Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3232342e302f32302d3234203d3e203238363538.roa
File:                     3137372e3130372e3232342e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          hBR8ArAOZWyyWAjJELu7BybdobgfGgBtpuSDUNvRuGk=
Subject key identifier:   CB:F2:82:54:AD:72:A7:3A:6F:F8:61:1E:69:08:EC:FA:DA:37:58:A3
Certificate issuer:       /CN=79F14A3C86D9D72492B68D319F7567646C1907E3
Certificate serial:       2E55CD16BBFC738B22A84C80EF4349C830ABE8AC
Authority key identifier: 79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3232342e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 14 Apr 2026 13:27:09 +0000
ROA not before:           Tue 14 Apr 2026 13:22:09 +0000
ROA not after:            Tue 13 Apr 2027 13:27:09 +0000
asID:                     28658
IP address blocks:        177.107.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:cd:16:bb:fc:73:8b:22:a8:4c:80:ef:43:49:c8:30:ab:e8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F14A3C86D9D72492B68D319F7567646C1907E3
        Validity
            Not Before: Apr 14 13:22:09 2026 GMT
            Not After : Apr 13 13:27:09 2027 GMT
        Subject: CN=CBF28254AD72A73A6FF8611E6908ECFADA3758A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:b6:65:a4:e4:d6:be:ed:6c:97:d0:c2:31:
                    b2:5f:8f:49:ca:1b:cb:7c:b6:65:ff:83:9f:6d:e5:
                    39:2c:2e:dd:98:a8:76:2b:28:be:fd:99:32:1b:a9:
                    51:e7:c1:d0:3f:b5:04:b4:e9:be:20:e6:04:29:53:
                    aa:fb:0b:e3:59:5f:91:12:a1:5b:15:f3:46:5a:2e:
                    3e:48:a2:a0:7d:d0:80:5e:4a:aa:00:8a:c2:ec:85:
                    aa:25:6d:26:7f:a1:87:08:be:9a:c0:c6:d6:8e:24:
                    4a:37:c5:e7:65:da:81:56:37:a8:7b:25:4b:0a:46:
                    02:31:85:2b:98:7e:1b:cb:a4:1d:ed:c8:a4:f4:a7:
                    4c:eb:61:7e:72:e3:e9:19:4e:30:21:0c:f3:e0:1d:
                    c5:47:6c:33:a3:b8:5a:35:5b:e3:bb:54:74:6a:31:
                    37:8c:ee:f0:74:e6:20:dc:3e:c3:cc:0a:3c:fe:d3:
                    72:24:5b:9d:bd:3d:4b:94:b3:6c:11:76:22:b1:4d:
                    31:0a:14:7c:cc:2e:0e:9f:4a:86:d4:d4:73:83:c9:
                    be:f5:33:48:15:c0:3e:aa:d9:8f:dc:5a:55:1a:ab:
                    72:8f:35:ea:b3:ef:c6:8d:56:83:f5:d8:40:21:ea:
                    b1:6f:f3:df:f8:40:32:5e:9c:32:b4:a9:d7:a7:32:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F2:82:54:AD:72:A7:3A:6F:F8:61:1E:69:08:EC:FA:DA:37:58:A3
            X509v3 Authority Key Identifier:
                keyid:79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3137372e3130372e3232342e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:05:6a:be:e1:e8:30:7c:0c:28:d7:f6:89:67:ac:e9:b5:3b:
         09:9e:e8:0f:af:5b:f4:fa:83:88:f3:2c:ca:dd:f2:08:21:98:
         e6:b5:27:95:d0:23:8d:36:67:cd:c0:ad:43:05:2c:6b:3d:68:
         fc:cf:c1:af:4f:57:8d:1a:20:62:33:67:f8:31:df:2d:d5:be:
         1f:d7:2c:01:df:0b:41:e8:22:55:04:db:b5:29:5a:90:7f:7f:
         d9:c6:bd:51:79:08:b9:e3:69:3a:16:1d:14:81:af:4e:21:da:
         16:35:98:6b:62:16:e3:84:04:2e:cb:b1:64:e9:f7:cf:26:a2:
         14:ad:d2:d0:73:e4:c4:7b:d5:5c:7d:fd:50:59:2c:01:72:72:
         c5:68:8f:e1:07:fd:02:d6:5a:98:cf:22:fe:48:76:4e:32:6e:
         cb:fb:48:bb:fc:16:d8:67:d0:e1:a9:b3:3a:85:d7:07:b9:bc:
         df:6d:a5:fb:eb:1b:ca:d2:31:0d:66:1f:12:55:27:2f:29:ae:
         a2:39:09:1f:25:e9:93:87:b9:29:8e:00:e9:4e:19:12:c3:cc:
         19:2d:54:26:0e:cb:c6:0b:0d:8d:d0:72:fe:61:a0:e5:05:b8:
         ef:9f:01:26:83:6c:a5:07:ba:ac:2b:02:3f:03:95:90:40:e7:
         48:b1:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:58:42 2026 by rpki-client