Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          XuUaLvTnD1n1DXd6TTpavqdCjBrqd/yHkA8F7QY+1Ew=
Subject key identifier:   80:3A:05:5A:35:E8:0C:4A:8B:30:FA:4E:B9:FC:8D:FF:3C:23:CF:7A
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       56A4F9E513AA4CFC1039DD5C543FEEAE059E6809
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:18 +0000
ROA not before:           Wed 11 Mar 2026 19:08:18 +0000
ROA not after:            Wed 10 Mar 2027 19:13:18 +0000
asID:                     28252
IP address blocks:        179.189.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:f9:e5:13:aa:4c:fc:10:39:dd:5c:54:3f:ee:ae:05:9e:68:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:18 2026 GMT
            Not After : Mar 10 19:13:18 2027 GMT
        Subject: CN=803A055A35E80C4A8B30FA4EB9FC8DFF3C23CF7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:6f:0c:9c:6c:45:0a:23:17:3b:b6:dc:42:
                    e8:e6:2a:99:28:43:54:3c:ed:24:e4:77:c4:7a:9d:
                    31:23:47:8e:35:b7:c5:08:5b:2c:2c:ce:d1:ef:dd:
                    0b:f2:55:ac:b4:a1:b3:5c:5d:e9:36:4a:00:b2:7f:
                    cb:d9:4f:40:d4:d9:34:b5:fb:f6:75:2e:7d:73:8e:
                    01:e6:1c:7c:32:95:c1:f0:26:1e:4c:9e:66:9d:b1:
                    7a:a6:70:19:ab:62:86:3c:6d:64:dc:d1:ed:32:5e:
                    f0:fe:e2:e4:67:10:12:9e:c4:d1:5e:64:59:8d:75:
                    67:15:d1:b6:52:36:25:05:00:50:71:85:98:f9:71:
                    73:8d:46:09:f4:90:f8:c2:ee:46:39:5f:e2:09:33:
                    60:a1:74:b9:14:11:c8:61:4e:58:d5:dd:7b:83:c1:
                    c8:c7:0f:bc:cc:c9:e6:d4:c5:81:0c:55:c5:ed:51:
                    e3:03:56:5f:e3:6e:02:20:c8:fb:2b:a3:37:2f:76:
                    49:67:50:1a:5c:91:e6:8a:54:26:38:09:99:3d:02:
                    55:9f:36:25:5a:a1:e7:97:ba:4c:3a:ff:46:ac:d6:
                    22:f1:66:02:b1:94:21:a2:32:50:b3:28:1f:ce:38:
                    9b:96:3c:85:c2:0d:70:38:e4:d5:f5:56:c5:a7:4f:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:05:5A:35:E8:0C:4A:8B:30:FA:4E:B9:FC:8D:FF:3C:23:CF:7A
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234302e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:8e:11:87:39:69:6d:73:08:10:91:eb:b5:38:25:a5:17:
         fd:13:c6:f8:39:dc:e2:f6:36:bb:d3:7e:93:5f:f4:08:2b:56:
         be:07:4b:21:ce:48:c3:bf:04:3c:b6:de:99:3f:e8:ac:dd:6e:
         61:a6:cc:e2:b2:ab:38:bf:20:0c:7a:60:17:f0:e1:26:1a:7a:
         32:7e:61:e2:18:c7:62:96:67:9e:59:4c:12:99:be:4d:cd:f8:
         9f:b2:c3:07:49:a3:4d:72:5c:7f:85:68:fe:3b:d3:47:8c:6e:
         5c:f7:07:6d:5c:bf:91:b9:04:07:dc:5d:4a:cf:cf:9a:ea:78:
         a0:bf:db:54:85:f7:f9:d9:02:8e:78:4c:61:0a:3c:50:2b:da:
         9b:9d:60:ec:41:b6:82:a9:c0:74:91:69:3d:36:71:1d:af:a5:
         94:9f:2d:6e:4e:48:e7:29:3b:c1:2c:4f:35:e2:13:35:40:29:
         74:f4:f4:dc:0b:fc:b0:1e:f8:c3:36:34:fd:05:68:34:2f:dc:
         74:fa:52:63:0f:38:97:d8:e2:cb:9a:85:d1:72:fc:46:e7:a6:
         4f:ae:37:f2:6d:e7:38:14:6d:59:86:62:64:92:7d:15:cc:db:
         93:7d:91:35:bf:5e:14:34:f4:d2:f0:77:ae:7a:b8:b8:4e:ee:
         83:b2:18:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVqT55ROqTPwQOd1cVD/urgWeaAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MThaFw0yNzAzMTAxOTEzMThaMDMxMTAvBgNV
BAMTKDgwM0EwNTVBMzVFODBDNEE4QjMwRkE0RUI5RkM4REZGM0MyM0NGN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8W8MnGxFCiMXO7bcQujmKpko
Q1Q87STkd8R6nTEjR441t8UIWywsztHv3QvyVay0obNcXek2SgCyf8vZT0DU2TS1
+/Z1Ln1zjgHmHHwylcHwJh5MnmadsXqmcBmrYoY8bWTc0e0yXvD+4uRnEBKexNFe
ZFmNdWcV0bZSNiUFAFBxhZj5cXONRgn0kPjC7kY5X+IJM2ChdLkUEchhTljV3XuD
wcjHD7zMyebUxYEMVcXtUeMDVl/jbgIgyPsrozcvdklnUBpckeaKVCY4CZk9AlWf
NiVaoeeXukw6/0as1iLxZgKxlCGiMlCzKB/OOJuWPIXCDXA45NX1VsWnT06lAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgDoFWjXoDEqLMPpOufyN/zwjz3owHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvfAwDQYJKoZIhvcNAQELBQADggEBAHL/jhGH
OWltcwgQkeu1OCWlF/0Txvg53OL2NrvTfpNf9AgrVr4HSyHOSMO/BDy23pk/6Kzd
bmGmzOKyqzi/IAx6YBfw4SYaejJ+YeIYx2KWZ55ZTBKZvk3N+J+ywwdJo01yXH+F
aP4700eMblz3B21cv5G5BAfcXUrPz5rqeKC/21SF9/nZAo54TGEKPFAr2pudYOxB
toKpwHSRaT02cR2vpZSfLW5OSOcpO8EsTzXiEzVAKXT09NwL/LAe+MM2NP0FaDQv
3HT6UmMPOJfY4suahdFy/Ebnpk+uN/Jt5zgUbVmGYmSSfRXM25N9kTW/XhQ09NLw
d656uLhO7oOyGHE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:34 2026 by rpki-client