Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3137392e34382e39322e302f32342d3234203d3e20323731303731.roa
File:                     3137392e34382e39322e302f32342d3234203d3e20323731303731.roa (raw, json)
Hash identifier:          WgOd3BMeAHuT2FIwHrpf/SjgvHz2baOdD5DzHOIHBMo=
Subject key identifier:   A2:FF:20:61:71:5C:A0:06:F5:93:AB:1C:F7:33:62:51:64:00:85:93
Certificate issuer:       /CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
Certificate serial:       48343757203BB63FE4B35E38289D7125E549D512
Authority key identifier: 90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3137392e34382e39322e302f32342d3234203d3e20323731303731.roa
Signing time:             Wed 08 Jul 2026 13:25:25 +0000
ROA not before:           Wed 08 Jul 2026 13:20:25 +0000
ROA not after:            Wed 07 Jul 2027 13:25:25 +0000
asID:                     271071
IP address blocks:        179.48.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl
                          rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:34:37:57:20:3b:b6:3f:e4:b3:5e:38:28:9d:71:25:e5:49:d5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
        Validity
            Not Before: Jul  8 13:20:25 2026 GMT
            Not After : Jul  7 13:25:25 2027 GMT
        Subject: CN=A2FF2061715CA006F593AB1CF733625164008593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:80:9d:73:ae:54:c6:87:74:6b:81:b4:87:
                    e5:91:c2:6c:0c:d8:77:bf:89:97:61:7b:dc:ca:cb:
                    1a:e5:ba:71:57:78:d7:86:45:8b:56:3b:80:e5:ba:
                    c3:2f:bd:2b:9d:fc:44:fb:5e:3a:77:de:dc:e0:59:
                    50:97:3d:55:f4:47:7b:a4:e4:44:46:fe:34:6b:cf:
                    66:f6:5c:a1:11:38:12:87:9f:52:6a:35:4e:81:d2:
                    55:00:7e:4b:90:f3:e1:39:f6:e3:2a:49:96:84:fc:
                    ed:86:b6:1b:5b:ae:fd:e0:53:2b:23:0b:de:27:ac:
                    87:8f:b7:27:e6:70:77:2d:37:de:a2:de:0d:5f:2a:
                    29:a9:03:35:2c:5c:83:24:ae:90:65:a8:fe:23:5c:
                    83:10:6d:85:b4:c9:45:c9:8c:98:f5:f2:be:ea:50:
                    2f:fd:86:e2:96:6e:2f:35:0d:21:fe:a2:7f:12:87:
                    33:f9:d8:ab:7b:17:20:04:e6:87:a3:e6:dd:86:02:
                    7a:38:86:7a:59:c5:f7:ee:73:fa:c9:be:75:39:ca:
                    f6:31:db:2b:24:cf:15:89:60:ca:cc:5d:7d:6b:be:
                    af:4c:63:21:25:01:93:1e:9d:96:a2:50:7f:00:d3:
                    f2:85:c7:16:49:35:e8:67:9b:37:6a:3c:bd:b7:5e:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:20:61:71:5C:A0:06:F5:93:AB:1C:F7:33:62:51:64:00:85:93
            X509v3 Authority Key Identifier:
                keyid:90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3137392e34382e39322e302f32342d3234203d3e20323731303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:9b:9e:80:34:57:32:bc:0a:d1:a3:47:01:8b:76:f6:b8:
         f3:ba:e8:9c:56:b7:f3:56:6b:62:1b:2c:9f:37:38:88:59:8b:
         bf:50:fe:e0:cc:c9:f7:f3:bf:f0:f8:7e:e5:b4:59:73:9d:04:
         94:97:6b:07:3f:d7:12:dc:69:d1:7f:e0:9b:c7:3a:da:b1:db:
         a2:7f:57:23:03:84:1c:27:97:83:22:e8:a6:45:62:32:2e:5d:
         d2:e6:61:00:68:12:ab:e4:05:7d:aa:42:9e:1f:c3:06:32:08:
         90:7e:26:1d:d5:68:f2:35:74:ad:ad:2d:30:fb:17:f2:89:31:
         fc:12:aa:ed:b4:a5:b9:c5:d7:76:8c:46:5d:f9:c5:b5:16:c1:
         26:67:c2:ff:0e:49:dc:c5:13:99:d5:e9:19:70:23:45:fd:e9:
         a0:3a:23:10:56:9f:6b:97:db:aa:dd:f8:48:9c:5b:df:01:33:
         49:2f:13:6f:8c:95:8d:29:19:8d:22:52:7c:8d:43:62:0d:84:
         4b:95:74:61:1c:ee:d1:e0:5f:e0:a1:63:c1:66:62:fd:f1:63:
         0e:75:20:f5:9f:46:f6:c9:1e:b3:c9:20:52:fe:a2:cc:27:06:
         f9:56:6a:b0:0c:d6:de:73:c2:be:d4:3f:ca:28:15:3b:d6:86:
         fb:c1:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:55:05 2026 by rpki-client