Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa
File:                     3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa (raw, json)
Hash identifier:          7GVq50uqOialc5Ec20rSuIV0GWw6WN3XlLW5XX0kmaY=
Subject key identifier:   3B:C0:AC:73:A8:A5:F6:6E:51:5F:C9:70:E4:39:BF:96:3A:FF:10:3A
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       289D746D6D32DFC514B8DFFA3ADDF7657AB6E60A
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:17 +0000
ROA not before:           Wed 11 Mar 2026 19:08:17 +0000
ROA not after:            Wed 10 Mar 2027 19:13:17 +0000
asID:                     28252
IP address blocks:        179.189.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9d:74:6d:6d:32:df:c5:14:b8:df:fa:3a:dd:f7:65:7a:b6:e6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:17 2026 GMT
            Not After : Mar 10 19:13:17 2027 GMT
        Subject: CN=3BC0AC73A8A5F66E515FC970E439BF963AFF103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c0:69:db:50:91:bf:42:28:dc:37:23:89:76:
                    08:24:72:e7:74:85:da:6e:65:1a:c3:83:9e:04:2f:
                    d6:30:56:b0:ee:25:cd:bd:c7:94:d4:56:a4:5d:85:
                    2a:32:cc:bc:67:93:16:81:69:33:6a:80:2e:f0:e4:
                    f2:f0:c2:84:35:e5:5e:09:be:e5:27:07:90:79:c4:
                    0c:ba:ba:84:86:4f:aa:ef:f7:31:78:a7:8b:1a:5e:
                    dd:9a:96:1d:f9:3b:20:a0:a1:05:be:3c:43:de:7a:
                    63:43:50:88:e6:29:17:5b:57:ba:15:e5:4e:f3:f3:
                    5b:91:ec:1f:a9:58:a3:cd:30:7c:76:00:b5:5a:7a:
                    7b:fc:6b:8e:05:e2:04:d1:7b:35:5a:0f:cb:95:90:
                    fd:76:ad:98:04:fa:76:52:3e:4b:69:0a:ac:61:7b:
                    46:61:92:3b:65:eb:01:aa:12:e7:c3:3d:e2:e5:9f:
                    15:08:7c:1d:49:c4:c3:87:5f:52:ef:b3:42:04:83:
                    5f:6d:3e:eb:cd:58:fd:16:64:c3:c4:00:a7:14:b0:
                    1b:20:80:e0:fc:de:15:4a:ea:d0:8e:f7:a0:74:fb:
                    ea:3d:e6:d0:5f:d5:a1:5b:bb:3b:55:f1:69:26:7b:
                    6f:15:32:ce:aa:2d:31:85:a4:dd:fc:03:15:8c:28:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C0:AC:73:A8:A5:F6:6E:51:5F:C9:70:E4:39:BF:96:3A:FF:10:3A
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3234382e302f32332d3233203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:e3:fe:4c:a8:b7:d6:27:07:b2:5f:1c:82:eb:df:d5:0b:
         93:c4:f6:87:1e:b1:1e:5d:a7:d5:e8:be:5c:00:98:94:b4:bf:
         9b:ca:6e:34:4e:e4:9c:a0:52:fc:c5:0f:e4:c6:7f:00:9d:41:
         fe:0c:f1:2f:cf:8b:6b:98:2c:78:c2:0f:08:7c:bd:66:84:1a:
         a4:03:d8:46:85:7c:18:b5:41:b2:84:f8:46:34:1c:7e:29:57:
         37:29:f6:74:1c:8f:37:2d:97:10:48:6a:a8:f6:ec:09:38:fe:
         ec:89:42:84:12:9e:10:2d:3c:d6:59:47:28:ec:ff:05:a8:6d:
         c4:6f:ce:6f:af:e7:dc:c7:01:c7:30:61:cb:83:f6:44:4a:20:
         c3:a5:d0:13:03:2c:ce:ff:32:4c:88:0d:ef:58:c0:2a:4e:1b:
         c3:75:e8:ea:29:4b:5c:38:72:2e:c4:fb:47:ec:6d:7b:27:95:
         84:9d:fc:69:8f:7c:8a:27:44:7e:88:52:c2:5a:9d:b8:9b:8a:
         9c:7a:4a:b7:fd:ee:cd:d5:50:96:61:40:da:e0:ec:84:11:f0:
         17:ea:ac:48:e7:a9:8e:6a:f4:5d:81:7c:14:5d:2a:33:81:b0:
         af:7c:4b:72:80:c2:d1:fe:4b:76:ac:6a:df:3b:d1:45:7c:f0:
         35:aa:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:17 2026 by rpki-client