Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235302e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235302e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          Vhg2Y/6pzf30fbBkAyVFdZYClEFdyWooX6nISBGLQaw=
Subject key identifier:   25:83:68:2D:85:92:59:18:37:D3:5A:C8:ED:DC:87:EF:B0:08:1A:88
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       03F294E99BDB850E0333252D293F8E044F824630
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235302e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:12 +0000
ROA not before:           Wed 11 Mar 2026 19:08:12 +0000
ROA not after:            Wed 10 Mar 2027 19:13:12 +0000
asID:                     28252
IP address blocks:        179.189.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f2:94:e9:9b:db:85:0e:03:33:25:2d:29:3f:8e:04:4f:82:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:12 2026 GMT
            Not After : Mar 10 19:13:12 2027 GMT
        Subject: CN=2583682D8592591837D35AC8EDDC87EFB0081A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:d3:22:40:39:87:a2:e3:94:62:3c:85:7d:
                    e6:3f:b7:e3:11:3a:ef:ae:4e:2a:3c:52:90:95:76:
                    57:0f:08:91:6c:a2:83:10:b2:5b:2b:93:00:5e:4f:
                    7a:6e:c9:3c:fa:80:01:13:5c:14:3f:a6:4d:42:ef:
                    20:ce:91:2f:20:3b:e6:6d:25:d6:cd:15:bb:1c:49:
                    c3:7a:0d:61:b1:6d:5f:cb:16:42:ea:13:47:6f:f1:
                    78:93:9a:99:d4:85:04:91:20:e1:a9:75:3c:25:f9:
                    be:af:29:eb:e0:25:80:c4:78:9a:1f:86:61:0b:bb:
                    6b:60:7a:a9:a0:a1:a1:43:8d:39:d3:69:db:b2:f7:
                    bc:78:44:2a:ff:f7:cd:30:62:fb:5c:fc:7a:29:5e:
                    2b:da:9f:0a:56:22:b9:c7:c9:91:13:11:96:ac:d0:
                    fc:77:09:16:0e:ec:be:ef:87:ff:12:8b:22:52:f9:
                    03:19:14:0a:47:5a:0f:85:16:16:f0:ad:c7:7f:3f:
                    eb:b5:2b:46:2f:be:d8:62:0d:53:00:13:83:68:22:
                    06:bc:4f:4a:3c:9a:c6:e0:01:59:0f:33:de:40:ca:
                    b7:4a:31:be:1c:89:cd:ce:f4:71:44:1b:56:7c:0a:
                    c6:f3:f8:7a:dd:b4:41:e6:c0:22:87:21:27:40:77:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:83:68:2D:85:92:59:18:37:D3:5A:C8:ED:DC:87:EF:B0:08:1A:88
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235302e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:bf:08:e0:01:6b:56:95:82:cd:d7:97:20:33:cb:b6:e9:
         a5:34:fd:73:c4:10:a4:01:54:63:3c:bf:06:bb:21:af:8f:a5:
         34:1c:61:05:8c:fb:0e:26:22:55:db:a7:92:d2:37:62:82:18:
         c6:86:0a:8d:54:73:b1:7a:dd:41:54:d3:3b:82:cf:c8:0e:d8:
         d8:94:ca:84:e9:0e:a0:fb:da:2e:ce:ec:3e:44:89:22:ca:31:
         eb:55:26:82:ed:77:7a:1c:9a:c3:c1:73:9c:b9:ef:92:fd:6c:
         2e:d3:a8:e3:e7:28:90:13:52:77:1c:54:36:8f:f9:37:e7:ed:
         36:db:ad:e0:7a:30:4b:03:d3:5f:29:7c:05:50:19:f1:24:20:
         4e:06:99:5d:0d:55:9b:94:40:d7:0f:17:60:47:8e:eb:cd:03:
         35:2f:81:51:f3:34:60:88:94:8a:1b:a2:4b:93:40:d6:20:e7:
         ba:40:25:b8:cb:ae:a0:6f:50:c6:1c:31:81:e7:6f:2b:34:64:
         54:bc:2c:0a:56:38:81:a7:5d:c6:87:ed:8b:5c:49:a3:cc:2c:
         1c:02:52:00:d0:a0:3c:ee:97:7f:10:2a:18:28:e5:da:10:b6:
         b7:1d:fb:5a:75:cb:55:40:cf:18:87:55:76:05:2a:00:0f:c5:
         d2:7f:16:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:31 2026 by rpki-client