Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
File:                     3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa (raw, json)
Hash identifier:          YJdsM2UhEgVs2CXh4+H5FQbgLEobFf5sgGyvq5iaEFM=
Subject key identifier:   D9:A0:A7:C3:6F:45:06:DE:F1:21:27:14:9D:1D:C2:3C:E7:97:C8:32
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       61FCEC945E946ED5EDF2860C60A4DF8480A5C773
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:12 +0000
ROA not before:           Wed 11 Mar 2026 19:08:12 +0000
ROA not after:            Wed 10 Mar 2027 19:13:12 +0000
asID:                     28252
IP address blocks:        179.189.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fc:ec:94:5e:94:6e:d5:ed:f2:86:0c:60:a4:df:84:80:a5:c7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:12 2026 GMT
            Not After : Mar 10 19:13:12 2027 GMT
        Subject: CN=D9A0A7C36F4506DEF12127149D1DC23CE797C832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2f:74:84:ec:08:ff:cd:dd:5e:fa:c6:66:9f:
                    07:e9:f2:33:53:5f:d2:f9:cb:c8:30:02:95:ff:8f:
                    60:4d:ad:00:59:1b:44:87:4f:1b:51:d2:4c:43:70:
                    bc:cd:95:8f:bb:96:83:0a:0e:4d:a1:0d:2d:a3:42:
                    de:f2:99:bd:44:74:1b:7c:08:c6:a4:ce:d4:31:60:
                    31:86:87:a0:c3:1c:61:b2:c9:02:f8:61:f7:9c:fd:
                    e0:f1:14:04:9b:8a:54:29:85:89:a3:d7:3f:a7:13:
                    a3:c9:66:ab:74:eb:8b:40:d5:ce:5d:79:0a:37:ad:
                    d4:af:9d:d6:7d:84:09:ef:09:19:cd:35:b2:c8:b7:
                    8e:1d:3b:f2:57:ab:ef:49:8c:53:86:91:e1:45:98:
                    4e:82:bc:2f:21:a0:39:6e:ca:14:ea:d0:69:80:8c:
                    16:8c:c9:23:52:9a:9c:8f:3d:00:b6:5d:97:94:79:
                    66:e7:e8:b3:c4:3c:64:00:b0:61:d9:55:a8:a0:f3:
                    e8:91:c6:3c:a7:cb:28:6c:ab:15:92:dc:98:71:e5:
                    9c:75:34:96:fe:d4:c6:5d:05:b3:87:74:b1:b9:7d:
                    c9:05:ec:26:89:81:80:bb:ad:f8:76:21:2c:5b:80:
                    75:bc:df:52:fc:be:1d:19:bb:f3:f1:63:c3:82:f9:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A0:A7:C3:6F:45:06:DE:F1:21:27:14:9D:1D:C2:3C:E7:97:C8:32
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234342e302f32322d3232203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:d7:32:2d:14:79:a0:12:61:8f:17:e0:02:7f:d7:02:d5:
         b5:c6:f5:08:be:de:69:b0:f5:6a:1f:66:35:08:91:9b:29:7b:
         57:28:39:97:8e:b0:75:79:61:64:b8:d1:02:d6:1b:f7:9a:47:
         3f:67:7a:15:6d:91:bd:76:ba:46:aa:4d:03:ba:29:80:5b:a0:
         ab:15:e9:85:b9:9d:eb:0e:e8:d4:09:b3:f9:c7:ec:e6:3f:3d:
         2a:68:ae:33:b7:f5:96:b4:c3:75:6d:cc:f6:e0:c1:77:9a:59:
         e4:0a:09:7a:f9:6b:2b:f6:74:50:87:cb:0c:d2:e5:9c:1c:65:
         a7:a3:63:4e:fa:8b:c9:f0:8f:0f:bb:4e:22:3b:18:a6:5e:6c:
         d9:2f:11:c9:ed:ae:cd:70:26:4c:75:05:b3:61:b0:83:35:1a:
         69:2f:cb:c0:9b:dc:8a:83:cf:13:35:d1:c7:db:18:94:64:17:
         65:8f:93:a6:bc:b9:94:76:01:4d:7c:4f:41:28:8e:25:6a:d8:
         3c:77:84:12:91:34:b4:26:7d:f3:dc:10:e8:11:84:f0:78:27:
         d2:63:6e:c4:47:fc:dd:3e:4f:d5:f6:e6:14:e8:7d:23:ed:d5:
         21:fb:06:63:78:40:79:5d:15:eb:6f:39:5a:98:7d:1c:e0:48:
         1d:03:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:57 2026 by rpki-client