Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          x7IAJv5RPt4iWP+QoWSSE58NAD6gQEYEn26GJMrrnkc=
Subject key identifier:   3A:F6:13:DE:F3:C5:DE:1A:A2:42:75:90:A8:F7:BF:E1:58:CA:C8:9F
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       318522290B84E3A7690023C987F59EE518642CD5
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:21:03 +0000
ROA not before:           Tue 14 Jul 2026 19:16:03 +0000
ROA not after:            Tue 13 Jul 2027 19:21:03 +0000
asID:                     263349
IP address blocks:        189.51.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:85:22:29:0b:84:e3:a7:69:00:23:c9:87:f5:9e:e5:18:64:2c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:16:03 2026 GMT
            Not After : Jul 13 19:21:03 2027 GMT
        Subject: CN=3AF613DEF3C5DE1AA2427590A8F7BFE158CAC89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:50:c1:9a:7b:3d:d5:1b:d6:1a:e5:8f:69:
                    b4:ac:3b:fa:f4:fe:ce:3c:80:bf:e3:e5:43:58:5d:
                    43:f8:c6:f3:7a:97:8e:d3:e8:94:3d:a4:62:93:b5:
                    2c:a9:4b:01:07:13:06:76:e4:77:c5:a8:cb:f7:ba:
                    5f:6a:ef:31:56:2a:bf:07:79:a6:37:4e:e9:be:81:
                    e7:32:2e:06:99:4b:01:dd:95:48:01:bb:7a:c2:a8:
                    4b:e3:ee:a4:0a:0e:cf:dd:ce:f2:05:d7:ac:e8:d5:
                    6e:4e:80:e0:d5:d2:55:5e:d3:f1:71:2b:7c:7e:46:
                    17:d1:68:d0:ce:08:88:66:61:71:58:d3:67:7f:71:
                    03:0d:c1:c5:4c:3d:60:f1:fc:b9:74:b4:eb:c1:7f:
                    0a:5d:65:7e:64:d8:d8:e5:ab:b6:37:71:54:74:4c:
                    83:cf:7c:90:4b:cf:1c:02:a1:1c:0e:9a:85:c5:d8:
                    3c:63:3a:a1:73:13:bf:0c:01:cb:dc:36:42:d3:15:
                    47:b7:71:26:82:29:33:f9:d8:f9:bc:ef:a2:dd:94:
                    68:70:1e:b8:bd:e9:3f:35:9c:0c:3e:ae:4d:d3:c6:
                    c3:23:8e:91:18:b7:19:59:16:b7:eb:56:ce:e1:2c:
                    10:5d:41:1c:7b:b1:02:ec:71:54:9d:0e:6f:d5:9d:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F6:13:DE:F3:C5:DE:1A:A2:42:75:90:A8:F7:BF:E1:58:CA:C8:9F
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130342e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:f8:dd:c1:bf:dc:be:71:a8:2d:8b:9d:3d:41:b2:42:e2:
         1a:87:69:3c:73:eb:c6:60:ab:27:79:35:39:e9:4b:6f:05:2a:
         ba:43:a5:ad:40:a7:8d:5d:ea:36:df:39:a7:e2:99:f7:d5:53:
         54:91:6f:24:24:e1:2c:18:7c:8d:58:72:ce:18:75:c1:d7:62:
         22:ca:7d:d0:ed:62:a9:dc:8e:e3:a1:75:07:11:38:8d:fb:12:
         cc:2d:02:f2:6e:da:10:24:41:a9:24:0c:3a:b0:90:f2:91:11:
         91:0a:58:46:82:a9:c9:3a:2a:1e:73:92:15:18:2f:18:3c:a6:
         21:cc:73:52:4d:78:eb:04:d2:a1:55:1d:ee:8d:0e:46:be:3e:
         d3:b7:5a:01:d0:7b:63:cd:d6:12:4a:99:43:b6:09:b3:c2:2a:
         39:2b:37:e5:04:82:6f:fd:fd:bf:fd:d8:9f:ca:c3:4d:ee:df:
         b7:b8:53:3a:3a:04:7a:76:37:76:03:f5:b1:8d:ba:c4:22:ab:
         74:17:d4:a2:2b:3b:57:98:48:f4:72:14:3f:73:1d:13:33:bc:
         e2:a0:1d:62:63:f1:b3:aa:d5:59:dd:f1:5d:d8:44:cd:75:18:
         a1:27:50:80:ff:b3:c6:c7:d5:67:64:39:8b:7a:c0:69:ab:f7:
         2a:13:11:0a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMYUiKQuE46dpACPJh/We5RhkLNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwN0NFNUNCNjA3NzlFODFDRDJERTA3OURGQ0M0Q0FF
QUQ4NUFEQjAeFw0yNjA3MTQxOTE2MDNaFw0yNzA3MTMxOTIxMDNaMDMxMTAvBgNV
BAMTKDNBRjYxM0RFRjNDNURFMUFBMjQyNzU5MEE4RjdCRkUxNThDQUM4OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0elDBmns91RvWGuWPabSsO/r0
/s48gL/j5UNYXUP4xvN6l47T6JQ9pGKTtSypSwEHEwZ25HfFqMv3ul9q7zFWKr8H
eaY3Tum+gecyLgaZSwHdlUgBu3rCqEvj7qQKDs/dzvIF16zo1W5OgODV0lVe0/Fx
K3x+RhfRaNDOCIhmYXFY02d/cQMNwcVMPWDx/Ll0tOvBfwpdZX5k2Njlq7Y3cVR0
TIPPfJBLzxwCoRwOmoXF2DxjOqFzE78MAcvcNkLTFUe3cSaCKTP52Pm876LdlGhw
Hri96T81nAw+rk3TxsMjjpEYtxlZFrfrVs7hLBBdQRx7sQLscVSdDm/VnVkJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOvYT3vPF3hqiQnWQqPe/4VjKyJ8wHwYDVR0j
BBgwFoAUDwfOXLYHeegc0t4HnfzEyurYWtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC8wRjA3Q0U1Q0I2MDc3OUU4MUNEMkRFMDc5REZDQzRDQUVBRDg1QURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMDdDRTVDQjYwNzc5RTgx
Q0QyREUwNzlERkNDNENBRUFEODVBREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9M2gwDQYJKoZIhvcNAQELBQADggEBADK3+N3B
v9y+cagti509QbJC4hqHaTxz68Zgqyd5NTnpS28FKrpDpa1Ap41d6jbfOafimffV
U1SRbyQk4SwYfI1Ycs4YdcHXYiLKfdDtYqncjuOhdQcROI37EswtAvJu2hAkQakk
DDqwkPKREZEKWEaCqck6Kh5zkhUYLxg8piHMc1JNeOsE0qFVHe6NDka+PtO3WgHQ
e2PN1hJKmUO2CbPCKjkrN+UEgm/9/b/92J/Kw03u37e4Uzo6BHp2N3YD9bGNusQi
q3QX1KIrO1eYSPRyFD9zHRMzvOKgHWJj8bOq1Vnd8V3YRM11GKEnUID/s8bH1Wdk
OYt6wGmr9yoTEQo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:37 2026 by rpki-client