Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232312e302f32342d3234203d3e20323731313032.roa
File:                     3137392e34382e3232312e302f32342d3234203d3e20323731313032.roa (raw, json)
Hash identifier:          g9LTGi18g4XuEqPMstNL0F82J2kWw08mnirnoyYIPl0=
Subject key identifier:   06:F7:E4:B3:B4:5D:2F:AE:F1:9B:F3:4F:54:33:56:A5:6E:C9:5F:EE
Certificate issuer:       /CN=5A3B4E697A24607B6169C79F41A7C296B1430141
Certificate serial:       4D4685E097BC97B4F7C1046D90650DF1B3F68748
Authority key identifier: 5A:3B:4E:69:7A:24:60:7B:61:69:C7:9F:41:A7:C2:96:B1:43:01:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232312e302f32342d3234203d3e20323731313032.roa
Signing time:             Sun 22 Mar 2026 07:48:06 +0000
ROA not before:           Sun 22 Mar 2026 07:43:06 +0000
ROA not after:            Sun 21 Mar 2027 07:48:06 +0000
asID:                     271102
IP address blocks:        179.48.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.crl
                          rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 22:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:46:85:e0:97:bc:97:b4:f7:c1:04:6d:90:65:0d:f1:b3:f6:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B4E697A24607B6169C79F41A7C296B1430141
        Validity
            Not Before: Mar 22 07:43:06 2026 GMT
            Not After : Mar 21 07:48:06 2027 GMT
        Subject: CN=06F7E4B3B45D2FAEF19BF34F543356A56EC95FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e2:af:ba:98:c5:55:51:63:5b:7b:46:c7:af:
                    9c:b6:83:29:72:4f:08:cd:6c:89:f0:1b:09:5a:89:
                    ca:8f:d8:ea:a1:65:8c:61:43:90:3c:1e:b8:cc:54:
                    b4:9b:fc:44:50:70:31:d6:40:b7:2e:30:ef:73:d1:
                    86:18:80:f6:90:92:cb:e5:26:40:a5:72:f2:4e:8b:
                    fa:e9:47:08:b8:e3:a2:a7:65:8f:1a:c8:55:ea:af:
                    b6:15:ff:26:3e:61:6c:71:73:f7:63:73:78:07:9f:
                    f4:37:ef:df:b0:58:99:31:aa:0d:40:fa:59:88:ed:
                    a6:f7:df:79:4b:37:7c:18:5b:09:c3:cf:6c:fe:f8:
                    66:70:a9:c0:77:5b:62:a7:94:61:bb:c4:2a:2e:22:
                    34:42:8d:46:12:bb:90:41:61:c3:61:53:4b:86:f5:
                    65:c1:fd:05:18:1d:97:8c:15:7c:98:08:58:ba:0b:
                    ee:ae:82:65:31:0d:36:fe:0d:fe:2c:6e:14:b8:01:
                    c2:58:4a:a9:72:24:b2:64:d8:71:11:7e:05:a0:b8:
                    62:c1:5d:23:bb:b3:43:7a:7c:48:7d:d3:52:b5:a0:
                    1c:16:d9:12:2a:86:7f:83:f0:31:7f:52:d9:6c:43:
                    f5:c7:1f:95:ae:67:f5:c7:cb:ad:62:35:54:8d:fd:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:E4:B3:B4:5D:2F:AE:F1:9B:F3:4F:54:33:56:A5:6E:C9:5F:EE
            X509v3 Authority Key Identifier:
                keyid:5A:3B:4E:69:7A:24:60:7B:61:69:C7:9F:41:A7:C2:96:B1:43:01:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/5A3B4E697A24607B6169C79F41A7C296B1430141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3B4E697A24607B6169C79F41A7C296B1430141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/3137392e34382e3232312e302f32342d3234203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:49:e4:bf:21:5f:05:1b:cc:59:3e:87:ec:b4:31:94:33:3a:
         de:21:05:a9:1e:c2:8c:02:a1:62:ed:ec:2e:99:af:d5:60:5d:
         da:9b:72:5c:ae:97:dd:88:88:7f:e0:05:9a:8e:56:15:82:23:
         7a:fa:64:1a:b5:ca:86:cd:1d:00:9c:dd:0b:4c:7e:82:75:2a:
         87:84:4b:f7:8e:b9:0a:3a:85:3a:8b:f5:4a:eb:68:a1:28:8e:
         2a:ee:9d:e3:14:02:fd:1d:4b:54:88:2a:06:96:61:89:55:94:
         76:4a:9f:28:ac:66:40:1a:28:a1:ca:33:92:67:fb:27:87:48:
         e8:2c:9f:ff:52:86:08:99:53:ef:c6:2b:cf:0a:79:73:3f:2a:
         58:b2:42:b7:86:b6:7f:4c:16:69:a6:f2:09:0b:ff:97:97:ed:
         5c:ef:12:29:f1:55:0d:47:d7:0b:76:dc:5a:17:6a:ab:93:e2:
         53:f4:40:d8:1d:83:7a:67:47:f0:74:43:97:16:8b:0e:97:66:
         13:4d:74:63:0d:04:f0:cd:21:4c:2e:5c:8a:e1:e9:36:de:75:
         9d:c9:e2:80:f1:38:2f:ed:52:c9:fc:8a:51:c6:6c:0e:df:d5:
         d2:f6:4a:9e:0d:96:a7:30:ab:97:31:c3:c1:aa:dd:5c:58:f9:
         bb:ee:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:46 2026 by rpki-client