Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234362e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3234362e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          BAg2KCi2r+6PfuydhrsPMOtHWLWZYcJaVbjx6Z9cvrM=
Subject key identifier:   83:29:D1:BC:CD:02:ED:BE:BE:0C:08:37:AE:4E:3D:E6:58:C4:B9:8A
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       2C84CA473A132F16154C868FD539F959F4B98D17
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234362e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:13 +0000
ROA not before:           Wed 11 Mar 2026 19:08:13 +0000
ROA not after:            Wed 10 Mar 2027 19:13:13 +0000
asID:                     28252
IP address blocks:        179.189.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:84:ca:47:3a:13:2f:16:15:4c:86:8f:d5:39:f9:59:f4:b9:8d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:13 2026 GMT
            Not After : Mar 10 19:13:13 2027 GMT
        Subject: CN=8329D1BCCD02EDBEBE0C0837AE4E3DE658C4B98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:81:95:fd:c5:9f:74:44:92:b9:2e:eb:21:
                    3f:85:c7:53:ad:c3:bf:4e:ff:79:00:73:99:db:16:
                    67:60:db:f5:81:1b:11:a9:99:b2:4c:93:1d:03:3e:
                    6c:e8:ca:6a:63:cf:43:d8:67:e8:59:8b:e0:5d:1d:
                    7f:3f:6b:56:a5:b5:20:92:46:ac:e7:91:8b:32:12:
                    bc:45:80:52:05:72:71:99:f3:00:bc:ac:b4:c4:57:
                    52:26:5d:df:5e:f1:d8:72:dc:eb:c6:62:b9:30:10:
                    9a:bd:9c:ce:b8:10:73:64:b7:83:71:0a:b5:d2:f5:
                    bd:97:36:de:5e:56:5d:fd:11:eb:b7:30:fd:d1:07:
                    88:5b:9c:2f:90:4c:45:df:6a:2a:2c:76:d1:fa:17:
                    8d:e4:50:09:b0:a3:0d:24:a0:71:b9:70:a2:56:49:
                    19:02:88:e6:08:37:d6:0d:e3:49:73:ef:74:8a:a7:
                    6d:0e:0a:06:a4:8d:eb:1b:7d:ca:5b:a3:6d:c1:b1:
                    6a:cf:9c:be:e2:68:f4:fc:17:30:4d:4d:b9:d5:7d:
                    e0:cd:fb:1e:78:5b:29:1d:93:21:85:0a:24:00:66:
                    3a:ac:6c:81:2e:9f:57:85:88:87:6e:60:64:51:46:
                    f2:ae:14:87:fc:b5:02:e1:4d:fb:38:a9:bb:87:91:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:29:D1:BC:CD:02:ED:BE:BE:0C:08:37:AE:4E:3D:E6:58:C4:B9:8A
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234362e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:15:bd:58:af:f8:a1:03:43:e2:a4:74:e3:fc:bc:b3:20:65:
         de:2c:db:2a:a3:a8:ad:aa:5f:91:08:f1:f8:89:11:cd:d5:b8:
         5d:f9:d6:75:c4:ad:b9:56:af:75:ed:a7:9d:91:c5:31:e3:f8:
         d5:ef:c0:a5:1a:09:19:ee:56:f3:c1:b3:94:b5:19:1b:f7:a6:
         94:69:01:34:9b:c1:23:67:5f:ac:60:0a:8b:78:a4:a2:51:8b:
         57:4f:89:dd:65:ff:c9:92:25:20:75:86:9b:ff:30:8c:df:40:
         3d:66:3f:51:6a:1d:a8:27:8e:45:0c:80:40:30:4c:80:5f:7a:
         10:9d:b1:12:4a:cc:11:76:d7:33:0b:f1:d7:66:b9:07:ce:ad:
         f4:5a:57:c7:71:0c:d4:fe:cd:34:d3:59:e4:b6:98:ae:82:3e:
         2b:43:93:60:c5:e1:07:e4:8a:ef:a6:94:01:f2:f3:45:45:21:
         00:c8:b0:c9:02:6a:7c:27:85:2d:4b:93:10:a7:1e:ad:71:f6:
         6c:1f:89:42:19:05:4b:0f:25:71:c0:9b:3a:99:a2:ca:7d:c1:
         d4:6e:40:d3:2d:f3:fd:ff:66:33:fe:b4:68:d8:e2:66:10:04:
         87:3f:d6:76:f5:7a:ab:68:9d:4a:d4:40:b1:62:1e:ed:3e:b3:
         4c:49:cd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:19 2026 by rpki-client