Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          MIh6QMaod1MCjjsGPNBEpinYLV7ipQRPAJP5uM1IbV0=
Subject key identifier:   8C:A1:0E:DB:0B:4B:41:93:48:CC:A0:DC:96:6E:E5:37:00:C0:31:8C
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       651BD0CFEAE04295074C2AB0E9CB12FF6D455E4B
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:19 +0000
ROA not before:           Wed 11 Mar 2026 19:08:19 +0000
ROA not after:            Wed 10 Mar 2027 19:13:19 +0000
asID:                     28252
IP address blocks:        179.189.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1b:d0:cf:ea:e0:42:95:07:4c:2a:b0:e9:cb:12:ff:6d:45:5e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:19 2026 GMT
            Not After : Mar 10 19:13:19 2027 GMT
        Subject: CN=8CA10EDB0B4B419348CCA0DC966EE53700C0318C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1e:a4:27:d6:c9:93:e2:e0:11:28:e3:e0:17:
                    c7:31:19:d1:7f:66:31:5c:9a:50:e3:50:c0:bb:00:
                    ce:f0:f0:d5:b4:15:5e:06:48:1d:47:1f:c0:36:f8:
                    f1:bd:92:b9:79:6d:5d:17:8e:62:e7:f9:be:fd:25:
                    b8:89:59:08:26:fd:29:71:39:04:5b:db:f3:e9:06:
                    04:b0:65:5c:5c:ba:bd:51:61:80:88:35:96:dd:e2:
                    fc:26:dc:3d:78:d5:9f:39:48:15:ed:ed:ed:fa:c9:
                    3c:5b:ff:ee:11:c6:db:12:2f:73:6b:13:72:a3:a8:
                    b1:64:97:08:05:52:83:04:05:fa:bf:8c:64:45:25:
                    82:cf:cc:dc:b2:07:a6:6e:82:09:de:bc:e9:49:78:
                    ba:c9:ae:77:5f:f3:0c:97:02:a2:90:01:18:b2:c2:
                    d8:6f:a0:3b:69:a8:6c:fe:4d:c6:6a:b1:ed:d7:f6:
                    f4:c5:6b:71:79:5e:25:b2:1e:4c:82:88:57:fb:f8:
                    14:04:c6:95:30:77:f1:da:24:ec:b4:fe:95:75:72:
                    4e:17:12:63:28:47:cb:cf:00:3e:6b:dd:0a:ef:a3:
                    f4:2a:8d:f9:a0:53:c7:63:d1:19:de:4d:98:33:06:
                    9a:25:a3:bf:23:f5:3a:85:ae:f7:e8:ec:29:45:39:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A1:0E:DB:0B:4B:41:93:48:CC:A0:DC:96:6E:E5:37:00:C0:31:8C
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235312e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:9d:5c:40:f7:fa:9b:60:97:d8:ab:89:92:b2:92:53:c5:
         a9:90:ff:5c:51:d1:40:70:30:2f:6d:71:7b:f5:ac:77:5c:ab:
         8d:e8:e1:76:67:d4:f1:0b:52:fd:a5:60:91:98:4e:2b:8b:d5:
         0c:34:bf:da:87:6f:56:a5:a2:8e:d1:07:e6:5c:3a:b4:a8:a8:
         b4:23:1c:3c:f3:ca:d6:dd:6f:ab:03:dd:4f:ad:10:46:98:ef:
         85:7e:bf:25:1b:95:7e:63:55:a8:25:62:7b:25:90:88:25:53:
         56:37:00:bb:de:8d:17:f1:ed:3b:6f:64:e0:7e:6d:eb:a4:50:
         42:11:68:51:8d:db:87:ce:de:3e:38:0e:38:f7:3a:9a:4e:4e:
         40:42:0c:f1:c9:f7:ad:45:88:0b:0a:de:49:3f:94:30:b0:f3:
         6a:15:4e:ea:d3:b4:fe:7b:91:a2:ed:6f:e9:da:ff:b0:e6:c6:
         26:fc:92:49:16:ff:fb:12:12:c1:63:b5:47:b3:59:9e:43:e0:
         3e:c7:71:85:20:03:67:bf:3b:d6:e2:90:2a:a7:aa:c1:a8:fe:
         d8:9b:5f:c8:fc:df:9a:a7:43:2e:3a:30:ba:ba:35:6f:45:f1:
         03:25:41:ca:59:4e:1b:48:c9:0d:26:84:8f:21:c1:ce:bb:59:
         e6:e0:0f:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZRvQz+rgQpUHTCqw6csS/21FXkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTlaFw0yNzAzMTAxOTEzMTlaMDMxMTAvBgNV
BAMTKDhDQTEwRURCMEI0QjQxOTM0OENDQTBEQzk2NkVFNTM3MDBDMDMxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiHqQn1smT4uARKOPgF8cxGdF/
ZjFcmlDjUMC7AM7w8NW0FV4GSB1HH8A2+PG9krl5bV0XjmLn+b79JbiJWQgm/Slx
OQRb2/PpBgSwZVxcur1RYYCINZbd4vwm3D141Z85SBXt7e36yTxb/+4RxtsSL3Nr
E3KjqLFklwgFUoMEBfq/jGRFJYLPzNyyB6ZuggnevOlJeLrJrndf8wyXAqKQARiy
wthvoDtpqGz+TcZqse3X9vTFa3F5XiWyHkyCiFf7+BQExpUwd/HaJOy0/pV1ck4X
EmMoR8vPAD5r3Qrvo/QqjfmgU8dj0RneTZgzBpolo78j9TqFrvfo7ClFOZhXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjKEO2wtLQZNIzKDclm7lNwDAMYwwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvfswDQYJKoZIhvcNAQELBQADggEBAAXpnVxA
9/qbYJfYq4mSspJTxamQ/1xR0UBwMC9tcXv1rHdcq43o4XZn1PELUv2lYJGYTiuL
1Qw0v9qHb1aloo7RB+ZcOrSoqLQjHDzzytbdb6sD3U+tEEaY74V+vyUblX5jVagl
YnslkIglU1Y3ALvejRfx7TtvZOB+beukUEIRaFGN24fO3j44Djj3OppOTkBCDPHJ
961FiAsK3kk/lDCw82oVTurTtP57kaLtb+na/7Dmxib8kkkW//sSEsFjtUezWZ5D
4D7HcYUgA2e/O9bikCqnqsGo/tibX8j835qnQy46MLq6NW9F8QMlQcpZThtIyQ0m
hI8hwc67WebgD3s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:32:28 2026 by rpki-client