Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
File:                     3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa (raw, json)
Hash identifier:          wUYcMNtGHraGk+WkIQpkbSwdzktDiZ3YH63gwRGf40E=
Subject key identifier:   E8:EB:4A:47:08:E9:08:F3:36:C4:C4:A0:D9:B0:2B:B5:95:FF:9A:57
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       441C85BAA216E17DC133988B6AF75CFF541B2C94
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa
Signing time:             Thu 26 Mar 2026 13:07:11 +0000
ROA not before:           Thu 26 Mar 2026 13:02:11 +0000
ROA not after:            Thu 25 Mar 2027 13:07:11 +0000
asID:                     52965
IP address blocks:        179.124.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1c:85:ba:a2:16:e1:7d:c1:33:98:8b:6a:f7:5c:ff:54:1b:2c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Mar 26 13:02:11 2026 GMT
            Not After : Mar 25 13:07:11 2027 GMT
        Subject: CN=E8EB4A4708E908F336C4C4A0D9B02BB595FF9A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c2:e1:dd:8b:d0:07:c4:d6:51:a6:e0:3f:42:
                    bf:a2:d0:c5:69:2f:b9:ba:a1:28:f2:2f:63:d3:2a:
                    94:51:6d:04:f2:8f:3c:24:c8:d5:34:c5:c2:ce:23:
                    85:1f:16:a0:06:f2:58:fc:98:6f:9d:be:87:30:d7:
                    f1:d3:db:35:01:ae:89:a3:01:74:ab:f2:94:c9:7f:
                    f5:50:fc:b9:94:06:df:89:f4:c6:25:29:a1:45:5e:
                    73:5e:f2:44:50:25:a5:c0:59:d1:2c:99:ec:c4:e2:
                    e2:4b:a6:75:83:6e:dd:39:dd:66:41:2c:18:af:5b:
                    29:1c:8f:1c:26:b4:7a:2b:af:d6:98:f4:c7:4f:19:
                    b4:11:f8:3e:14:13:37:a3:3b:ea:ec:dc:1d:48:58:
                    b9:de:93:99:53:4a:fb:72:3b:3a:31:86:d4:7d:30:
                    e8:69:95:9e:19:16:0f:a4:f0:e1:da:80:b1:03:49:
                    09:77:dc:49:85:ec:e2:2e:44:79:be:14:b5:c4:93:
                    55:6f:45:dc:82:73:59:3e:61:b5:ad:6f:fd:d9:17:
                    77:5c:f8:ab:4d:46:0a:f0:90:98:37:65:a7:56:b7:
                    cf:78:87:e9:f3:77:cc:fa:30:24:a6:c3:fb:04:39:
                    1e:22:28:38:dc:b1:4c:fd:53:30:e3:fe:52:d7:e4:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:4A:47:08:E9:08:F3:36:C4:C4:A0:D9:B0:2B:B5:95:FF:9A:57
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137392e3132342e3133362e302f32312d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:a0:9f:a1:34:10:6d:ad:11:b0:4e:2c:3f:ef:5a:a7:b9:ef:
         d5:a6:ba:a2:fd:96:ef:0a:e9:8b:cb:b3:42:f5:9a:57:f1:5b:
         05:6b:4b:4e:0d:a9:78:6b:16:cb:2f:f5:e7:5d:57:36:25:0e:
         e4:39:fa:f9:d2:b0:7b:ce:4c:51:7e:4f:76:b9:ae:65:0b:6f:
         7e:04:6d:2b:5d:d6:23:a7:c5:12:f4:21:44:af:94:03:d5:76:
         ee:f8:ab:3a:81:65:4c:d7:23:10:61:6b:69:c8:ce:9a:0c:f8:
         76:7a:32:a1:51:34:7d:78:66:3c:9c:67:3d:df:7a:6f:82:cf:
         8d:0a:ea:d6:d8:d3:5b:b3:9f:6f:e3:cd:10:19:62:30:ff:21:
         3c:d5:a5:c2:32:62:2d:4f:81:6a:07:83:35:47:42:9e:53:90:
         27:4d:52:3f:6e:e4:3a:37:e5:4c:b1:3f:84:e5:9d:05:00:91:
         12:8f:ff:2f:29:b8:51:38:0b:d4:61:c7:50:14:39:c5:2e:4c:
         9e:e0:5d:48:6c:f8:df:f1:84:16:f4:87:94:ac:3a:6d:27:5a:
         fe:73:f7:a4:ef:dc:95:66:78:60:47:b9:f7:10:84:8f:9c:2c:
         5b:bf:d0:3b:af:b9:d6:63:0d:35:5e:c6:8e:f5:ec:d7:98:ce:
         95:af:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:21:18 2026 by rpki-client