Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa
File:                     3137392e35312e3137322e302f32322d3234203d3e203238323737.roa (raw, json)
Hash identifier:          pr+NuLnjSj8j+ye8Gp7xVLzUQ2AdNzc97uJG2qwHGSY=
Subject key identifier:   86:49:82:3E:E4:2D:0E:44:78:19:6E:39:7E:CE:63:6A:51:E5:74:3C
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       3E7280FEFBA6207D82658479A3BCB2934F67B6E5
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa
Signing time:             Tue 10 Mar 2026 20:55:30 +0000
ROA not before:           Tue 10 Mar 2026 20:50:30 +0000
ROA not after:            Tue 09 Mar 2027 20:55:30 +0000
asID:                     28277
IP address blocks:        179.51.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:80:fe:fb:a6:20:7d:82:65:84:79:a3:bc:b2:93:4f:67:b6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Mar 10 20:50:30 2026 GMT
            Not After : Mar  9 20:55:30 2027 GMT
        Subject: CN=8649823EE42D0E4478196E397ECE636A51E5743C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:44:45:b0:ce:22:0b:2e:ca:10:80:1a:b1:
                    87:e3:22:b9:59:b5:6b:50:e7:76:f0:ca:35:e6:d9:
                    ea:40:d3:70:c6:88:6b:23:df:66:3d:20:b2:66:99:
                    a4:ec:26:d6:82:33:d9:43:21:e1:26:22:94:79:f8:
                    bf:4d:62:f6:f9:b5:71:b7:73:f5:0f:64:95:82:77:
                    6d:aa:12:af:aa:1f:6f:5d:4d:81:36:2b:01:b8:3b:
                    46:94:7c:b0:25:ac:e6:72:70:62:fa:94:16:0b:6c:
                    72:73:03:3c:1a:84:4c:0a:1a:94:e9:08:0d:d4:54:
                    66:c6:e1:33:ab:1c:54:7b:72:88:da:3f:79:69:ef:
                    90:e8:8e:1d:23:fd:c0:8e:47:b2:73:75:e5:78:f9:
                    a2:9b:9f:ea:8b:ce:d7:ac:c9:82:43:c5:2a:a7:0f:
                    e8:c5:53:e1:06:d2:51:5a:08:51:8f:e6:ab:17:e8:
                    f3:0e:1c:2c:5f:01:03:78:81:73:dd:14:91:27:54:
                    11:23:f7:01:fb:84:e1:1b:4a:a4:86:06:ce:16:16:
                    00:a8:60:df:e7:65:1e:95:0b:7a:15:d5:67:06:78:
                    9b:c5:42:6f:04:d4:12:7f:13:d4:89:3a:2e:a4:8e:
                    83:de:17:24:f3:20:6f:ff:0a:5a:60:1e:89:ba:f1:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:82:3E:E4:2D:0E:44:78:19:6E:39:7E:CE:63:6A:51:E5:74:3C
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3137392e35312e3137322e302f32322d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:3b:fc:30:5d:0c:ed:1a:f4:39:6f:b8:26:a8:15:b8:47:
         f9:ce:79:d7:47:26:fd:e2:78:2d:6a:4f:f4:2a:02:98:60:54:
         d0:31:68:e0:55:29:37:1b:7b:53:fa:f3:b1:d9:cd:a5:b0:25:
         34:75:66:8b:36:55:1e:88:2c:48:14:0c:7f:11:e3:66:10:97:
         d1:ec:bc:1e:77:57:bc:f8:19:1c:c5:c1:dd:46:6d:28:22:6a:
         aa:7c:b5:49:89:9a:e7:4d:86:96:49:20:e6:9a:54:57:25:8b:
         cc:62:6c:06:fc:35:60:3f:c1:46:b2:28:be:ea:f7:22:fd:69:
         cc:7e:c0:3f:12:2a:0c:6e:87:36:de:1e:b2:42:91:1f:4d:6a:
         64:d5:bb:d2:a7:7b:59:6d:84:f5:79:55:fd:1b:f5:9d:f0:87:
         ca:27:95:51:72:7d:21:6f:3a:02:6f:71:00:e9:9b:b4:c3:0f:
         63:59:5b:75:7e:d4:2e:4d:1b:d9:33:ed:80:af:55:6f:10:34:
         ea:a9:1b:13:91:82:99:0d:80:d4:f2:51:cd:54:20:30:c1:8f:
         7a:3d:f8:8b:ec:de:31:8e:14:18:cd:56:00:b8:a7:e0:1c:9f:
         38:62:c0:2a:ca:9f:a4:4d:2a:9e:cb:0c:97:12:c7:fb:fa:27:
         4d:2c:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:53:50 2026 by rpki-client