Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130312e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130312e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          pp3zsewSzjjR8rbabLpDytYCvctUNY/+W+4rHjB1TnI=
Subject key identifier:   E6:C2:BF:57:7A:01:26:C1:A2:F8:DF:8E:F2:B9:F1:25:7D:4F:21:46
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       33366B29B12DA09FED49DC03223B2199523E1E78
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130312e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:20:19 +0000
ROA not before:           Tue 14 Jul 2026 19:15:19 +0000
ROA not after:            Tue 13 Jul 2027 19:20:19 +0000
asID:                     263349
IP address blocks:        189.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:36:6b:29:b1:2d:a0:9f:ed:49:dc:03:22:3b:21:99:52:3e:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:15:19 2026 GMT
            Not After : Jul 13 19:20:19 2027 GMT
        Subject: CN=E6C2BF577A0126C1A2F8DF8EF2B9F1257D4F2146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:83:30:e2:32:9c:e5:13:93:ee:32:49:5e:
                    2c:b8:a3:46:1d:b7:f8:c1:a3:5f:55:a1:cc:da:d9:
                    9e:93:87:3f:39:c2:fe:9f:94:03:bb:59:a9:e3:79:
                    c3:be:e8:e9:25:b6:73:53:ac:fa:9d:c4:4d:db:3a:
                    01:1d:00:cc:3d:ed:2c:1b:0b:36:97:67:8e:8d:40:
                    e2:28:bf:38:f0:90:b2:e7:43:24:62:71:d8:16:be:
                    03:da:38:a6:da:ca:d6:89:9d:9d:4e:eb:8a:65:83:
                    90:f7:4b:e2:48:1a:cb:e0:83:9a:3d:d8:b2:15:dd:
                    3a:64:dd:b1:6a:e6:37:21:50:11:c7:db:b1:17:9c:
                    6a:c6:55:f4:12:10:1c:48:3c:d2:8f:96:64:6e:b6:
                    25:97:39:36:94:4f:83:b8:55:a5:5d:7f:6a:e2:3a:
                    d9:a0:22:5d:37:4c:41:6e:9d:40:6e:d3:7c:96:63:
                    d1:b3:06:d1:3b:0a:dc:37:e3:ed:0a:75:c4:d2:b0:
                    05:c5:03:67:6b:d5:5a:9b:ff:2d:bd:66:15:f7:44:
                    5c:5d:2b:cc:e4:81:12:f6:4c:5e:9d:34:d0:b2:07:
                    6d:46:8c:b9:7b:fe:cc:2a:27:33:c0:86:43:10:b5:
                    ca:38:19:b9:2f:2b:cd:4b:ae:e0:8d:58:c0:ba:0d:
                    ac:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:BF:57:7A:01:26:C1:A2:F8:DF:8E:F2:B9:F1:25:7D:4F:21:46
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130312e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:52:08:22:55:07:69:45:c3:b8:d6:06:6c:09:20:ec:df:1a:
         e8:b7:1d:77:0e:75:24:93:f0:6c:73:03:9d:92:21:9e:c0:e1:
         cf:ff:28:83:08:36:a1:41:2c:31:d8:b6:ab:b3:be:37:01:ae:
         e7:34:b6:77:27:b5:fd:6f:cc:23:a4:1e:f9:76:df:7e:3b:18:
         01:9f:a3:bd:32:a1:de:24:04:fd:d0:63:26:c1:a4:d0:2f:3a:
         8a:56:b8:10:dd:f2:66:cd:cf:69:0d:45:03:ca:25:bf:76:00:
         6f:56:80:3b:40:79:88:27:5e:ba:53:d3:44:57:58:76:37:b3:
         69:39:e6:6b:09:85:3a:e5:ff:a7:8c:2f:fe:0d:1e:61:21:21:
         e1:ba:98:35:e8:1e:eb:92:11:d0:c0:ca:8c:87:ee:53:ef:50:
         77:57:d6:58:d0:1d:d5:81:18:fc:45:66:ac:7d:b3:8f:27:01:
         f0:66:1d:b2:dd:86:ac:ce:28:59:6c:02:ca:6f:b3:44:16:35:
         c4:1a:f9:81:68:ed:dc:ea:51:75:d3:36:b6:a1:b7:b4:c0:33:
         61:42:4d:bd:44:09:21:29:c1:c8:36:16:19:34:ff:83:7e:6e:
         28:7d:a4:16:17:29:fc:1c:30:77:bb:5f:bc:ed:81:a4:5f:8c:
         7e:1a:e3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:24 2026 by rpki-client