Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235352e302f32342d3234203d3e203238323532.roa
File:                     3137392e3138392e3235352e302f32342d3234203d3e203238323532.roa (raw, json)
Hash identifier:          fdak0HOn05PM630m3YAh/qTPkCJavA420QQ+FssJGj0=
Subject key identifier:   9D:23:76:05:2F:B8:DB:0A:6A:52:4E:07:DC:CF:1C:D3:2A:2E:26:10
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       2AF464A9F08B758C58271041DFFE48C9AAE7CC97
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235352e302f32342d3234203d3e203238323532.roa
Signing time:             Wed 11 Mar 2026 19:13:10 +0000
ROA not before:           Wed 11 Mar 2026 19:08:10 +0000
ROA not after:            Wed 10 Mar 2027 19:13:10 +0000
asID:                     28252
IP address blocks:        179.189.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f4:64:a9:f0:8b:75:8c:58:27:10:41:df:fe:48:c9:aa:e7:cc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Mar 11 19:08:10 2026 GMT
            Not After : Mar 10 19:13:10 2027 GMT
        Subject: CN=9D2376052FB8DB0A6A524E07DCCF1CD32A2E2610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:91:73:bf:1a:8b:2f:be:37:fc:59:38:2a:
                    2a:c3:85:d6:18:f2:ff:87:1d:43:a9:5e:6b:c4:42:
                    7c:fc:7d:35:30:15:2f:c6:d0:83:fe:6b:5b:a2:6b:
                    95:8f:a5:08:d2:1e:ab:13:3f:73:a7:55:4c:69:c9:
                    20:af:37:5c:59:35:84:d0:16:1d:f9:c0:4b:3d:e9:
                    ed:92:cf:c1:23:41:93:cd:3f:20:70:39:c7:e7:74:
                    d6:cc:98:40:b5:4d:1e:cc:26:d6:a5:02:70:82:d6:
                    36:a0:75:24:ae:1d:e1:62:6f:eb:93:74:0a:7b:f0:
                    d7:70:69:e9:99:16:ea:9a:be:3b:c4:c8:b4:87:7a:
                    c3:d5:05:64:4f:d2:3e:55:0a:d5:71:26:b6:90:26:
                    a5:49:d3:77:49:95:5b:7a:20:5d:ab:96:f8:08:79:
                    dc:ac:02:7b:e3:41:58:d5:9b:f7:5e:03:02:75:a9:
                    43:cf:49:dd:65:8d:30:79:19:f4:41:5c:14:ec:33:
                    39:95:98:36:cf:c4:58:a1:f6:fd:74:b0:46:91:76:
                    8e:d2:8d:a1:7a:43:0c:4b:d0:40:19:eb:7b:3e:ac:
                    13:19:bc:b1:b3:62:93:fb:ae:2e:8a:36:0e:40:e1:
                    32:70:b1:68:fe:b3:29:11:a4:02:02:b4:4d:b8:cd:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:76:05:2F:B8:DB:0A:6A:52:4E:07:DC:CF:1C:D3:2A:2E:26:10
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/3137392e3138392e3235352e302f32342d3234203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7e:b2:d7:12:78:3a:33:11:7d:9a:40:5f:60:9a:d0:f0:3f:
