Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa
File:                     3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa (raw, json)
Hash identifier:          pAwLQFPus1DdZk1/YHig5w7eSmLF2XBf8ChwnejT78M=
Subject key identifier:   05:EA:92:00:2A:77:35:3E:CE:AD:4B:AF:C2:4F:8A:6A:D4:73:93:35
Certificate issuer:       /CN=5EA13F4645AA4E92C80D15C9F491086588DC5236
Certificate serial:       58B7E5343A41DA934846615D0B3FEA227F6F501E
Authority key identifier: 5E:A1:3F:46:45:AA:4E:92:C8:0D:15:C9:F4:91:08:65:88:DC:52:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa
Signing time:             Mon 04 May 2026 20:32:14 +0000
ROA not before:           Mon 04 May 2026 20:27:14 +0000
ROA not after:            Mon 03 May 2027 20:32:14 +0000
asID:                     271208
IP address blocks:        179.49.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.crl
                          rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b7:e5:34:3a:41:da:93:48:46:61:5d:0b:3f:ea:22:7f:6f:50:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA13F4645AA4E92C80D15C9F491086588DC5236
        Validity
            Not Before: May  4 20:27:14 2026 GMT
            Not After : May  3 20:32:14 2027 GMT
        Subject: CN=05EA92002A77353ECEAD4BAFC24F8A6AD4739335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:8e:e5:9a:c8:87:75:03:18:d7:c7:98:f8:
                    00:d1:71:e9:fb:3c:0e:ad:61:49:c1:1f:c9:32:95:
                    77:09:84:0b:07:59:6d:5a:26:ed:31:15:33:75:31:
                    72:fa:d4:6d:69:c4:14:46:32:24:22:07:d7:de:f3:
                    c4:80:0b:b8:61:64:3b:47:f3:11:3d:21:98:f7:c5:
                    cc:4b:24:22:bb:b4:dd:ed:9f:7b:53:c5:0e:09:3e:
                    cf:d3:9a:3e:93:13:2c:88:fe:af:00:ce:8e:72:e3:
                    5c:9f:cb:4a:a2:df:a1:8a:74:0b:87:93:28:56:ee:
                    0e:72:e1:eb:ff:40:a3:e3:d2:b3:92:12:74:ed:21:
                    34:8c:95:c3:9e:5f:33:cc:04:c8:22:f8:d0:20:bc:
                    8b:67:0e:f1:39:c7:f4:8e:91:81:85:50:39:af:de:
                    32:af:cf:e7:71:45:4d:3f:88:e2:06:d4:32:53:cc:
                    65:29:43:8c:05:18:11:ed:50:1d:3c:1a:3f:d9:15:
                    8d:02:38:b9:32:d5:e1:39:af:7c:b8:bf:64:2d:29:
                    d8:97:87:20:22:77:1b:01:24:0c:67:ca:fb:81:10:
                    86:88:84:fd:bb:1b:09:85:70:22:fb:1e:83:4a:2e:
                    27:26:e6:f7:9c:ca:ac:08:43:50:68:37:4b:fb:1e:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EA:92:00:2A:77:35:3E:CE:AD:4B:AF:C2:4F:8A:6A:D4:73:93:35
            X509v3 Authority Key Identifier:
                keyid:5E:A1:3F:46:45:AA:4E:92:C8:0D:15:C9:F4:91:08:65:88:DC:52:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3332203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:cd:6f:8f:43:c5:09:62:b6:7a:15:59:f7:bc:09:71:da:
         4d:14:bf:46:cf:f3:4f:fc:31:fc:8a:f6:6e:d7:0e:bb:a6:22:
         62:53:75:d3:da:cb:a0:b1:a7:27:5d:2e:e6:bd:96:62:7e:89:
         d4:af:ce:96:b7:63:d1:06:ae:48:41:d4:d0:e6:6f:f9:3d:b2:
         54:92:b5:c7:73:e4:bc:e1:e6:c9:ed:ce:94:02:44:5e:4b:56:
         5e:a8:23:0b:d1:28:4a:0a:66:4a:5f:18:29:69:18:ec:65:6d:
         dc:f0:92:cd:4f:ca:40:99:9f:82:8d:37:2d:84:85:56:71:ee:
         5b:1e:08:c4:44:b1:a2:0d:d9:1a:a9:0e:4a:22:0e:01:3b:b5:
         bd:a3:7e:5b:21:5d:72:b5:83:75:76:d8:7d:bc:14:18:fa:29:
         ff:34:f4:c0:41:a6:92:10:4e:bb:c3:bf:1e:ea:0d:bb:47:0c:
         d0:a6:f8:12:86:d9:8e:86:b5:59:81:32:d3:e2:67:db:f1:8e:
         8b:0b:fd:d7:85:0e:54:ea:74:70:13:5f:e9:47:90:d1:b4:03:
         22:70:1e:c4:ac:56:8e:6f:cc:db:c0:2c:8b:03:01:93:2a:d0:
         d7:aa:cc:47:4f:35:7a:55:c5:36:3c:6a:eb:73:4a:8e:85:8a:
         2b:ef:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:51:32 2026 by rpki-client