Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
File:                     3138372e33332e39362e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          XaTStWRXeX8/HhslHiK/1Em7iYotMlim6W3yHJrfOU8=
Subject key identifier:   31:A9:87:E0:AE:00:B8:84:FC:C2:CD:AF:12:DB:4B:C5:EC:07:0E:31
Certificate issuer:       /CN=79F14A3C86D9D72492B68D319F7567646C1907E3
Certificate serial:       2677F9C47646EB0B5610ABB34DA34F9E4671D3C7
Authority key identifier: 79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 14 Apr 2026 13:27:18 +0000
ROA not before:           Tue 14 Apr 2026 13:22:18 +0000
ROA not after:            Tue 13 Apr 2027 13:27:18 +0000
asID:                     28658
IP address blocks:        187.33.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:77:f9:c4:76:46:eb:0b:56:10:ab:b3:4d:a3:4f:9e:46:71:d3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F14A3C86D9D72492B68D319F7567646C1907E3
        Validity
            Not Before: Apr 14 13:22:18 2026 GMT
            Not After : Apr 13 13:27:18 2027 GMT
        Subject: CN=31A987E0AE00B884FCC2CDAF12DB4BC5EC070E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:a9:b2:b8:86:48:44:df:70:d9:91:2e:ed:
                    1c:ad:28:17:51:4b:2d:44:ee:e9:c3:59:00:b6:f0:
                    a4:e2:59:cd:86:a9:18:8c:1d:49:a1:df:33:8a:fc:
                    8c:b5:78:fb:72:a0:01:bd:f7:75:09:7a:0d:0b:8a:
                    37:1d:5b:c4:fb:48:f8:81:fe:65:44:a0:a5:c6:b0:
                    17:e1:44:9c:38:b2:ea:0e:be:e1:ca:63:85:83:58:
                    c9:17:7a:8a:98:0e:bf:20:3e:76:b6:5b:fb:08:2f:
                    e0:75:94:d9:19:de:d2:76:71:11:b5:be:64:d6:4d:
                    b3:1b:63:ab:e8:45:14:8f:c5:6b:a2:25:d7:0f:23:
                    eb:b8:b3:b4:04:c8:62:65:bf:99:06:de:95:eb:d7:
                    4c:18:08:22:59:b1:a9:d9:77:ff:14:3e:b4:45:73:
                    c5:77:78:a0:58:83:da:ed:1e:07:17:9c:47:3f:d0:
                    ac:79:c3:1e:49:10:7c:7f:e6:a6:fb:e6:07:23:22:
                    52:70:d9:56:6e:9c:12:35:34:98:33:17:77:b8:c7:
                    9b:75:7e:0e:ef:5d:1d:ca:c6:5c:31:c8:fc:57:20:
                    cf:05:8f:48:c4:c5:82:09:9b:be:04:61:da:a5:f7:
                    65:7e:f1:14:ff:8a:06:40:c5:06:5b:35:24:9e:2d:
                    05:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:87:E0:AE:00:B8:84:FC:C2:CD:AF:12:DB:4B:C5:EC:07:0E:31
            X509v3 Authority Key Identifier:
                keyid:79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:ed:c0:0b:14:fc:cf:58:f3:80:dd:b1:4b:3f:c5:ce:c5:30:
         4d:6f:a5:07:f8:e8:ea:d2:fe:e0:61:a8:cb:c2:67:a7:b0:4a:
         ce:9b:96:e1:21:a2:1e:d8:63:27:d6:ea:3b:d5:c9:54:61:3a:
         73:47:33:4c:a8:b8:05:2e:7c:d2:6d:54:b5:3a:df:15:5f:19:
         d8:c9:df:f2:17:1c:c4:b7:bd:d0:5e:cf:fe:68:c1:42:a2:d5:
         98:f6:d6:e6:ae:ee:b0:4a:ae:3a:3f:dc:b6:89:68:ff:f3:cb:
         58:35:9c:17:c8:80:b9:8a:dd:82:e0:aa:71:cf:0c:b6:b8:24:
         50:10:f4:38:1f:38:5f:36:4a:f0:fd:56:dc:33:76:0d:88:49:
         3a:3c:13:46:19:75:c9:7b:88:4f:e0:90:b7:6d:45:10:11:fa:
         a2:90:16:3e:11:2a:97:d8:3e:e2:40:9f:59:fb:d1:e3:36:bd:
         bf:b7:df:b4:c7:75:49:1f:4f:8c:02:16:65:b0:3c:66:02:1d:
         17:6a:e2:b1:8b:11:f4:01:ac:2d:74:9c:aa:12:da:e2:24:05:
         17:05:cf:63:10:8a:89:3b:4b:e1:87:de:70:fc:a5:78:ab:fa:
         e9:82:05:71:ad:46:1c:1c:02:21:e3:0b:c6:6b:3c:c2:11:cf:
         9a:da:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:35:57 2026 by rpki-client