         f8:91:a3:eb:79:76:20:26:1f:d6:b8:98:b9:d3:0d:06:ca:b5:
         77:4d:2f:6a:ec:a9:d2:14:77:cd:be:f4:96:0c:ee:6e:6b:b9:
         40:5e:b0:03:84:67:1d:73:14:85:f1:11:62:1b:9f:53:ed:c1:
         28:5d:ff:2b:2f:b8:15:db:a7:c0:1f:f8:54:85:72:84:23:21:
         f6:ad:6b:05:0c:8b:80:13:6e:1f:15:9d:bb:db:e0:e1:b5:1b:
         c4:b5:31:21:e3:3d:a5:59:07:15:f5:70:f3:83:bf:ec:36:36:
         b2:1f:7d:10:c5:a6:da:4a:a1:87:76:e5:82:39:4a:d0:e1:39:
         95:52:97:1e:27:17:73:5a:fc:3c:56:48:65:67:c9:11:0d:67:
         20:f2:e3:a0:bd:a7:c4:6d:b3:bd:59:04:c1:fb:50:7d:d9:20:
         98:0d:93:fe:98:e8:b9:6d:68:05:ef:50:cf:5f:a2:48:df:b7:
         e2:99:b1:46:69:41:b8:7d:b6:9d:e4:e5:4a:c0:d7:82:4a:90:
         1f:f7:b2:ac:9b:ae:01:7c:b7:a4:fe:11:dd:ae:57:c9:6c:ce:
         14:4c:23:02:f7:b2:e7:14:d8:b8:e9:b9:df:5e:64:70:8f:56:
         ee:6b:01:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKvRkqfCLdYxYJxBB3/5IyarnzJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY4RTJDNzNBQTdFQzlEQUIzMDZEODBCNUJBQTREQkVD
M0RDQUIzNDAeFw0yNjAzMTExOTA4MTBaFw0yNzAzMTAxOTEzMTBaMDMxMTAvBgNV
BAMTKDlEMjM3NjA1MkZCOERCMEE2QTUyNEUwN0RDQ0YxQ0QzMkEyRTI2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHJFzvxqLL743/Fk4KirDhdYY
8v+HHUOpXmvEQnz8fTUwFS/G0IP+a1uia5WPpQjSHqsTP3OnVUxpySCvN1xZNYTQ
Fh35wEs96e2Sz8EjQZPNPyBwOcfndNbMmEC1TR7MJtalAnCC1jagdSSuHeFib+uT
dAp78NdwaemZFuqavjvEyLSHesPVBWRP0j5VCtVxJraQJqVJ03dJlVt6IF2rlvgI
edysAnvjQVjVm/deAwJ1qUPPSd1ljTB5GfRBXBTsMzmVmDbPxFih9v10sEaRdo7S
jaF6QwxL0EAZ63s+rBMZvLGzYpP7ri6KNg5A4TJwsWj+sykRpAICtE24zdsxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnSN2BS+42wpqUk4H3M8c0youJhAwHwYDVR0j
BBgwFoAUFo4sc6p+ydqzBtgLW6pNvsPcqzQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3hTb0E0SkdDeHc0UVFIeEQySkNXWXFBaW5ucUIzZUVGdnFVNG4zbnZ1
bTMvMC8xNjhFMkM3M0FBN0VDOURBQjMwNkQ4MEI1QkFBNERCRUMzRENBQjM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2OEUyQzczQUE3RUM5REFC
MzA2RDgwQjVCQUE0REJFQzNEQ0FCMzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd4U29BNEpHQ3h3NFFRSHhEMkpDV1lxQWlubnFCM2VFRnZxVTRuM252dW0zLzAv
MzEzNzM5MmUzMTM4MzkyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzvf8wDQYJKoZIhvcNAQELBQADggEBAGZ+stcS
eDozEX2aQF9gmtDwP/iRo+t5diAmH9a4mLnTDQbKtXdNL2rsqdIUd82+9JYM7m5r
uUBesAOEZx1zFIXxEWIbn1PtwShd/ysvuBXbp8Af+FSFcoQjIfatawUMi4ATbh8V
nbvb4OG1G8S1MSHjPaVZBxX1cPODv+w2NrIffRDFptpKoYd25YI5StDhOZVSlx4n
F3Na/DxWSGVnyRENZyDy46C9p8Rts71ZBMH7UH3ZIJgNk/6Y6LltaAXvUM9fokjf
t+KZsUZpQbh9tp3k5UrA14JKkB/3sqybrgF8t6T+Ed2uV8lszhRMIwL3sucU2Ljp
ud9eZHCPVu5rAVY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:31:33 2026 by rpki-client