Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa
File:                     3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa (raw, json)
Hash identifier:          qWzAcV7Gz0DgMZ3ddonb6EFuyCmiEF8muRoKxtmGQOM=
Subject key identifier:   F0:8D:3D:FC:6E:BD:5A:FD:2D:08:3A:C2:02:7B:34:C7:FA:BC:C4:85
Certificate issuer:       /CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
Certificate serial:       37A3D2E9D8188EC9572B3245E4BCE58DF7DA68CA
Authority key identifier: 7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa
Signing time:             Mon 02 Mar 2026 21:17:48 +0000
ROA not before:           Mon 02 Mar 2026 21:12:48 +0000
ROA not after:            Mon 01 Mar 2027 21:17:48 +0000
asID:                     271602
IP address blocks:        179.63.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl
                          rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a3:d2:e9:d8:18:8e:c9:57:2b:32:45:e4:bc:e5:8d:f7:da:68:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ADC4A0F30F84A13F06E94A86F034E04BF92B875
        Validity
            Not Before: Mar  2 21:12:48 2026 GMT
            Not After : Mar  1 21:17:48 2027 GMT
        Subject: CN=F08D3DFC6EBD5AFD2D083AC2027B34C7FABCC485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:20:ad:f7:5a:6b:30:6a:02:14:d0:8a:eb:37:
                    c8:b9:b2:db:24:72:1e:a5:b9:e8:7e:52:bd:d5:62:
                    9b:53:f2:0f:b6:86:0b:7b:8c:10:32:6c:b4:3e:ab:
                    00:29:fb:b5:68:22:dc:b6:22:df:41:57:bf:17:3f:
                    23:80:d2:f3:ec:af:b2:ba:82:a0:c6:56:23:05:98:
                    65:c9:9b:f6:dc:55:88:5f:e1:c8:2e:f1:4c:6d:af:
                    4e:02:9b:36:3d:96:7f:1d:76:e8:37:66:46:18:dd:
                    f9:3f:bb:3b:d2:e0:d2:25:b5:30:51:a8:a9:fb:02:
                    da:ac:d1:09:22:0b:04:b7:31:90:73:e0:f3:3a:5a:
                    90:b6:59:12:51:80:71:1f:fb:d3:bd:0c:31:b4:7b:
                    6c:be:75:67:2b:48:92:b1:2b:94:b3:55:a4:3f:37:
                    6a:ef:69:6a:9a:cd:b1:b7:47:cf:f0:07:8b:96:a6:
                    d8:22:e7:21:b5:5c:5b:64:3e:22:60:21:74:58:f6:
                    a0:56:a6:eb:4c:6b:eb:cd:17:5b:21:8d:4f:a9:c4:
                    ba:b3:66:c2:d3:4c:b7:72:80:93:fc:16:44:62:7c:
                    3b:18:f8:17:9d:39:94:2f:01:9d:e9:bc:9f:de:2e:
                    e1:ab:84:ba:c1:d3:a5:92:c8:d9:67:b0:be:96:68:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8D:3D:FC:6E:BD:5A:FD:2D:08:3A:C2:02:7B:34:C7:FA:BC:C4:85
            X509v3 Authority Key Identifier:
                keyid:7A:DC:4A:0F:30:F8:4A:13:F0:6E:94:A8:6F:03:4E:04:BF:92:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7ADC4A0F30F84A13F06E94A86F034E04BF92B875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5o4X6HEih7Jxvm7j3pmAnht8NqBLAdW6PfLB2sh4NSL5/1/3137392e36332e3135382e302f32342d3234203d3e20323731363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:1c:56:0d:3a:ca:0a:79:c2:bb:ce:94:10:6d:f5:86:2c:
         b8:d1:f1:68:4f:5e:d9:db:6c:79:8b:9d:ae:11:f0:f0:de:fa:
         42:cd:cf:f4:d8:3a:ba:25:65:5a:24:bb:8f:d0:3e:04:dc:e5:
         73:4c:0f:02:e2:ac:1d:63:18:95:0c:cf:0e:7e:3b:57:f6:8c:
         38:05:2d:15:c4:f3:8b:a7:78:ca:37:34:22:48:53:01:3d:66:
         00:e9:84:42:af:db:c1:eb:56:7d:99:19:3a:9d:85:71:7e:fa:
         22:a5:06:b1:3b:83:8e:30:12:ca:7f:4e:c8:a0:30:c9:db:ea:
         d9:8f:f0:e0:af:05:87:16:6f:10:6c:4f:f3:8c:9c:cf:f6:fc:
         2d:a6:ab:20:43:17:b9:63:ad:8a:e4:b6:e1:f9:93:c1:77:6c:
         51:95:6b:45:b8:dc:e2:33:e6:34:23:fb:79:af:0f:e8:a7:1d:
         61:72:aa:2d:10:42:e7:29:48:bf:03:be:4c:00:67:38:53:0a:
         95:39:bf:1b:dc:2a:bf:cf:f1:66:4a:06:55:22:ac:f9:2f:fb:
         f9:2b:6a:d3:74:32:08:6e:8d:a8:cb:24:18:7f:d3:2c:82:97:
         17:26:28:ed:fb:ca:c7:2c:67:24:e2:52:68:89:6c:b8:d5:07:
         ad:90:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:17 2026 by rpki-client