Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa
File:                     3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa (raw, json)
Hash identifier:          ces90BEDTtnMi7DFTGuNUoIacDlBaPAjSPwe6KYlZNs=
Subject key identifier:   F5:F7:89:E9:2E:88:14:F5:4D:80:21:15:87:2D:75:47:29:18:4A:F8
Certificate issuer:       /CN=D6271D09DE85368B946562BB6E3D94BBBA8A9ED7
Certificate serial:       70658B198CE3C08B8B9C3856BD8DC681ED3E19E5
Authority key identifier: D6:27:1D:09:DE:85:36:8B:94:65:62:BB:6E:3D:94:BB:BA:8A:9E:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa
Signing time:             Sun 12 Jul 2026 17:48:26 +0000
ROA not before:           Sun 12 Jul 2026 17:43:26 +0000
ROA not after:            Sun 11 Jul 2027 17:48:26 +0000
asID:                     263612
IP address blocks:        179.124.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 20:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:65:8b:19:8c:e3:c0:8b:8b:9c:38:56:bd:8d:c6:81:ed:3e:19:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6271D09DE85368B946562BB6E3D94BBBA8A9ED7
        Validity
            Not Before: Jul 12 17:43:26 2026 GMT
            Not After : Jul 11 17:48:26 2027 GMT
        Subject: CN=F5F789E92E8814F54D802115872D754729184AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4f:b0:14:61:c4:0f:0e:8a:10:3e:f7:9b:98:
                    85:e4:1f:03:f3:b5:2c:16:cb:41:2c:ab:2d:0f:e8:
                    2a:ef:02:56:00:24:b7:20:a3:41:79:fa:bc:99:f7:
                    a0:27:2e:16:be:59:32:87:c6:6e:30:b7:32:f8:46:
                    4e:e9:e3:1f:23:56:d1:1e:35:68:7a:18:54:af:62:
                    5f:60:60:4f:d4:6c:7f:8a:4b:dc:c4:ca:0e:19:98:
                    1f:06:64:e0:bc:03:c8:21:ab:8e:16:b9:be:e7:ad:
                    18:b9:5c:44:3a:e0:dd:5a:e2:98:b0:cb:41:6b:e3:
                    5f:3c:c8:4e:a4:fd:26:af:6d:99:d6:a5:62:94:de:
                    63:f1:7c:5b:52:5a:5a:cc:56:26:f7:ba:7f:38:3d:
                    04:9e:75:87:04:3c:5a:55:a0:ac:a0:40:41:22:4a:
                    2e:18:0d:71:45:c2:bc:1c:b9:91:fd:ab:3d:9c:d8:
                    6a:68:63:a5:20:07:1f:7f:6a:14:a5:b7:c5:8c:06:
                    ea:db:41:43:6a:f4:eb:0c:43:91:40:1d:2f:6a:8c:
                    33:3f:36:2a:5d:82:61:e6:29:97:bc:67:be:cc:fb:
                    5d:f2:97:88:91:f2:70:c6:8d:11:68:af:9a:72:cf:
                    61:27:11:82:2b:24:8b:da:eb:7f:3f:8b:13:ef:dc:
                    07:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:89:E9:2E:88:14:F5:4D:80:21:15:87:2D:75:47:29:18:4A:F8
            X509v3 Authority Key Identifier:
                keyid:D6:27:1D:09:DE:85:36:8B:94:65:62:BB:6E:3D:94:BB:BA:8A:9E:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6271D09DE85368B946562BB6E3D94BBBA8A9ED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/3137392e3132342e3132382e302f32322d3234203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:60:89:eb:e0:48:10:59:b7:78:63:df:2f:26:32:39:59:
         02:82:31:80:33:2c:9b:c1:05:da:f6:e3:57:ac:26:7f:1e:e8:
         30:10:7e:36:f8:a2:6c:eb:6c:54:89:eb:c4:5e:5a:59:bb:fe:
         39:ec:99:d1:75:2f:df:66:30:b8:c7:8d:d1:1b:34:6d:29:e8:
         cd:c7:70:eb:01:6a:2c:f1:37:8e:ba:a0:20:01:47:50:34:34:
         a4:e4:aa:fb:fd:8b:e3:bd:76:e3:f7:65:70:08:29:8e:61:eb:
         b9:dd:46:c3:ce:25:1c:b5:c5:5e:fb:13:d1:70:42:ce:5e:c9:
         25:a5:21:c8:03:46:4e:70:e7:30:bc:9c:6f:07:bf:4c:82:58:
         05:8c:33:73:5c:87:7c:75:d4:85:b4:f5:a0:61:78:ab:49:b6:
         44:47:dc:9c:af:44:60:30:2e:9b:85:96:5d:13:5f:c8:6c:05:
         46:14:b0:7b:fd:90:dd:54:58:ad:7f:e5:42:54:c1:e3:f5:8d:
         2a:f9:2b:9e:e9:c9:4a:d7:9a:43:4b:91:9d:15:23:fe:ff:0c:
         2a:ba:72:63:6f:45:53:ff:20:36:56:be:ae:3c:01:18:69:b3:
         f6:a9:9e:f8:22:d0:72:73:84:82:a4:88:7e:04:fb:15:f3:6d:
         b4:55:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:33:06 2026 by rpki-client