Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
File:                     3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          uUAnbSkLAn0k0knUYfzF8CN5LhcFtrBVBigfMdsFGTk=
Subject key identifier:   87:FD:B7:71:B4:0C:BB:31:04:9D:11:D2:59:E3:AE:05:C5:EA:72:1F
Certificate issuer:       /CN=ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA
Certificate serial:       6FA1368B9C9C4B8579077AFD3765EDFB5C905D66
Authority key identifier: AD:D3:AA:DA:AA:2D:A6:33:6D:E0:A3:2D:3E:E5:E5:9E:23:27:D3:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa
Signing time:             Thu 05 Mar 2026 19:58:01 +0000
ROA not before:           Thu 05 Mar 2026 19:53:01 +0000
ROA not after:            Thu 04 Mar 2027 19:58:01 +0000
asID:                     262374
IP address blocks:        179.127.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.crl
                          rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a1:36:8b:9c:9c:4b:85:79:07:7a:fd:37:65:ed:fb:5c:90:5d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA
        Validity
            Not Before: Mar  5 19:53:01 2026 GMT
            Not After : Mar  4 19:58:01 2027 GMT
        Subject: CN=87FDB771B40CBB31049D11D259E3AE05C5EA721F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:89:e0:61:4d:90:aa:90:32:27:1b:b7:c7:
                    97:bf:fd:3e:0d:79:ea:e6:b8:fe:d1:26:07:eb:ce:
                    5c:1c:24:5b:e1:4c:01:0c:63:75:16:9c:42:bb:b8:
                    c1:2f:0f:6f:8b:a6:fe:c8:42:58:da:93:66:d3:ae:
                    0d:2e:bb:8a:33:4a:8c:4c:a9:9d:4b:f9:51:a3:22:
                    9e:bc:1e:0d:e3:da:7c:42:82:b6:83:5c:ca:85:f0:
                    79:bc:49:b9:25:77:62:f6:40:65:e1:1c:44:11:16:
                    2e:6e:80:d0:c6:43:51:25:16:a7:4b:cc:12:42:00:
                    cf:b6:e5:bb:32:9e:28:e8:67:43:c3:12:83:e7:93:
                    24:4d:64:53:54:16:ea:30:2b:62:e8:62:43:62:44:
                    e5:2b:b6:b8:a4:5c:4b:ee:0e:44:dd:f7:d6:37:cd:
                    d4:27:44:09:6a:6f:cd:3e:0d:b3:16:6b:56:d6:b2:
                    32:42:56:a2:e0:bc:0d:39:97:9d:19:84:88:40:bf:
                    a3:3f:74:99:93:34:ae:e8:ad:b2:36:b1:98:4f:58:
                    0c:21:05:ea:e3:8e:c9:ed:f0:1f:a8:52:7a:a8:ae:
                    1a:ae:63:e1:a6:31:ba:09:01:e2:5e:f4:33:cc:e5:
                    02:6c:92:76:91:0f:7c:24:ac:fe:dc:dd:b2:1f:6d:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FD:B7:71:B4:0C:BB:31:04:9D:11:D2:59:E3:AE:05:C5:EA:72:1F
            X509v3 Authority Key Identifier:
                keyid:AD:D3:AA:DA:AA:2D:A6:33:6D:E0:A3:2D:3E:E5:E5:9E:23:27:D3:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADD3AADAAA2DA6336DE0A32D3EE5E59E2327D3BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3137392e3132372e3132302e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:eb:de:14:90:28:31:bd:ad:75:a4:d5:99:63:f7:a8:8b:f5:
         1b:1b:6e:f0:f7:c1:a3:b2:e6:39:4c:2f:9c:84:be:3f:dd:6f:
         fd:85:d9:90:5a:c1:e8:97:5d:27:b7:04:e0:29:4d:53:19:49:
         f9:ee:56:68:f6:30:e0:e8:b3:e6:b8:43:81:37:76:c1:3e:56:
         da:78:4b:b8:8c:7d:1b:bc:33:0c:5b:05:8c:12:8f:ee:c5:ed:
         cf:72:82:97:fc:16:d5:08:58:6e:a4:b5:44:73:d4:91:4c:83:
         47:6e:09:b3:21:8d:bd:85:10:c7:7b:56:27:e3:89:dc:2d:07:
         b6:70:12:64:bb:88:74:35:2e:d4:43:e0:52:d9:dc:4e:f7:e7:
         8d:2f:37:4b:15:9d:30:d1:50:04:42:aa:33:57:55:c6:7f:03:
         9b:85:d2:ca:43:5a:c1:bd:3c:c5:6e:2e:dd:79:5c:6a:e6:47:
         f2:e1:b0:1d:b5:32:4c:61:2b:73:d1:7f:ca:3f:34:c1:3f:7d:
         f3:95:a2:63:5c:92:17:12:66:08:7f:be:2c:e6:88:e4:37:e0:
         4d:97:6b:6a:35:f1:ab:7d:5e:b4:03:02:23:26:22:f8:24:3b:
         d8:e0:5f:41:5e:d9:0a:cb:ce:84:ee:2b:d1:78:eb:6f:c1:61:
         78:9c:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:51:47 2026 by rpki-client