Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa
File:                     3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa (raw, json)
Hash identifier:          51GQ1MuDvwFXKgtgMcgn0dJu/Ju/FCTJ8jm00erf4no=
Subject key identifier:   D6:E5:78:43:6B:ED:A2:6D:11:4E:D5:C0:47:05:C1:D1:B6:25:04:AF
Certificate issuer:       /CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
Certificate serial:       29F5B6EF5C4D69EC848C50BD3EEB30FE499829C5
Authority key identifier: 03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa
Signing time:             Wed 21 Jan 2026 20:39:58 +0000
ROA not before:           Wed 21 Jan 2026 20:34:58 +0000
ROA not after:            Wed 20 Jan 2027 20:39:58 +0000
asID:                     262973
IP address blocks:        179.108.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl
                          rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:b6:ef:5c:4d:69:ec:84:8c:50:bd:3e:eb:30:fe:49:98:29:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A9E06E12D2EC20EABA200A56EC6C725AD76438
        Validity
            Not Before: Jan 21 20:34:58 2026 GMT
            Not After : Jan 20 20:39:58 2027 GMT
        Subject: CN=D6E578436BEDA26D114ED5C04705C1D1B62504AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:82:47:a7:4e:61:9f:a8:a7:e4:ac:f3:16:
                    76:6b:9f:50:8c:16:13:6d:4e:82:44:a1:3f:68:13:
                    ea:d0:e6:5e:61:1b:31:30:74:9f:9c:e1:5c:b0:64:
                    63:94:94:0f:f7:09:0b:c7:4e:66:49:9a:99:b8:4d:
                    e6:f0:27:02:6b:b3:dc:ea:b3:9f:8a:24:53:ea:74:
                    11:c5:d4:87:b5:f4:a6:09:65:34:bb:fb:03:9e:79:
                    8f:28:fd:fb:02:3b:50:07:bb:15:19:0e:61:7e:95:
                    18:1c:c3:3c:bf:50:14:42:9c:72:f8:b0:63:f0:87:
                    3a:72:d3:b8:61:cb:1c:db:0e:4e:ff:5f:08:37:69:
                    16:b2:fa:b9:37:8d:b9:a8:67:77:ef:46:f0:be:e6:
                    78:ae:35:b2:49:f2:63:eb:8e:5a:b3:32:d8:7a:10:
                    da:1b:5e:32:44:cb:e3:24:21:cb:1b:d8:23:33:b6:
                    24:0f:19:b7:cf:95:a3:fe:7d:21:71:e9:b2:6b:2d:
                    51:b3:ec:9f:b0:5c:7d:de:c7:f2:8e:c5:b0:5a:61:
                    f3:e6:ea:45:59:86:22:83:ce:2d:75:33:9c:fa:2b:
                    14:93:00:84:67:6a:9c:20:84:c8:44:4f:45:b3:c0:
                    b5:0a:f9:bb:42:6a:01:19:ac:8e:8b:66:4f:3e:de:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E5:78:43:6B:ED:A2:6D:11:4E:D5:C0:47:05:C1:D1:B6:25:04:AF
            X509v3 Authority Key Identifier:
                keyid:03:A9:E0:6E:12:D2:EC:20:EA:BA:20:0A:56:EC:6C:72:5A:D7:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/03A9E06E12D2EC20EABA200A56EC6C725AD76438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03A9E06E12D2EC20EABA200A56EC6C725AD76438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESpp5TfSTHsvHhz6otvH5ZvY1yiNMjXfPwqxiqTDYCNm/0/3137392e3130382e3135322e302f32332d3233203d3e20323632393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:e5:ae:c0:66:2a:d5:fb:86:9e:6b:76:33:2f:ad:f3:0a:
         52:67:d1:e6:64:5c:10:06:7c:6d:ce:7d:0c:a2:24:20:4d:f8:
         bb:d6:32:04:5d:45:c6:43:e2:89:d5:05:de:77:5f:5b:4f:99:
         9f:68:db:7d:37:a8:2e:ec:4d:08:75:91:63:15:ad:02:e2:e7:
         ab:23:8c:cf:6a:10:7a:81:fa:33:75:a4:42:05:a7:4b:d7:f1:
         31:8b:ec:47:51:9b:80:52:89:b9:3d:d3:7f:d1:ca:24:a7:64:
         aa:70:7b:30:b3:a9:63:af:74:ed:1a:43:1f:d5:44:a2:05:bd:
         04:39:4b:05:01:57:31:fa:0b:fc:72:11:5e:73:48:94:03:26:
         8d:99:7c:f6:cf:8e:20:3b:9c:a1:27:6f:1f:70:f8:c9:fc:01:
         dc:bd:cf:f6:79:46:2c:2c:a1:67:4d:23:17:b1:90:f9:7d:10:
         31:bc:84:f6:80:2b:ce:27:96:86:0f:2e:be:9d:83:b4:7e:2d:
         52:7f:cd:5e:5a:57:be:24:73:52:55:b6:5c:b9:02:a7:82:2d:
         56:f3:b8:c2:92:b6:c0:7e:d9:51:13:81:08:61:42:a2:94:be:
         9c:c1:67:c5:81:56:ba:46:c9:1f:e2:8d:ff:46:27:d7:72:22:
         b1:3c:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:30:46 2026 by rpki-client