Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e36332e3137362e302f32332d3234203d3e20323632343137.roa
File:                     3137392e36332e3137362e302f32332d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          pd2TaZmOAFUdlX5GEMWW4+fuKy3d2WjuEvCs231We5Y=
Subject key identifier:   F7:02:5A:36:26:91:E4:1E:35:81:38:6D:E1:89:ED:BC:8B:C1:E6:5F
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       3358E5ACC74A4D82D3131AF5573444C9ABD7FF49
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e36332e3137362e302f32332d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:22:16 +0000
ROA not before:           Tue 30 Jun 2026 14:17:16 +0000
ROA not after:            Tue 29 Jun 2027 14:22:16 +0000
asID:                     262417
IP address blocks:        179.63.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:58:e5:ac:c7:4a:4d:82:d3:13:1a:f5:57:34:44:c9:ab:d7:ff:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:17:16 2026 GMT
            Not After : Jun 29 14:22:16 2027 GMT
        Subject: CN=F7025A362691E41E3581386DE189EDBC8BC1E65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:6f:78:6a:39:c8:52:8e:ae:f1:d5:bd:28:
                    a0:f5:a6:f1:32:d6:b7:be:27:3e:a4:a8:1c:59:70:
                    72:88:28:be:ae:17:52:2c:7f:5b:b4:52:51:69:cb:
                    44:13:a0:68:c0:ed:1c:bb:06:b0:d1:97:f7:0b:b0:
                    4d:a2:5d:ff:aa:19:4c:e1:b9:df:cf:a6:6a:6e:0d:
                    1c:97:b9:6d:09:0c:46:69:65:57:d3:5e:bc:4a:cc:
                    9f:1b:ba:98:12:87:f9:e4:6e:09:d0:c3:99:41:04:
                    c2:81:2e:fb:fe:dc:96:32:e2:f1:ec:f1:33:01:ae:
                    3d:1c:50:fd:4e:e0:8f:11:2e:f6:0a:c0:24:2b:7e:
                    5d:f4:0c:a3:95:20:2a:2b:1b:7a:fc:b5:71:6d:90:
                    0a:d6:db:35:e3:5f:e8:27:c7:b7:4c:a6:61:bd:cb:
                    ed:ab:03:3d:f7:0b:87:07:5d:fb:3a:c7:0e:9a:3f:
                    4c:7d:af:4b:4a:06:20:59:1b:73:3d:83:5f:ec:f7:
                    14:ac:57:90:5c:b1:01:f1:06:6e:5f:ef:93:8d:76:
                    e3:31:b4:01:bf:71:8b:90:4f:b7:d6:6c:bb:2f:0c:
                    1e:57:2a:b0:26:de:19:1b:aa:77:3b:01:d9:c5:19:
                    9b:a2:fd:26:48:0f:19:05:c6:0b:19:c9:70:a2:69:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:5A:36:26:91:E4:1E:35:81:38:6D:E1:89:ED:BC:8B:C1:E6:5F
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e36332e3137362e302f32332d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:e9:5c:f8:d9:64:57:56:11:97:c0:92:c7:49:0a:78:b8:42:
         e9:01:5f:ef:0b:70:e9:53:67:9f:3f:77:8b:61:63:df:73:ff:
         66:d7:a0:d0:de:f2:40:b8:2e:e6:33:8d:7f:a0:2b:5f:0c:ab:
         1c:a9:3d:6e:be:55:75:fa:85:ac:1d:59:4f:e3:15:4b:fd:a5:
         26:d1:23:01:bf:08:65:50:bd:3a:88:fa:ec:f3:7c:12:ce:b6:
         cc:c8:1f:ed:26:af:d4:18:a6:5c:a7:7a:e8:91:9a:4d:a3:f9:
         4b:38:0f:f6:13:f4:8c:d1:cc:60:e0:cf:54:fa:ea:74:42:08:
         7d:10:e4:0e:fb:2f:0e:46:10:8f:6a:2e:cc:14:c0:fb:4c:a0:
         15:54:52:0e:d7:02:2b:26:ef:18:da:d1:33:59:e0:83:58:2c:
         c6:26:a3:42:a8:cb:ed:a3:7a:89:dd:f6:dd:a6:c8:64:b6:9f:
         bf:f0:dc:e0:6a:f7:a9:79:a1:0b:86:97:ff:b1:1d:ba:4e:15:
         4a:34:d9:f4:48:c1:35:4d:e9:b6:5a:ca:ea:a5:a9:f5:00:54:
         7c:88:74:0a:b3:48:78:dc:29:95:fa:d6:ba:03:18:6c:0c:d8:
         ca:51:6a:2f:b6:e7:21:4e:bc:50:c4:6e:95:08:e4:16:fd:17:
         38:71:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:54 2026 by rpki-client