Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          KCOYxsTlHtDM4o6+BeSAt2VGEkMkMgGy5TJjoEjzD3Q=
Subject key identifier:   E6:16:EA:D6:D2:75:40:61:BE:02:CA:FC:A6:D6:73:D3:4F:53:CB:C9
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       603A23D67AC409943A3065CE10E5C578B3571D88
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:21:50 +0000
ROA not before:           Tue 14 Jul 2026 19:16:50 +0000
ROA not after:            Tue 13 Jul 2027 19:21:50 +0000
asID:                     263349
IP address blocks:        189.51.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:3a:23:d6:7a:c4:09:94:3a:30:65:ce:10:e5:c5:78:b3:57:1d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:16:50 2026 GMT
            Not After : Jul 13 19:21:50 2027 GMT
        Subject: CN=E616EAD6D2754061BE02CAFCA6D673D34F53CBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:7e:e3:2f:17:ba:fb:11:f0:66:f0:25:ba:
                    fe:28:d4:e9:5b:d9:ba:7a:51:1c:10:93:0e:a8:eb:
                    76:d5:68:19:c2:13:11:6a:c1:e9:9f:eb:a2:52:c5:
                    d6:d0:7d:50:48:0e:14:b4:d0:43:fe:fc:8b:17:a2:
                    14:6d:47:9b:ff:9a:03:26:85:6a:c3:e9:7f:e4:65:
                    01:b0:72:63:26:2e:8b:77:8c:1a:66:c6:79:ca:fc:
                    c8:d1:a3:be:97:c3:0a:43:b7:31:39:12:d9:b1:d5:
                    08:1f:44:f3:54:e1:f3:f2:35:e7:17:66:62:f2:aa:
                    dc:66:96:2c:7d:c0:83:a9:d4:ce:8b:f2:fe:8a:9b:
                    6c:e0:37:e0:76:5d:60:77:d6:47:da:ea:8a:f2:6e:
                    9f:5d:36:cc:07:1c:60:8e:e3:71:6a:38:17:cd:a4:
                    02:7c:fa:a6:11:1e:a9:09:f4:89:fb:2f:0c:5a:ef:
                    71:8d:18:58:fb:f3:2b:20:95:d2:b2:90:1c:de:7a:
                    5b:b4:53:f4:11:9f:58:46:44:a6:2c:23:dd:33:6b:
                    84:9e:10:21:c0:4b:fc:0d:9b:cf:b5:de:83:4f:41:
                    2e:7b:23:16:97:49:8c:ea:bd:fb:71:0b:47:c2:26:
                    ac:79:6b:3b:f3:2b:93:fc:35:40:04:28:44:43:3f:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:16:EA:D6:D2:75:40:61:BE:02:CA:FC:A6:D6:73:D3:4F:53:CB:C9
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3130382e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:09:27:04:10:5b:ff:8f:bf:fc:02:8b:5c:8f:4f:c9:e8:9f:
         92:1c:27:cc:1e:01:71:c2:5d:4a:31:82:f9:ca:89:e3:f2:28:
         47:4b:6d:ad:73:9b:86:b5:d9:a3:1f:b2:80:95:1f:8d:4a:f7:
         10:ae:5c:2b:c3:6a:9f:d7:ef:b2:cc:d0:dc:5e:32:8b:1b:37:
         75:6d:28:cc:b7:04:fa:79:3f:b5:86:55:d6:e0:c3:04:65:4a:
         26:b9:18:cc:5e:16:ef:ff:4e:0e:c1:bf:e8:1e:8c:f7:26:df:
         2c:54:47:8c:98:18:f8:0b:14:c6:4a:27:35:83:28:c5:08:69:
         e6:2e:c4:76:64:6e:12:8a:d7:e5:7e:c7:ca:cf:14:d2:71:2a:
         92:fb:67:3f:ae:7d:ac:5f:aa:b7:1a:a6:55:78:e0:e6:d9:81:
         48:29:5c:ad:76:b0:eb:6f:c5:db:07:98:33:8e:12:b2:1f:27:
         02:19:53:2e:40:cd:39:3c:8f:be:82:83:b9:b1:f2:12:d8:bf:
         eb:d1:d6:78:81:31:80:67:b0:d2:9b:71:28:d3:28:ef:d6:d2:
         c9:e8:c7:6d:31:d0:fa:98:c2:04:e0:50:17:14:98:cb:90:a8:
         8f:3c:a1:2a:fc:af:c6:c6:99:1c:a4:b6:72:d5:99:70:60:d6:
         36:44:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:27 2026 by rpki-client