Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e352e302f32342d3234203d3e203238323634.roa
File:                     3137392e3132342e352e302f32342d3234203d3e203238323634.roa (raw, json)
Hash identifier:          dZ8NYlHlnuH5EtNhkhZk8Qh4iEYW9rsOAMz6oXvjWKU=
Subject key identifier:   E9:B1:46:60:50:8E:BF:2E:DC:2A:B4:70:FD:82:2C:C9:9F:1F:0A:95
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       34557C01BCB1D0965D0A6EC408F79E69BFC1A298
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e352e302f32342d3234203d3e203238323634.roa
Signing time:             Fri 06 Mar 2026 10:48:04 +0000
ROA not before:           Fri 06 Mar 2026 10:43:04 +0000
ROA not after:            Fri 05 Mar 2027 10:48:04 +0000
asID:                     28264
IP address blocks:        179.124.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:55:7c:01:bc:b1:d0:96:5d:0a:6e:c4:08:f7:9e:69:bf:c1:a2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Mar  6 10:43:04 2026 GMT
            Not After : Mar  5 10:48:04 2027 GMT
        Subject: CN=E9B14660508EBF2EDC2AB470FD822CC99F1F0A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:6a:f9:33:d3:0d:de:5d:4d:93:71:32:2d:
                    84:db:d8:49:d3:88:3b:55:3e:29:97:b6:35:f6:0d:
                    48:b0:42:7e:a6:c7:2b:af:ae:5b:9e:fa:eb:8c:ff:
                    2e:4d:62:1e:94:e2:d7:4a:10:b6:d3:00:8c:ff:64:
                    cb:d9:c9:62:cf:d2:d3:54:30:e5:dc:62:0e:f6:e5:
                    fc:9a:e6:5d:78:ad:f4:58:17:c0:ac:82:74:5a:8b:
                    dc:e1:db:28:a0:94:3e:ee:9a:c2:11:82:94:08:41:
                    b7:72:40:9c:5c:23:ec:b3:84:22:cc:a5:5b:49:79:
                    5f:66:72:aa:07:15:4b:af:8e:8f:00:db:58:f0:cd:
                    9b:ef:77:ac:22:e0:a7:01:ea:3a:e3:8a:00:aa:e2:
                    92:d6:e5:e5:22:cf:58:1c:c3:f8:27:fe:de:cf:77:
                    d8:9f:1e:00:56:20:9c:3f:62:22:e2:4e:ce:53:58:
                    56:b5:42:29:5d:94:44:ed:f9:be:11:96:16:ac:17:
                    53:14:7d:0f:07:bc:d2:f5:af:cc:b2:48:a4:78:66:
                    38:df:74:91:18:8c:d5:58:9c:91:90:9a:91:5f:4b:
                    bd:0a:13:84:f2:91:f3:1c:01:79:7e:0e:36:f6:22:
                    14:30:0f:0e:ed:e5:16:14:e2:b4:b6:7c:4c:5f:03:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B1:46:60:50:8E:BF:2E:DC:2A:B4:70:FD:82:2C:C9:9F:1F:0A:95
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137392e3132342e352e302f32342d3234203d3e203238323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:59:a3:88:e4:b3:fb:28:71:3c:cc:4d:42:ba:51:2c:75:
         a7:32:1a:60:81:61:e9:97:cf:cd:4f:f6:67:bf:ff:fa:c2:34:
         5a:17:25:18:ef:89:21:d6:46:2d:15:9d:00:a1:f8:da:f4:52:
         d7:70:2c:44:f9:ab:4d:37:69:5b:30:32:60:7a:a3:87:8a:f0:
         98:79:9a:c5:14:c1:7a:aa:e9:1c:d8:eb:e2:7f:7d:9e:b2:af:
         80:ce:ad:70:f0:28:ef:65:dc:97:39:c7:54:97:a1:e8:f2:a4:
         e6:3b:e4:56:33:e6:76:7b:8c:bc:8c:04:f4:9f:48:c5:1b:a8:
         d2:65:f6:f4:56:3e:ba:50:82:0d:72:4d:5b:05:44:d0:26:f7:
         18:8e:90:e7:51:2c:dc:9a:26:66:66:cb:3d:e0:86:3e:c1:bc:
         d7:ad:c9:cb:1f:c4:ca:0e:ae:fd:36:d3:44:60:c4:44:6a:07:
         4f:3b:36:e5:e4:63:3b:8a:b6:35:5b:61:89:20:81:4e:cd:81:
         e2:05:08:19:2d:de:d4:5c:ef:5e:fa:2a:95:44:67:54:74:aa:
         14:76:f4:c2:fd:14:bf:20:dc:dd:7d:59:b7:6b:2d:80:06:a7:
         64:1f:b1:dc:d7:3f:2e:8c:96:b6:6a:c2:5b:54:f7:b3:38:8a:
         da:2e:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:23 2026 by rpki-client