Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
File:                     3138372e39342e3131322e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          kNwCacW7AKfuMqeMd0kesM2Z9mPKxYz3AbNpwQ2SecQ=
Subject key identifier:   AA:15:6F:A3:D3:56:34:74:DB:7A:7C:DD:59:99:CF:19:6E:23:C6:C3
Certificate issuer:       /CN=79F14A3C86D9D72492B68D319F7567646C1907E3
Certificate serial:       15469D3BD2FB4398F76CDB50D2DA328572DAE947
Authority key identifier: 79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 14 Apr 2026 13:27:24 +0000
ROA not before:           Tue 14 Apr 2026 13:22:24 +0000
ROA not after:            Tue 13 Apr 2027 13:27:24 +0000
asID:                     28658
IP address blocks:        187.94.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl
                          rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:46:9d:3b:d2:fb:43:98:f7:6c:db:50:d2:da:32:85:72:da:e9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79F14A3C86D9D72492B68D319F7567646C1907E3
        Validity
            Not Before: Apr 14 13:22:24 2026 GMT
            Not After : Apr 13 13:27:24 2027 GMT
        Subject: CN=AA156FA3D3563474DB7A7CDD5999CF196E23C6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:09:a0:f8:09:50:ff:a7:1c:b5:90:f2:49:
                    26:4e:50:92:f1:0c:f2:16:5d:b0:88:31:68:34:9a:
                    6f:45:25:59:ce:ea:35:d3:0b:73:6c:6a:aa:f6:03:
                    a1:87:87:a2:41:31:8f:23:d3:8d:2d:64:7e:c8:6a:
                    b1:fc:ad:08:89:58:34:00:fc:28:b5:17:96:e5:9e:
                    37:89:0f:59:c1:03:ba:ae:aa:59:a5:3e:7b:29:99:
                    0b:66:dd:4c:00:eb:f6:6d:39:42:87:e8:f0:4a:18:
                    e8:9b:c3:98:06:f0:e0:6f:55:6f:ad:96:c9:59:6e:
                    8a:e2:7c:21:59:3d:fa:0b:cb:05:d6:71:4f:5d:51:
                    f5:ec:d9:24:0f:e9:af:8d:9b:bc:f9:13:69:6a:89:
                    0a:1d:39:48:4f:78:a9:49:18:45:2e:17:dc:48:7d:
                    67:29:f2:56:e0:86:ce:8e:dc:fc:78:a7:ed:03:f0:
                    b4:87:93:fa:11:c0:35:fb:6a:74:b0:ef:64:b7:a7:
                    2c:dc:59:2e:f0:b2:94:6f:73:5e:2f:4c:d8:12:3c:
                    fa:63:29:88:0e:f1:80:74:bd:71:11:5a:fe:8c:7b:
                    c5:99:05:96:8d:29:df:10:8c:0f:fb:b9:9a:5f:ec:
                    ad:f1:03:05:26:bd:85:1a:a7:bc:63:8b:e2:b5:ee:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:15:6F:A3:D3:56:34:74:DB:7A:7C:DD:59:99:CF:19:6E:23:C6:C3
            X509v3 Authority Key Identifier:
                keyid:79:F1:4A:3C:86:D9:D7:24:92:B6:8D:31:9F:75:67:64:6C:19:07:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/79F14A3C86D9D72492B68D319F7567646C1907E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79F14A3C86D9D72492B68D319F7567646C1907E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e39342e3131322e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:22:8b:20:25:d3:cd:7b:40:45:2c:09:49:29:01:89:8b:a7:
         29:59:fb:61:5e:c5:21:93:af:ec:24:db:f4:1c:f9:2b:42:d0:
         b6:b4:c0:2f:8b:ac:a4:b1:b2:2b:2f:c1:53:7d:1d:55:8a:09:
         89:c9:9b:02:86:c2:35:2a:cc:5d:33:20:d0:ad:e9:ec:42:17:
         9e:56:97:24:dd:90:22:d1:5c:b0:78:9c:e0:68:e2:7a:79:0a:
         a9:f4:fb:2b:c8:aa:13:d0:9c:5f:0a:1f:66:6d:72:69:83:34:
         3a:48:3e:48:a5:d7:36:e8:e5:c8:8e:99:00:22:f9:7e:ee:b8:
         34:eb:0c:3c:a0:dc:5d:0b:99:f6:96:2b:b2:31:48:d8:7a:80:
         fe:32:bd:43:f8:0e:9d:93:a2:09:00:2c:a4:97:33:5c:10:32:
         10:55:cf:bf:00:a4:f6:cd:f0:8d:19:14:26:a1:16:23:5a:89:
         fc:fa:e0:b2:65:f1:ed:0d:ea:bf:b6:b0:8a:bf:c0:d0:7a:9f:
         86:5b:70:65:45:8c:bc:24:44:d8:73:00:c7:f1:63:0a:b4:f6:
         1d:be:31:87:df:d7:2c:19:69:94:7a:61:92:e2:d8:d1:23:73:
         8f:43:85:f5:3c:12:88:b6:48:99:54:95:ee:19:de:77:12:59:
         7c:35:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:40:51 2026 by rpki-client