe:
                    b6:4d:94:78:57:2d:7f:7b:08:e8:39:30:4d:12:06:
                    ff:c2:25:40:ab:cd:41:c1:1d:c2:d5:33:ed:3b:04:
                    c5:12:7e:e2:04:f4:65:da:6c:7b:88:f1:85:8a:1b:
                    7b:b1:02:50:b3:fe:84:97:6f:08:a9:65:93:8e:ad:
                    e3:42:24:61:06:c5:01:f3:c1:4e:08:02:bb:30:12:
                    bb:cf:38:3c:44:37:91:54:fb:8e:c5:7b:b2:4d:da:
                    e4:22:45:6b:a8:46:cc:0e:3e:2a:5a:8d:c1:ff:6b:
                    38:3e:da:3a:1a:f9:78:9c:d9:51:e0:e0:7b:83:a5:
                    d6:65:9b:29:f9:49:55:69:1f:ba:95:e6:ef:f7:fb:
                    dc:14:24:93:f1:82:a7:2e:f3:e5:73:d9:de:63:36:
                    6e:72:84:66:45:0d:21:17:63:62:5c:94:fa:66:d2:
                    7a:f6:73:44:a2:3a:0c:bb:82:b2:4d:ed:81:08:75:
                    86:87:be:bc:4c:4b:eb:64:5d:83:f2:0a:20:1a:3b:
                    b7:ae:67:3b:8b:97:e5:9d:58:4a:d3:b5:74:a3:b3:
                    aa:a7:cc:b0:b4:63:56:19:a2:1d:82:00:fd:e3:cf:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:26:69:EA:75:4C:57:44:F2:D2:91:37:21:B9:AA:F0:72:7E:13
            X509v3 Authority Key Identifier:
                keyid:D6:83:11:11:E8:79:77:08:FF:05:62:D1:31:A1:97:B0:F3:A4:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/D6831111E8797708FF0562D131A197B0F3A4815F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6831111E8797708FF0562D131A197B0F3A4815F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5J2b1Vm74uAMZgRHiLwEC3GSr8gdiwmZ4JcXx9tTSPAi/2/3137392e3132342e32312e302f32342d3234203d3e20323633363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:b7:c0:a2:41:7c:6c:16:b8:b8:52:b3:66:2b:04:af:59:69:
         f6:a4:73:1b:5d:8e:91:4a:36:f4:c2:1e:9a:06:b0:7f:98:88:
         82:21:c7:b8:48:fe:0a:d5:c2:26:22:72:87:e5:c6:0f:f2:e5:
         78:c3:47:4a:ae:cd:22:3c:a3:03:59:49:bd:c4:1d:c2:eb:4d:
         ad:af:70:91:47:98:2e:f4:85:77:f8:ed:b2:8b:cc:8a:e5:ea:
         58:0b:b5:6f:66:38:c9:fd:47:45:69:dc:a4:28:02:07:c0:25:
         73:08:a5:67:b0:ae:0b:82:6b:88:1a:ff:5a:1c:0f:0b:e1:75:
         ad:ea:f2:0e:9e:55:7e:74:6c:ad:b3:3f:a1:b5:4f:2c:a8:69:
         ef:04:c9:2c:4b:2f:a8:36:b1:02:70:f8:7d:ea:5e:76:bf:cd:
         2e:49:b2:8a:f5:c1:eb:45:06:7a:5e:02:5f:b5:9d:ab:77:a8:
         d2:f5:8c:d7:fe:3f:b7:4b:66:2e:42:a8:cb:30:8f:97:f8:85:
         4e:c5:8c:9d:df:3b:38:9a:a7:20:42:1a:2c:26:0c:e0:f6:a5:
         92:90:a7:f1:2b:22:83:41:4c:3d:67:ec:ea:11:a9:56:bb:4e:
         b1:4f:41:93:e7:d5:34:15:af:ec:fe:8a:b2:7a:a6:7d:3e:e1:
         a3:b7:2c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:54 2026 by rpki-client