Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          7jBmql9Z+MGTvOoQUGRturgeqcPEKDgZjW/Ak/ThcL4=
Subject key identifier:   ED:E8:40:7B:C8:6F:91:0B:76:5A:18:48:E8:FD:DF:CE:81:69:45:CC
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       4DCA905ABF0C1135FBA39DB419A452C7BBAE126D
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:21:14 +0000
ROA not before:           Tue 14 Jul 2026 19:16:14 +0000
ROA not after:            Tue 13 Jul 2027 19:21:14 +0000
asID:                     263349
IP address blocks:        189.51.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ca:90:5a:bf:0c:11:35:fb:a3:9d:b4:19:a4:52:c7:bb:ae:12:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:16:14 2026 GMT
            Not After : Jul 13 19:21:14 2027 GMT
        Subject: CN=EDE8407BC86F910B765A1848E8FDDFCE816945CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:9e:58:61:cd:3c:e2:45:b2:fd:5d:d0:9d:
                    5f:99:b2:96:41:f7:f7:16:d7:2b:5e:e3:9f:59:f6:
                    1a:93:f5:a7:11:35:59:8c:94:cc:db:68:2b:0d:15:
                    38:12:df:88:0c:e5:05:ed:ff:71:d6:ba:da:ae:73:
                    36:d9:a9:d8:33:3f:8c:b4:48:7b:0a:99:ee:d3:9e:
                    a4:f1:dc:e8:60:36:76:ba:9a:be:5b:cd:d1:ba:53:
                    83:56:eb:a9:b5:ea:26:5e:b9:e8:8e:98:3b:32:e7:
                    59:e3:fb:8f:00:92:6a:c5:b4:6b:63:5b:8c:ba:df:
                    65:f0:42:07:10:dd:ad:e0:3e:7f:9e:59:76:19:ef:
                    00:a9:d9:36:91:7c:47:1a:6c:e8:30:3c:1b:8d:a5:
                    f0:fd:44:5a:dd:56:43:b4:f2:bc:49:20:f2:94:ee:
                    83:ec:9c:37:7b:bd:13:8a:88:61:a5:f1:f3:47:dd:
                    45:f0:c1:2b:19:b5:98:1f:19:e5:13:e7:a1:0b:28:
                    8a:8f:b6:04:9a:df:94:12:8d:f3:05:6d:e9:88:16:
                    fa:8d:83:d6:ad:c9:0e:3d:0c:c0:ad:cf:a5:17:c6:
                    3e:e2:e5:85:39:83:3c:6e:d2:d8:a3:14:e7:2e:6f:
                    91:e8:7a:0d:01:6d:c7:39:13:92:87:7f:57:55:0e:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:40:7B:C8:6F:91:0B:76:5A:18:48:E8:FD:DF:CE:81:69:45:CC
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130362e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:f0:89:93:d7:b6:63:a1:7c:85:8d:6d:cd:53:58:44:62:
         5c:38:26:5c:fa:fe:47:11:19:de:6d:74:4f:9d:3a:e3:7f:ed:
         fb:44:67:77:c8:39:cd:1a:23:cf:b8:6b:d4:40:c7:e4:00:16:
         d7:89:f1:eb:cc:b4:3f:31:b9:dc:8d:ec:a2:ef:37:03:65:a3:
         bb:11:cb:69:10:64:7e:f7:09:24:32:bb:96:06:68:73:d4:c0:
         c1:29:3a:a8:13:1e:58:f4:2f:15:ce:c8:c5:f5:6f:07:29:0a:
         f4:2f:e6:97:fa:3a:e4:d3:f2:9d:86:3d:ea:7f:3c:ef:61:ef:
         f1:f8:ed:16:23:63:b7:be:65:e1:d3:d1:9f:b8:20:8a:dc:e1:
         c6:0f:21:bd:9d:64:0b:14:dd:c3:0c:3c:a2:c3:5a:56:66:84:
         b3:b3:d1:12:b8:bb:88:27:3f:bb:95:20:6f:de:4a:bc:9b:c1:
         8b:5d:82:b4:2c:c1:29:04:2c:5c:31:33:81:a6:1f:ab:a8:4d:
         f1:17:7e:d5:c9:5f:29:1d:e9:40:f9:31:c7:09:0d:aa:be:6f:
         4c:6e:dc:b0:c7:8e:a0:c9:f5:f9:b3:e7:88:23:b0:d3:da:0a:
         f4:a5:2b:f7:ca:f4:d0:d7:d6:64:82:be:c1:ad:8c:b6:90:a7:
         21:45:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:35 2026 by rpki-client