Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3232203d3e20323731373337.roa
File:                     3137392e3132352e31322e302f32322d3232203d3e20323731373337.roa (raw, json)
Hash identifier:          C2+HeslMgmYJSvHpELcoKGuZ7PK+NSTGUrPqfRlivTg=
Subject key identifier:   C5:AE:18:5F:98:18:B6:8C:62:45:6A:A6:90:07:32:31:73:F3:78:91
Certificate issuer:       /CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
Certificate serial:       5B3157E23D44E77B99EDE77EBAEF380DA506EE15
Authority key identifier: 92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3232203d3e20323731373337.roa
Signing time:             Wed 22 Jul 2026 23:36:07 +0000
ROA not before:           Wed 22 Jul 2026 23:31:07 +0000
ROA not after:            Wed 21 Jul 2027 23:36:07 +0000
asID:                     271737
IP address blocks:        179.125.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl
                          rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:31:57:e2:3d:44:e7:7b:99:ed:e7:7e:ba:ef:38:0d:a5:06:ee:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BA065C85B5C2643E0FD27F0C42051FDB399AC5
        Validity
            Not Before: Jul 22 23:31:07 2026 GMT
            Not After : Jul 21 23:36:07 2027 GMT
        Subject: CN=C5AE185F9818B68C62456AA69007323173F37891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:93:39:77:e4:1d:3e:06:00:45:c0:29:69:
                    24:2f:38:e5:a8:d6:57:41:94:00:c9:a6:07:9d:fe:
                    fc:2b:2d:ef:9e:87:e6:12:2f:fb:bf:27:52:b1:32:
                    ea:8c:50:d2:db:59:46:31:35:54:dc:09:2a:5c:f1:
                    eb:bf:71:46:00:30:f0:67:13:fa:49:57:00:50:3e:
                    d6:47:2f:6e:5c:01:21:1c:0c:df:cc:82:9f:88:e7:
                    a0:b2:bd:47:c1:d5:5c:2a:ef:70:53:5b:b7:7c:3b:
                    9a:fd:3d:4b:88:ab:08:7d:8d:23:74:0f:a8:d7:42:
                    34:43:ee:50:54:7c:56:d0:bc:70:1f:3a:11:05:68:
                    ad:e6:cb:25:a4:e2:da:5e:80:e7:f5:84:b4:b4:89:
                    f7:52:1c:ef:71:b2:3e:9a:e7:fc:52:73:26:09:a1:
                    f9:6f:d5:5d:79:41:e3:23:fe:7c:eb:79:34:af:c3:
                    8a:a2:f5:a8:10:57:78:d8:6f:7b:09:d2:4f:ca:8d:
                    9e:d8:5e:69:f5:28:31:7d:51:bf:1d:8e:3e:d4:e8:
                    32:6e:af:8b:c7:84:b6:3e:9e:cb:a0:d6:af:1a:a8:
                    24:cf:47:20:b4:ce:9e:a3:4f:02:3a:72:58:d5:40:
                    f9:60:e2:79:b9:c5:d3:af:95:30:07:5a:df:6a:10:
                    a1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AE:18:5F:98:18:B6:8C:62:45:6A:A6:90:07:32:31:73:F3:78:91
            X509v3 Authority Key Identifier:
                keyid:92:BA:06:5C:85:B5:C2:64:3E:0F:D2:7F:0C:42:05:1F:DB:39:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92BA065C85B5C2643E0FD27F0C42051FDB399AC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FfVJqXiKG1QTA5thsjH5zVJkLv9pq4usonmbWx5AsVBU/2/3137392e3132352e31322e302f32322d3232203d3e20323731373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.125.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:ab:95:33:a4:a1:c3:1d:cd:11:a6:1a:f0:84:cf:a1:09:
         fe:39:33:e1:de:26:6a:9c:b0:fd:d9:c5:9f:0a:f5:80:ee:24:
         e1:3e:2f:d3:b7:01:f8:89:a2:8d:e6:7d:59:42:dc:99:61:e9:
         83:14:0f:16:91:7e:fd:3c:fe:b8:f3:ea:df:68:b4:08:cf:ad:
         a0:e9:fa:c7:8f:77:6d:14:bf:a1:f7:67:98:8a:2a:a2:fe:f8:
         62:e5:d5:bf:9d:90:24:d0:ba:06:1e:b9:59:c8:84:e8:1b:b5:
         7f:7a:ee:4c:86:e7:7d:6a:1d:f8:a6:d9:d1:93:db:ba:97:fc:
         dd:7d:a3:4f:55:ed:a2:eb:91:fb:5a:6f:52:81:7b:9d:9a:17:
         24:e1:dc:0f:75:13:eb:fa:5f:9b:78:3a:81:ca:f7:21:a0:b7:
         63:59:34:5b:76:58:01:e3:90:23:53:3a:c0:32:fb:ab:32:b8:
         a0:87:ba:74:6f:0e:8e:c2:35:62:cc:f7:9f:51:d2:c7:bd:f2:
         44:6c:ee:37:f5:bc:aa:f1:2c:58:da:8e:7b:ea:da:4c:6a:0c:
         3b:58:51:c5:7d:fa:96:cf:6f:f6:16:38:8d:dc:7c:83:3f:05:
         29:c9:c6:bb:72:cb:41:fc:52:1c:0e:0d:a5:49:e5:cc:c6:88:
         53:2c:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:24:45 2026 by rpki-client