Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          8mwgjtRVAOhwLxXwn87zcI0asyV8sJL/THAQyic5/qs=
Subject key identifier:   F0:81:63:81:E0:21:F8:8F:A0:53:6A:0B:59:8F:02:79:92:56:0D:F5
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       47DA7BADFADB4EC1B184F44F9543DA485B1D9779
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:22 +0000
ROA not before:           Wed 11 Mar 2026 19:08:22 +0000
ROA not after:            Wed 10 Mar 2027 19:13:22 +0000
asID:                     28252
IP address blocks:        179.189.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:7b:ad:fa:db:4e:c1:b1:84:f4:4f:95:43:da:48:5b:1d:97:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:22 2026 GMT
            Not After : Mar 10 19:13:22 2027 GMT
        Subject: CN=F0816381E021F88FA0536A0B598F027992560DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:b7:4e:3c:54:0a:63:0c:a5:27:37:48:27:
                    d9:33:38:49:25:c6:ac:1d:a2:51:f1:48:a3:44:7a:
                    a1:7b:85:93:09:ec:d4:26:d0:06:27:24:6b:de:11:
                    12:4b:21:48:34:97:73:a7:ba:1e:e7:27:de:81:78:
                    e8:14:cb:cf:47:ab:46:7e:f7:77:17:da:76:ab:4a:
                    26:c3:61:55:46:75:69:3c:e1:15:91:bf:8c:5a:7c:
                    81:07:42:eb:bd:1d:51:fe:5d:ae:99:95:aa:ad:ee:
                    66:80:82:a2:bb:1f:74:f9:7e:7f:b2:40:63:f1:b3:
                    00:8e:d4:12:aa:ed:82:dc:90:17:2b:16:cb:78:4e:
                    0f:99:4d:6e:ef:45:21:dd:5a:d0:b9:a0:b9:0b:ff:
                    60:68:89:2f:62:17:c4:f1:d9:f9:8d:6e:7c:2d:f2:
                    78:c3:27:34:6a:59:95:be:4b:53:b2:63:52:0f:2a:
                    79:65:b6:15:bd:21:f6:07:11:06:12:5c:61:1b:9e:
                    6f:de:3e:6e:4d:99:ce:cd:cf:c5:32:ad:88:37:97:
                    36:5a:9a:2d:34:d7:88:a3:01:ab:6a:43:46:bd:21:
                    b7:06:32:29:dd:20:28:d3:70:92:13:d1:97:05:1e:
                    ae:7a:78:2b:12:c0:8e:8f:18:e0:d7:54:a0:98:d0:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:63:81:E0:21:F8:8F:A0:53:6A:0B:59:8F:02:79:92:56:0D:F5
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235342e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:44:36:de:51:ab:2b:c1:ae:96:d7:60:d1:8c:f1:e1:eb:53:
         a5:93:c0:e4:6e:17:b0:47:85:7e:fa:1e:53:aa:a4:1c:ef:c9:
         b9:55:72:3e:3e:8d:11:47:86:c6:4c:12:b7:41:72:b6:b4:a1:
         1d:91:83:58:42:d9:4c:4a:06:6f:47:9d:24:3d:f8:4b:67:7e:
         3d:08:d5:e3:17:a8:bc:83:26:ef:bd:3b:94:12:9b:47:35:a7:
         14:13:6a:82:43:06:8c:99:31:aa:18:70:95:ef:60:ee:d3:04:
         e4:14:b9:b0:32:c1:d2:b8:17:cb:f4:79:9a:5b:bd:8f:7f:85:
         9e:f5:81:96:82:6f:8f:f8:3f:4d:96:ea:e5:d5:89:e1:96:6b:
         c5:1e:3a:67:be:2f:5c:25:bd:08:d9:5c:97:ac:0e:2c:cf:8f:
         96:d9:51:97:4f:a7:99:ae:ed:7c:7a:81:22:f9:a8:a0:67:6d:
         52:be:55:d8:75:19:80:d7:55:8a:b7:2b:74:af:41:33:8c:c1:
         fa:bf:5f:2f:8c:99:d7:dd:52:86:47:5e:85:29:51:7c:1c:e1:
         d0:ba:16:be:af:c7:02:6e:e0:ac:82:7c:0c:52:8e:3e:39:1a:
         c9:83:c2:30:f2:a1:5f:f6:b8:de:e0:55:eb:6f:41:4a:41:2c:
         de:2f:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:27 2026 by rpki-client