Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130302e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130302e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          2GU49O+mrn5EHRPVEW/XpFYluGRW4AX3xEArusPLq+M=
Subject key identifier:   2D:A7:FD:D0:11:14:23:D0:2E:F6:7C:9C:CA:A0:8F:36:89:5F:D5:C7
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       3F14025C2B7DD6A085E81D5D1C5205AC025DDE40
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130302e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:20:13 +0000
ROA not before:           Tue 14 Jul 2026 19:15:13 +0000
ROA not after:            Tue 13 Jul 2027 19:20:13 +0000
asID:                     263349
IP address blocks:        189.51.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:14:02:5c:2b:7d:d6:a0:85:e8:1d:5d:1c:52:05:ac:02:5d:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:15:13 2026 GMT
            Not After : Jul 13 19:20:13 2027 GMT
        Subject: CN=2DA7FDD0111423D02EF67C9CCAA08F36895FD5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:de:b2:92:12:01:48:5e:04:29:ac:f9:c8:
                    9e:52:ce:03:4a:c1:79:87:b7:e9:fa:23:c1:b0:e8:
                    d1:cd:cf:84:8f:3e:4c:73:b1:fe:bb:ea:9f:d5:1b:
                    83:83:72:9c:62:4e:be:3c:37:98:e6:73:df:9e:09:
                    ca:9e:ad:04:8b:9f:1a:e0:54:7b:be:bf:68:0c:a1:
                    56:e2:19:19:57:ba:27:c8:0d:60:6e:40:23:ae:d4:
                    2f:8a:e1:e5:03:a1:65:dc:b4:29:4d:96:2b:bf:b5:
                    6c:b8:46:09:90:33:5f:29:4e:57:35:81:ec:0f:8b:
                    d3:78:c9:0e:b8:13:d9:80:6a:e0:c9:a3:6d:c8:a5:
                    77:1e:3b:60:6d:a0:a2:48:dd:c5:69:07:d4:08:95:
                    27:b2:cb:7a:8b:2c:42:e3:6e:b7:79:99:5d:af:55:
                    9a:87:06:8d:33:ce:fc:34:37:24:08:2f:e7:c0:71:
                    ba:61:b9:a7:d8:7d:a7:04:f5:3f:8b:55:62:f1:b9:
                    7e:a0:17:5a:98:5c:05:2b:1d:f3:45:dd:95:95:8d:
                    99:76:a5:b2:c8:1c:53:7a:8f:d8:80:09:6d:ae:b2:
                    55:36:ff:b5:5e:0e:c9:2a:2a:24:f2:ca:0c:88:f4:
                    30:04:e6:7b:e2:b2:05:d2:5b:e8:d2:77:a9:f5:59:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:FD:D0:11:14:23:D0:2E:F6:7C:9C:CA:A0:8F:36:89:5F:D5:C7
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130302e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:85:07:11:4f:cc:bb:b8:25:a9:54:ca:28:b6:ce:b0:ef:
         b2:1d:95:54:bc:fa:5a:87:cd:f4:ce:ad:07:ef:60:c3:7e:82:
         ef:79:29:67:fa:08:4a:f0:04:63:29:d3:c0:7e:10:ac:30:70:
         72:ae:50:83:27:a5:c8:60:50:41:28:f0:7d:c9:3a:d3:c4:dd:
         62:ca:1a:48:87:06:c0:e9:06:d5:ed:7d:10:98:3c:d2:3f:0b:
         a0:5c:a2:40:e8:02:6f:6b:43:e9:e1:54:53:a3:88:c8:f8:1c:
         f5:87:d1:eb:cb:b3:b8:8c:c8:10:4c:2c:b9:29:a1:b5:b4:e7:
         ef:cb:96:4f:1f:36:38:88:26:18:84:b4:2e:bf:be:3a:ce:36:
         ba:55:60:e5:f1:b8:37:24:87:e4:4c:15:a2:40:b3:33:3d:ef:
         0d:fe:41:db:e9:59:63:df:62:31:bd:8e:b2:ad:a0:63:b2:1b:
         e0:c6:be:69:9a:1b:ed:0e:aa:7a:60:89:42:7a:79:24:6e:29:
         35:ae:dc:d7:30:40:e8:b8:8b:d8:d9:88:d2:bf:68:51:9b:f8:
         8c:c6:22:62:29:74:6d:91:b6:63:8f:09:01:76:a1:fa:01:31:
         08:fd:56:34:4d:f2:70:d2:a0:9b:6d:c2:bd:de:bd:2a:10:74:
         6a:30:ab:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:40 2026 by rpki-client