Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131312e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131312e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          Ezxbe0pRquHkPPCtOsBZNl9s28epmLyoMa/u+sTgMOk=
Subject key identifier:   8C:0B:5B:F4:BF:6D:72:1A:57:BB:7F:5E:15:60:38:A5:7C:E9:37:22
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       1B5EE66B62FCAB3A72CDD8C4DEC1D9720749A151
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131312e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:22:07 +0000
ROA not before:           Tue 14 Jul 2026 19:17:07 +0000
ROA not after:            Tue 13 Jul 2027 19:22:07 +0000
asID:                     263349
IP address blocks:        189.51.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5e:e6:6b:62:fc:ab:3a:72:cd:d8:c4:de:c1:d9:72:07:49:a1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:17:07 2026 GMT
            Not After : Jul 13 19:22:07 2027 GMT
        Subject: CN=8C0B5BF4BF6D721A57BB7F5E156038A57CE93722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:39:5f:4f:08:5c:2d:f4:01:50:a4:0e:e2:
                    78:7d:5c:8f:1b:ef:db:d7:fb:55:3f:1d:27:0f:99:
                    1d:38:46:69:e0:10:ed:80:c4:a7:e0:8b:46:87:67:
                    e7:cf:91:29:e7:42:31:44:a2:b6:4d:45:ba:72:21:
                    66:29:9c:0d:09:d8:6f:ad:e0:78:33:ff:69:58:8b:
                    37:2e:f6:bc:94:09:41:57:b0:8d:c8:c9:76:76:91:
                    33:61:e9:86:16:d0:6b:b2:80:c6:81:9c:32:16:99:
                    0c:ba:c0:04:f0:5c:08:3e:01:dd:05:7a:3e:e4:f2:
                    00:80:64:26:3b:8f:6a:51:3e:5b:92:5a:46:5b:67:
                    3a:52:8a:ff:a4:91:bd:ec:7b:be:22:e4:8f:f7:9f:
                    0a:c0:a1:84:38:a0:e8:30:f2:ce:6d:87:62:d3:5a:
                    6c:98:e4:22:12:3a:46:90:c0:d5:12:cd:11:d5:14:
                    c5:ba:36:e5:af:54:d3:bb:44:76:de:5a:f2:f2:f1:
                    e2:89:d4:b7:3e:52:e8:86:a9:95:e4:87:72:48:5d:
                    fc:9f:d9:16:92:3c:18:8f:ca:50:b2:d0:2e:e1:f0:
                    b3:fd:7d:fc:53:bf:36:90:f8:ae:c1:48:1f:e9:6e:
                    94:3b:32:6f:5b:ad:44:c9:bb:74:23:e8:51:1c:8f:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:5B:F4:BF:6D:72:1A:57:BB:7F:5E:15:60:38:A5:7C:E9:37:22
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131312e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:14:b4:0b:6f:fa:4c:4e:c6:27:f7:f1:9e:7a:6d:d4:bd:65:
         85:30:ce:0a:84:17:66:d4:40:3a:3f:4a:55:2b:3f:5b:fb:44:
         d1:bf:0d:31:5d:89:21:14:58:0b:2f:ad:55:a8:56:41:61:54:
         c3:f4:0a:d3:80:80:a1:f9:32:9f:32:f7:35:e6:86:b2:3b:89:
         a6:16:ea:66:98:2f:72:12:d6:d3:4c:87:f7:3a:a0:b9:8a:57:
         dc:96:63:1a:80:65:15:35:af:56:9f:58:a3:81:63:c6:3e:79:
         4a:a2:90:6c:aa:3d:ec:75:5a:cf:07:8b:e5:f0:ad:2f:0e:5b:
         d8:e0:74:49:8d:2d:b8:bc:19:fe:61:8b:bb:6c:b9:c3:da:83:
         ad:fe:89:ab:2e:02:af:3a:b5:47:cd:3f:ed:8a:42:74:ec:35:
         c4:e4:24:1c:9c:06:a5:b1:a9:10:89:2f:f8:b3:23:79:d9:5f:
         2c:a5:9c:37:d2:39:b8:a8:6f:7f:3e:96:34:6e:74:dd:2d:ff:
         b6:fb:82:13:ba:55:36:3f:da:ef:51:d4:c7:d7:de:80:51:c7:
         d9:7e:1a:3a:b9:84:6c:fc:35:d2:01:97:dd:1f:d4:42:69:a1:
         7f:82:1a:c5:ca:8e:77:ea:51:eb:49:e4:c8:0a:c5:78:7c:da:
         07:4c:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:34 2026 by rpki-client