Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
File:                     3138392e31342e38302e302f32302d3234203d3e203238323737.roa (raw, json)
Hash identifier:          zUh5d0ilRi1kWKl+eSUSG/nXPhyikJVFYIqNwaCIunY=
Subject key identifier:   6B:D6:0A:5E:B5:4A:F2:84:57:18:A3:0F:69:BF:EE:99:0F:67:DE:E4
Certificate issuer:       /CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
Certificate serial:       354C5DAC395618F9E82468F782147AF2767ED045
Authority key identifier: A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa
Signing time:             Tue 10 Mar 2026 20:55:30 +0000
ROA not before:           Tue 10 Mar 2026 20:50:30 +0000
ROA not after:            Tue 09 Mar 2027 20:55:30 +0000
asID:                     28277
IP address blocks:        189.14.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl
                          rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:5d:ac:39:56:18:f9:e8:24:68:f7:82:14:7a:f2:76:7e:d0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8
        Validity
            Not Before: Mar 10 20:50:30 2026 GMT
            Not After : Mar  9 20:55:30 2027 GMT
        Subject: CN=6BD60A5EB54AF2845718A30F69BFEE990F67DEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:44:49:37:c1:a0:76:00:50:4f:7c:5b:49:
                    d0:7e:f7:fd:80:10:3e:e7:0f:a6:58:a1:c7:13:79:
                    d0:2e:d7:68:5a:18:b6:d7:e4:65:17:4c:b9:7b:a4:
                    5b:49:f2:1d:48:f1:9d:83:a9:36:2e:e2:5d:fb:e5:
                    f4:62:22:23:82:a4:81:79:f7:e1:e7:3c:12:f5:54:
                    59:59:8b:fd:06:ea:fd:9e:b5:8e:31:c5:6e:55:26:
                    33:42:cc:b2:de:03:33:7d:0c:67:42:3d:a5:1e:5f:
                    5a:af:7c:12:fc:3c:8e:3e:f0:78:20:ab:42:43:74:
                    b9:fe:8a:9b:a3:2c:14:38:18:65:1f:7a:90:b5:ec:
                    ba:68:32:46:b1:e4:a3:03:84:96:c2:e6:bb:15:b8:
                    c5:89:eb:a6:31:7b:ad:4b:b5:3c:95:1a:ef:29:ef:
                    55:60:da:82:77:14:87:1c:97:63:f5:b1:54:47:4d:
                    12:4d:20:d5:30:28:19:66:9a:c5:f2:38:60:49:21:
                    35:20:cf:84:21:04:e8:c7:af:9d:46:cc:a5:97:29:
                    fe:45:c4:4e:ba:cf:20:5e:e9:09:45:8d:c5:81:6a:
                    88:fd:c7:9d:19:51:c8:61:6e:ee:07:85:df:04:fc:
                    6d:8c:93:6b:81:f0:43:ba:e4:a2:cd:7f:f8:ed:7c:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:0A:5E:B5:4A:F2:84:57:18:A3:0F:69:BF:EE:99:0F:67:DE:E4
            X509v3 Authority Key Identifier:
                keyid:A8:6F:29:09:A8:CF:8A:80:C2:23:9E:5F:95:3F:F1:B4:AB:9D:73:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A86F2909A8CF8A80C2239E5F953FF1B4AB9D73C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7tvpFHF3BkZPc5JZSiULKtjGmvPe4fAjxiU2DJZqPG1/0/3138392e31342e38302e302f32302d3234203d3e203238323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:e7:3e:ab:5f:ba:af:7e:7b:6a:3a:19:bd:6a:6b:35:24:
         c5:fb:df:7c:ab:ce:3a:f6:a0:ad:97:ef:1c:3c:da:83:ed:67:
         b0:e5:75:9a:8e:13:f8:37:e8:91:f9:72:fc:26:05:86:6c:88:
         c8:54:ba:3c:44:3d:81:8f:d3:9a:6a:4a:02:be:52:a2:59:95:
         c1:5e:da:04:fa:8b:a0:d9:34:21:32:40:db:0c:d9:00:1a:17:
         4c:b8:df:f8:99:66:63:3e:38:0b:37:95:83:d8:0d:90:31:a5:
         d8:16:bb:33:ff:1f:43:61:47:6b:de:27:53:1f:dc:69:16:8a:
         92:95:0e:93:2f:d2:5c:69:09:91:a8:b5:c3:b6:f8:85:5e:af:
         cd:4b:60:d2:3b:46:f7:b8:fc:f0:6b:83:ad:82:19:f4:b6:c9:
         d9:88:e1:88:c7:90:0f:69:c4:a3:bc:0e:84:e8:c7:57:47:df:
         4b:0b:cd:b6:ee:d7:1c:8d:16:84:10:28:44:59:dc:53:55:30:
         83:6e:bc:9a:ba:be:16:48:50:29:42:57:f5:df:34:69:24:c1:
         13:34:ac:f9:58:2f:11:60:a7:d3:27:ec:46:9a:24:21:22:21:
         49:3b:41:d3:d8:38:a7:e1:db:e6:60:fe:1c:d7:2e:bb:3a:7e:
         6e:4a:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:26:25 2026 by rpki-client