Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3130382e33322e302f32312d3234203d3e203238323031.roa
File:                     3137392e3130382e33322e302f32312d3234203d3e203238323031.roa (raw, json)
Hash identifier:          pGRF4mxhoLQ5kzY+UEEbZ60iOF0Z72OOx4Bgg2OVDI0=
Subject key identifier:   A5:73:5B:E7:F7:6E:44:68:00:C8:2B:22:4A:CB:9B:A9:1F:E9:B6:C2
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       7E0F48DC2AE861808F39267A6890EB73C8671009
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3130382e33322e302f32312d3234203d3e203238323031.roa
Signing time:             Mon 16 Mar 2026 12:59:07 +0000
ROA not before:           Mon 16 Mar 2026 12:54:07 +0000
ROA not after:            Mon 15 Mar 2027 12:59:07 +0000
asID:                     28201
IP address blocks:        179.108.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0f:48:dc:2a:e8:61:80:8f:39:26:7a:68:90:eb:73:c8:67:10:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Mar 16 12:54:07 2026 GMT
            Not After : Mar 15 12:59:07 2027 GMT
        Subject: CN=A5735BE7F76E446800C82B224ACB9BA91FE9B6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:91:3f:a7:9d:08:85:21:34:00:35:ef:bf:
                    54:db:9f:7b:99:0e:75:ce:65:8e:1a:23:f4:2c:a8:
                    d2:94:69:93:63:e2:84:9b:58:30:99:6f:28:b2:c2:
                    dc:9a:3c:fd:70:da:e4:7c:21:a8:99:15:30:31:fc:
                    9d:7c:d8:4b:b4:4f:2f:87:ac:bd:57:86:91:6e:76:
                    fc:c9:23:1d:30:7b:ac:10:4a:55:7f:77:17:9a:f7:
                    52:94:87:d9:41:1c:d2:94:3c:22:7d:85:43:23:cc:
                    ea:c4:35:4d:4a:6f:1f:63:d2:95:85:eb:e8:34:9d:
                    9b:02:85:e4:a6:76:00:97:2c:7f:15:c1:d6:8b:d7:
                    10:dc:87:92:77:74:34:7b:7c:e1:6c:5c:0e:a2:e3:
                    23:cb:2b:bd:f1:cf:a5:41:0b:a9:47:c8:5a:dc:75:
                    f5:51:e2:d7:d3:ad:9a:b3:24:3e:8f:57:a9:32:25:
                    d3:48:07:5d:ae:27:74:2c:a0:9a:0a:27:aa:bd:95:
                    77:94:c7:ff:25:68:8c:5b:89:74:3f:61:79:60:c1:
                    57:79:47:a5:b3:28:1a:8c:42:90:39:cb:b7:ca:35:
                    ce:24:38:d4:4e:bc:41:0d:b0:29:df:b5:e2:2f:d3:
                    e8:cc:10:bc:a5:91:a5:c2:34:07:1a:33:ba:2e:99:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:73:5B:E7:F7:6E:44:68:00:C8:2B:22:4A:CB:9B:A9:1F:E9:B6:C2
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137392e3130382e33322e302f32312d3234203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:97:f3:e7:5a:de:89:75:92:b7:02:c9:60:f6:16:02:bf:c2:
         f4:53:af:dc:e1:fd:a9:fe:c3:24:ad:68:c2:25:e0:e6:fa:f3:
         89:16:09:51:8c:f6:97:a9:4b:8f:ad:61:90:5b:d2:fb:1b:a5:
         1e:e2:88:86:79:b2:5e:8e:ef:ce:68:63:be:fa:25:76:ec:ca:
         df:2e:79:a4:d0:e2:e5:67:e0:b1:29:a0:35:b3:c8:7b:49:f4:
         5b:b2:72:dc:6c:6e:6f:d6:0c:14:41:d1:f9:49:f8:18:35:f6:
         d6:d4:85:dd:e1:2c:44:b2:ef:0c:3a:66:09:74:d6:38:c9:63:
         a9:67:f5:0d:1f:f6:13:31:9c:3d:2b:20:47:11:2f:d4:f0:da:
         ee:83:77:73:0a:8b:ef:71:c8:c5:66:b4:b4:f4:db:a1:90:61:
         2c:d1:1d:3d:83:ac:7d:bd:d0:32:d1:15:b7:a0:1c:4a:66:79:
         86:22:3d:9f:34:1a:af:18:2b:5e:4e:f8:d9:93:d8:b5:59:64:
         ff:c0:f4:40:4b:08:85:80:10:31:6c:9d:bb:64:2f:00:ef:59:
         cb:3b:2a:3a:ba:74:c1:ab:c0:d0:7c:95:e0:64:89:e8:cc:d4:
         95:9a:0c:60:fc:d2:5f:34:be:b4:be:4e:e3:92:86:ac:9f:b8:
         05:4a:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:26:12 2026 by rpki-client