Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
File:                     3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          wCMN0uM6AOx3ugM6Md+u1Ds0fHNY84FVbJRWi5SzbA4=
Subject key identifier:   1A:EB:52:D4:CE:4A:CE:48:8F:68:8B:83:75:3C:2C:02:CF:25:5B:A6
Certificate issuer:       /CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
Certificate serial:       528CB7AE92004B1A9AD7F01030D94E88140F4CBB
Authority key identifier: C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 20 Apr 2026 13:00:44 +0000
ROA not before:           Mon 20 Apr 2026 12:55:44 +0000
ROA not after:            Mon 19 Apr 2027 13:00:44 +0000
asID:                     52545
IP address blocks:        179.107.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:b7:ae:92:00:4b:1a:9a:d7:f0:10:30:d9:4e:88:14:0f:4c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4A0C992AC81775846EF3EACD736353F739F7D8D
        Validity
            Not Before: Apr 20 12:55:44 2026 GMT
            Not After : Apr 19 13:00:44 2027 GMT
        Subject: CN=1AEB52D4CE4ACE488F688B83753C2C02CF255BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:fc:c5:e8:66:3f:b0:27:18:0f:fa:cf:b8:
                    eb:05:5f:44:37:a6:31:3f:16:6c:1e:03:80:f5:13:
                    49:78:b4:ff:7a:34:46:6a:92:32:30:1b:c8:ed:2d:
                    0b:14:5d:f8:09:cd:3e:1e:a4:37:f4:8f:96:66:3e:
                    10:72:d2:7e:8b:76:04:94:cc:17:11:82:e1:2f:8f:
                    70:90:17:c3:63:22:00:93:af:ad:ca:ff:90:c9:29:
                    02:ba:ad:b9:9d:c1:5d:4f:45:c8:89:f4:fa:e5:5d:
                    1d:33:2a:6c:82:09:26:e9:b2:8b:79:3d:fd:1e:76:
                    5f:6a:07:15:ad:1f:76:3f:b9:f3:72:3f:11:c0:9b:
                    28:5c:8e:b9:7f:6a:73:73:5b:00:3b:79:7e:2e:01:
                    b3:d9:a9:29:59:2a:f7:87:33:f3:33:f6:e7:c7:83:
                    19:32:73:8a:21:92:37:3a:5c:43:7b:ed:82:9d:fa:
                    99:b4:de:1e:58:e5:1a:1f:be:42:b0:65:f6:db:e5:
                    b5:28:34:e5:6a:a5:33:3d:8d:2f:af:27:ff:44:6c:
                    6a:1e:21:ae:79:15:57:d0:51:db:c1:37:9a:29:4a:
                    e0:86:1f:10:65:9a:05:e5:c4:a6:96:c3:60:73:2d:
                    51:e8:94:39:7c:bf:6d:59:a6:00:b8:bb:11:4a:6d:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EB:52:D4:CE:4A:CE:48:8F:68:8B:83:75:3C:2C:02:CF:25:5B:A6
            X509v3 Authority Key Identifier:
                keyid:C4:A0:C9:92:AC:81:77:58:46:EF:3E:AC:D7:36:35:3F:73:9F:7D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/C4A0C992AC81775846EF3EACD736353F739F7D8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4A0C992AC81775846EF3EACD736353F739F7D8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:0b:6a:ec:b8:c1:df:8c:39:f5:a2:44:c1:5c:f5:45:f3:
         20:a8:26:57:28:f8:c4:fb:2f:73:1e:03:00:5d:46:5e:8d:38:
         74:cb:88:66:67:10:2a:ad:b0:b9:0b:b1:35:2d:9a:b2:62:e2:
         02:a1:55:2d:c6:50:94:98:11:80:66:a7:0b:c2:e9:80:0e:50:
         87:ad:7e:09:fc:f7:a7:18:f8:3a:65:1e:b1:c1:a6:77:14:df:
         b0:07:e4:6a:04:fd:15:ce:87:a8:4f:df:10:84:98:79:7b:64:
         dd:c6:e0:c9:32:0e:1a:74:60:b1:18:2f:f3:f0:c0:8b:5b:5e:
         6b:6c:ce:dc:b9:a5:60:47:25:64:f1:59:1d:b8:16:fe:30:31:
         a4:31:37:10:13:51:53:51:a2:47:b7:f5:9f:1d:29:f9:8f:03:
         bd:14:a4:82:e9:5e:f5:ed:36:d9:5b:f0:ed:e6:15:5a:6f:c3:
         f7:d8:ec:f8:3e:2d:d1:6d:95:ce:29:d5:8e:da:c4:bc:51:ae:
         04:6c:ac:28:a9:9c:e7:d9:8b:61:d8:cd:48:12:00:5f:f8:c2:
         6e:89:8d:ec:7c:fe:e6:08:b0:80:0b:28:9c:a9:bc:2c:fc:ff:
         43:01:f1:31:ec:47:a2:94:b9:00:8b:f9:56:b5:af:ec:e7:00:
         d6:db:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:50:45 2026 by rpki-client