Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133372e302f32342d3234203d3e20323731323038.roa
File:                     3137392e34392e3133372e302f32342d3234203d3e20323731323038.roa (raw, json)
Hash identifier:          k3m73klFeehDlatHuJe8TW9sbXTeskjE0ISlVf2/8fI=
Subject key identifier:   F1:27:68:DC:9B:68:4B:F3:99:FE:F5:4B:C0:D4:36:B9:F3:13:A4:08
Certificate issuer:       /CN=5EA13F4645AA4E92C80D15C9F491086588DC5236
Certificate serial:       20A0F0020A3B17D37EB1B1E89A86C506DF454C67
Authority key identifier: 5E:A1:3F:46:45:AA:4E:92:C8:0D:15:C9:F4:91:08:65:88:DC:52:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133372e302f32342d3234203d3e20323731323038.roa
Signing time:             Wed 22 Jul 2026 17:39:28 +0000
ROA not before:           Wed 22 Jul 2026 17:34:28 +0000
ROA not after:            Wed 21 Jul 2027 17:39:28 +0000
asID:                     271208
IP address blocks:        179.49.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.crl
                          rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a0:f0:02:0a:3b:17:d3:7e:b1:b1:e8:9a:86:c5:06:df:45:4c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA13F4645AA4E92C80D15C9F491086588DC5236
        Validity
            Not Before: Jul 22 17:34:28 2026 GMT
            Not After : Jul 21 17:39:28 2027 GMT
        Subject: CN=F12768DC9B684BF399FEF54BC0D436B9F313A408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:6a:46:a7:13:17:b3:98:50:21:df:0f:91:
                    5c:84:b2:09:19:85:94:48:d0:2e:0b:c4:18:8f:55:
                    2b:a2:14:e2:ab:9f:df:b0:cc:e3:f8:a6:31:9f:8b:
                    8c:18:6f:cd:8d:6e:3c:45:e6:4a:20:fc:7a:4d:70:
                    f7:e3:aa:61:c1:59:49:22:95:95:a2:35:da:53:1a:
                    56:d8:56:d0:5c:bf:59:23:95:d9:aa:7d:47:4f:98:
                    25:8f:2d:23:47:d8:29:9f:45:ed:ec:6e:62:6a:c3:
                    b8:a0:4d:4d:e0:64:cb:81:b9:85:7d:9d:eb:b4:1a:
                    94:58:54:c9:d6:29:ec:bd:c9:f4:36:e5:18:4e:ec:
                    ad:d1:94:8a:98:72:5b:0a:05:fa:ec:c1:a4:d5:c7:
                    82:dc:ba:88:f7:fc:03:4b:15:f1:b9:41:75:e0:5d:
                    4f:76:9b:b7:84:10:09:cd:e4:14:e0:10:50:ab:f7:
                    33:c8:2d:44:e4:60:03:4d:cc:9d:48:b6:f2:26:35:
                    1e:43:bd:f4:37:77:75:17:26:f2:a4:e2:c4:7e:69:
                    72:34:48:85:1e:da:d8:73:dd:5e:ee:73:68:19:b1:
                    35:8e:47:91:7a:d2:02:79:24:4e:5b:0b:d7:ca:ee:
                    b3:40:79:6d:e5:86:f5:df:1c:6c:21:c0:74:31:36:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:27:68:DC:9B:68:4B:F3:99:FE:F5:4B:C0:D4:36:B9:F3:13:A4:08
            X509v3 Authority Key Identifier:
                keyid:5E:A1:3F:46:45:AA:4E:92:C8:0D:15:C9:F4:91:08:65:88:DC:52:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/5EA13F4645AA4E92C80D15C9F491086588DC5236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA13F4645AA4E92C80D15C9F491086588DC5236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133372e302f32342d3234203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:6b:c5:53:34:01:fb:07:60:80:e0:54:06:dc:ae:52:dc:4a:
         9e:67:34:ec:7a:a3:24:b0:2f:9f:a7:92:86:08:01:aa:f5:dd:
         b4:39:c3:a0:4a:4d:41:6a:3d:2e:99:b5:ca:34:7f:bb:ce:2a:
         29:3c:16:7f:fe:f5:f4:c1:a4:fc:2d:f3:0d:a5:73:51:d7:26:
         19:8d:4a:8e:59:14:ab:20:7e:39:03:ad:bd:5e:fa:49:69:8b:
         1d:4d:61:20:9d:c1:fa:a1:ac:07:86:60:dd:35:71:18:9f:c4:
         8d:68:fd:e2:44:a2:99:c9:78:5d:3b:22:58:82:44:3f:62:49:
         42:bd:b0:5d:b4:04:26:e5:62:23:71:3b:e3:95:d3:7a:ec:06:
         9c:89:54:46:ba:ce:3c:ab:28:7e:78:41:fc:99:cc:26:97:a0:
         94:0b:04:26:32:fe:a4:4c:81:b8:bb:91:e0:98:ec:e7:3d:c5:
         ce:93:ea:ef:79:ba:f4:96:cf:68:08:fb:dc:10:31:db:08:91:
         30:f1:6c:b9:4f:62:5f:78:83:e0:49:27:67:93:42:59:4d:37:
         4f:1c:9c:a8:a2:db:9d:14:00:84:19:d2:6a:cf:32:43:47:75:
         8f:0b:53:fa:1f:c4:92:39:1b:49:24:b8:68:cf:89:20:58:2d:
         15:8b:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:21:22 2026 by rpki-client