Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa
File:                     3137392e3132372e302e302f31392d3234203d3e203238323039.roa (raw, json)
Hash identifier:          hoY4rIgAB2LtJqYjEa3wmtzXHbvV4BTvgejyqQqkne8=
Subject key identifier:   B5:14:83:2C:00:45:06:15:2F:A9:F4:73:C1:A2:AE:97:9E:82:50:5E
Certificate issuer:       /CN=B2E457E7500CCBE093B56886E0919B4530713E84
Certificate serial:       1DCE820E1789FB3927D5FD84D1AC1146995ACD2B
Authority key identifier: B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa
Signing time:             Tue 10 Mar 2026 14:35:59 +0000
ROA not before:           Tue 10 Mar 2026 14:30:59 +0000
ROA not after:            Tue 09 Mar 2027 14:35:59 +0000
asID:                     28209
IP address blocks:        179.127.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.crl
                          rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ce:82:0e:17:89:fb:39:27:d5:fd:84:d1:ac:11:46:99:5a:cd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2E457E7500CCBE093B56886E0919B4530713E84
        Validity
            Not Before: Mar 10 14:30:59 2026 GMT
            Not After : Mar  9 14:35:59 2027 GMT
        Subject: CN=B514832C004506152FA9F473C1A2AE979E82505E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:a6:31:a5:2a:94:8e:13:a9:50:af:cb:cc:
                    c6:9b:a4:35:c6:3e:54:93:f7:79:8a:20:74:41:b5:
                    05:d7:ea:ae:a4:73:a2:48:29:4c:b4:d7:0d:48:36:
                    35:ba:67:fa:a8:77:ca:bf:db:ef:3b:ad:40:4c:c9:
                    15:a1:38:d9:bf:af:b6:53:52:6f:94:9f:a4:b6:ed:
                    31:51:49:f3:a5:4d:89:29:ca:c3:da:c9:f8:ab:ac:
                    32:6d:5e:1e:e0:57:17:2d:df:33:ed:7f:f6:1e:66:
                    74:1b:03:14:10:56:e2:f3:d5:0e:7e:25:a5:3f:72:
                    ee:a8:f6:f9:47:51:ab:4a:58:88:b9:12:70:c2:fe:
                    c9:8e:51:af:8f:b1:cb:ec:5e:43:a4:e1:47:46:e3:
                    43:ef:d2:e5:45:fa:64:e2:10:6e:bb:21:8d:29:0f:
                    a3:61:5c:b1:8d:c9:a0:14:bb:92:31:a4:a3:b3:b0:
                    8d:8b:57:00:ee:9c:48:cb:bc:1d:cc:43:30:74:29:
                    2f:cd:9a:3a:b8:3e:69:9c:88:ae:70:96:e3:d4:67:
                    8a:0a:91:67:89:cf:de:16:99:e6:56:60:f7:2c:19:
                    8c:ae:d0:b8:8c:1d:e8:de:21:77:7e:72:e5:f5:94:
                    e1:9f:9d:f0:d7:26:df:a7:a8:95:bc:83:8f:d2:75:
                    98:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:83:2C:00:45:06:15:2F:A9:F4:73:C1:A2:AE:97:9E:82:50:5E
            X509v3 Authority Key Identifier:
                keyid:B2:E4:57:E7:50:0C:CB:E0:93:B5:68:86:E0:91:9B:45:30:71:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/B2E457E7500CCBE093B56886E0919B4530713E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B2E457E7500CCBE093B56886E0919B4530713E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/3137392e3132372e302e302f31392d3234203d3e203238323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:42:af:04:6f:9a:27:c8:c8:14:00:bb:fb:d0:ff:8f:79:e0:
         c1:58:a6:85:9c:ca:1f:b8:68:ca:2d:42:dd:4b:34:3c:1f:18:
         92:71:8a:5f:23:9e:58:86:df:11:a9:b7:a2:bb:88:11:87:c8:
         8a:3c:d2:50:20:6d:5b:b1:5b:31:a1:27:46:4a:13:9c:07:a1:
         71:67:4b:88:95:46:2d:be:05:30:5b:72:8b:b2:f7:df:6a:d2:
         75:f8:2c:34:70:40:26:ad:77:97:cc:16:9e:95:f3:6f:b4:5c:
         d7:0e:41:73:3d:18:4e:67:9e:f5:60:b8:35:a8:da:3a:ab:b6:
         3d:99:92:93:12:e1:f9:08:f8:9c:2a:98:eb:7a:bf:bb:fa:ef:
         93:17:d3:65:af:4b:4b:5b:f5:4c:27:79:36:71:34:f0:45:ec:
         f3:fc:7b:da:20:b8:a4:42:ca:75:dd:58:f4:c4:2f:e9:6f:5a:
         a3:e3:82:91:72:51:91:5e:7f:ab:3c:14:0a:2d:08:d3:1d:4f:
         e8:19:e6:08:e4:5b:45:a3:67:b5:50:31:31:aa:58:d4:59:00:
         46:5b:50:d8:b7:84:42:da:77:73:9c:3a:b2:38:ad:73:01:20:
         45:10:e4:7b:4f:7b:6e:32:3b:c2:2f:cb:dd:db:3d:02:3e:c0:
         cf:52:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:27 2026 by rpki-client