Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131392e302f32342d3234203d3e20323730373630.roa
File:                     3137392e3130392e3131392e302f32342d3234203d3e20323730373630.roa (raw, json)
Hash identifier:          gI11ZwHplXUU0c1Z1iu05KRAfO7L7sJLgGxzLk5AIWo=
Subject key identifier:   0B:EE:6F:F0:6D:0A:54:4C:38:C0:63:D3:6E:DB:AC:0D:AF:20:C8:A1
Certificate issuer:       /CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
Certificate serial:       540D8099977712DAF917B48CECDD5A09081CCA5D
Authority key identifier: 04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131392e302f32342d3234203d3e20323730373630.roa
Signing time:             Mon 14 Sep 2026 03:11:14 +0000
ROA not before:           Mon 14 Sep 2026 03:06:14 +0000
ROA not after:            Mon 13 Sep 2027 03:11:14 +0000
asID:                     270760
IP address blocks:        179.109.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 21:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0d:80:99:97:77:12:da:f9:17:b4:8c:ec:dd:5a:09:08:1c:ca:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048551C3DC6E9DE6550DB12F34D5E3DFB665094A
        Validity
            Not Before: Sep 14 03:06:14 2026 GMT
            Not After : Sep 13 03:11:14 2027 GMT
        Subject: CN=0BEE6FF06D0A544C38C063D36EDBAC0DAF20C8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:e4:c6:40:5e:3a:ab:f4:89:83:2a:37:fd:
                    06:07:c9:b9:d6:fc:fa:f3:ff:ca:a2:f8:db:40:46:
                    f3:1f:a6:c9:b3:ed:c9:5b:2d:18:56:f4:52:91:2a:
                    4e:b1:d7:01:b9:86:2b:e3:2c:08:26:cf:c8:4e:cb:
                    6b:47:e1:5d:18:dc:b4:c8:af:18:49:c5:e5:da:ce:
                    fa:ef:61:6c:18:a9:92:54:f4:55:2e:32:8a:02:13:
                    d5:65:fe:e0:36:70:08:eb:6d:1a:69:79:70:04:76:
                    d5:61:27:34:5a:1e:76:bb:ca:5d:7f:d0:c0:5d:d6:
                    68:83:65:a6:cb:d4:c9:a6:8e:db:fe:fe:a0:4f:db:
                    7f:32:ca:b4:65:63:81:c8:97:4c:4c:5c:6c:6c:9a:
                    23:a4:55:7b:e5:b4:a9:93:1c:a6:3d:4a:65:f7:6a:
                    c4:60:97:b5:70:32:71:d6:3c:d9:22:ce:75:d7:44:
                    83:4c:c7:cf:63:3e:5e:56:c0:e2:cc:a5:33:7f:58:
                    10:d9:50:9e:1a:fc:99:f2:e3:fe:e6:32:98:ad:a7:
                    27:16:bb:31:96:db:12:06:7a:c5:86:e8:ba:33:1d:
                    60:17:71:f1:dc:0b:04:82:0f:f2:ef:ed:e8:45:be:
                    13:10:b8:c4:92:8b:d1:d6:15:38:a2:51:bf:2e:73:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EE:6F:F0:6D:0A:54:4C:38:C0:63:D3:6E:DB:AC:0D:AF:20:C8:A1
            X509v3 Authority Key Identifier:
                keyid:04:85:51:C3:DC:6E:9D:E6:55:0D:B1:2F:34:D5:E3:DF:B6:65:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/048551C3DC6E9DE6550DB12F34D5E3DFB665094A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/3137392e3130392e3131392e302f32342d3234203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:77:31:7e:bc:4c:6d:f8:d6:4c:da:38:f6:ec:7d:c0:85:
         15:69:01:63:ac:9b:a6:76:f7:b0:e0:2f:33:6b:a7:27:44:45:
         a1:3a:6a:42:5b:75:f4:37:99:c4:cb:05:8f:dc:c6:c9:90:e4:
         f2:48:8b:f6:7c:a6:dd:d8:3c:02:eb:56:8c:b2:d0:ab:4a:ff:
         3f:69:69:ba:bf:29:16:70:72:67:3a:29:0c:3a:f7:3d:2c:73:
         4e:38:39:00:eb:71:1f:2c:46:3d:fd:26:aa:eb:47:ad:6b:3b:
         3d:6c:85:6f:6d:28:9e:e1:53:d8:f2:f8:47:11:30:66:e4:a9:
         ae:6d:b4:7b:6b:b2:bf:fa:ef:b6:5f:99:61:2a:f5:76:c8:c7:
         8e:fb:8e:23:62:21:b9:ce:c5:87:1b:49:a6:14:d6:e4:7f:b8:
         ca:31:38:f4:7a:a6:f3:7a:af:1f:ff:02:0e:a5:2e:90:19:e7:
         08:33:60:18:c1:bb:84:e4:72:4c:1c:2a:e7:f7:75:f4:b7:c8:
         c2:b9:85:d3:42:b6:68:ca:ed:80:c2:e5:3a:93:4d:1b:27:39:
         a0:3c:53:63:ba:a9:f5:55:82:79:31:68:08:c9:fd:3c:07:dd:
         7c:39:46:b6:ab:07:ed:72:89:9a:64:dc:de:95:29:f4:15:42:
         b6:0e:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:41 2026 by rpki-client