Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131332e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131332e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          DsRj0ymX9DVhvEQbQGqHcRduePgJ09jyxDP0qaMIYCM=
Subject key identifier:   41:F1:FA:2D:DD:11:2F:19:F6:51:07:CC:0A:5E:FC:DF:A6:11:1E:46
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       54F84A3A5B2668C9F978D467BDE816B2EF0AD652
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131332e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:23:10 +0000
ROA not before:           Tue 14 Jul 2026 19:18:10 +0000
ROA not after:            Tue 13 Jul 2027 19:23:10 +0000
asID:                     263349
IP address blocks:        189.51.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f8:4a:3a:5b:26:68:c9:f9:78:d4:67:bd:e8:16:b2:ef:0a:d6:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:18:10 2026 GMT
            Not After : Jul 13 19:23:10 2027 GMT
        Subject: CN=41F1FA2DDD112F19F65107CC0A5EFCDFA6111E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:79:80:f0:9f:a9:a7:fa:83:4f:60:7d:4d:
                    32:55:f2:b9:c8:98:de:f5:24:34:ba:44:46:3c:af:
                    e8:62:b9:c1:2e:26:98:df:01:dc:8d:14:64:e3:5a:
                    a8:d6:78:bb:6f:2c:32:12:a3:52:ca:d1:72:fb:7f:
                    15:a5:e4:99:bf:32:81:76:ec:fe:7d:f0:21:8c:83:
                    7d:2a:92:74:4c:fb:8d:6d:de:00:55:87:57:42:f0:
                    24:9a:9c:af:d1:8b:7f:df:72:77:ad:82:2d:58:54:
                    07:b0:ee:2b:59:5e:bb:9b:1e:77:20:90:2e:fa:e7:
                    e9:09:69:39:22:b2:4d:a5:dc:e3:37:05:75:b9:99:
                    6f:2a:75:b5:6f:9d:ba:8d:2d:5d:40:f9:b4:30:0e:
                    a5:66:60:5e:d0:e7:03:72:81:df:b0:81:77:8c:b0:
                    1c:a5:81:f0:dc:7d:35:24:8b:60:14:21:80:cf:69:
                    63:a1:c8:1e:6b:84:12:c6:94:90:a4:1f:79:da:62:
                    0d:11:1f:24:7c:57:b3:1e:be:9b:77:46:ee:2c:65:
                    c7:c6:52:27:a7:4b:87:7f:fc:66:e8:31:0f:4b:e4:
                    86:dd:db:04:bc:29:94:0c:de:0e:75:d7:96:12:96:
                    c8:9e:0a:8e:9f:77:86:e5:86:d5:21:b6:d5:73:95:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F1:FA:2D:DD:11:2F:19:F6:51:07:CC:0A:5E:FC:DF:A6:11:1E:46
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131332e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:da:88:8a:1d:f2:a6:83:bb:b0:d4:66:da:d8:60:69:b0:46:
         b2:b5:6e:24:39:79:50:f5:32:04:96:94:5f:55:28:31:71:b1:
         e5:84:17:32:9c:13:24:f2:4b:cc:ed:96:63:72:f6:a0:c1:f5:
         f4:7f:8e:8f:a2:ba:09:90:f4:56:da:b0:c1:17:08:9f:6f:33:
         c1:9f:ba:67:97:09:4d:16:98:56:4c:8d:a3:7a:88:c4:cb:df:
         fb:b8:bc:21:2b:5e:89:a8:29:bb:b8:20:d8:75:b7:fa:9b:a6:
         38:2c:45:bc:69:d3:3f:70:f3:d5:b3:9c:34:26:4e:8c:f8:9c:
         33:0d:1a:1f:54:38:b7:9c:43:27:f0:86:bf:cb:78:4d:a4:b6:
         43:b5:94:ee:c6:35:12:bd:6f:76:4a:2f:65:20:61:79:e8:4e:
         7b:4c:c1:c1:15:14:d1:5d:2b:e1:45:9f:b5:a2:7b:38:78:2a:
         11:86:7d:c9:89:8f:0e:58:43:cf:5e:64:3b:8b:18:12:c2:0c:
         01:e8:e6:52:0b:83:e5:ff:75:24:b3:ac:a5:71:1a:4c:b8:be:
         ae:3d:33:c5:50:1f:bf:01:71:a4:54:1c:46:50:bd:2e:37:c4:
         0f:de:71:55:f8:ba:32:45:f8:40:95:22:6a:99:b0:1c:ba:e4:
         bf:21:aa:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVPhKOlsmaMn5eNRnvegWsu8K1lIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwN0NFNUNCNjA3NzlFODFDRDJERTA3OURGQ0M0Q0FF
QUQ4NUFEQjAeFw0yNjA3MTQxOTE4MTBaFw0yNzA3MTMxOTIzMTBaMDMxMTAvBgNV
BAMTKDQxRjFGQTJEREQxMTJGMTlGNjUxMDdDQzBBNUVGQ0RGQTYxMTFFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNXmA8J+pp/qDT2B9TTJV8rnI
mN71JDS6REY8r+hiucEuJpjfAdyNFGTjWqjWeLtvLDISo1LK0XL7fxWl5Jm/MoF2
7P598CGMg30qknRM+41t3gBVh1dC8CSanK/Ri3/fcnetgi1YVAew7itZXrubHncg
kC765+kJaTkisk2l3OM3BXW5mW8qdbVvnbqNLV1A+bQwDqVmYF7Q5wNygd+wgXeM
sBylgfDcfTUki2AUIYDPaWOhyB5rhBLGlJCkH3naYg0RHyR8V7Mevpt3Ru4sZcfG
UienS4d//GboMQ9L5Ibd2wS8KZQM3g5115YSlsieCo6fd4blhtUhttVzlUSVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQfH6Ld0RLxn2UQfMCl7836YRHkYwHwYDVR0j
BBgwFoAUDwfOXLYHeegc0t4HnfzEyurYWtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC8wRjA3Q0U1Q0I2MDc3OUU4MUNEMkRFMDc5REZDQzRDQUVBRDg1QURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMDdDRTVDQjYwNzc5RTgx
Q0QyREUwNzlERkNDNENBRUFEODVBREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzMTMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9M3EwDQYJKoZIhvcNAQELBQADggEBAAjaiIod
8qaDu7DUZtrYYGmwRrK1biQ5eVD1MgSWlF9VKDFxseWEFzKcEyTyS8ztlmNy9qDB
9fR/jo+iugmQ9FbasMEXCJ9vM8GfumeXCU0WmFZMjaN6iMTL3/u4vCErXomoKbu4
INh1t/qbpjgsRbxp0z9w89WznDQmToz4nDMNGh9UOLecQyfwhr/LeE2ktkO1lO7G
NRK9b3ZKL2UgYXnoTntMwcEVFNFdK+FFn7Wiezh4KhGGfcmJjw5YQ89eZDuLGBLC
DAHo5lILg+X/dSSzrKVxGky4vq49M8VQH78BcaRUHEZQvS43xA/ecVX4ujJF+ECV
ImqZsBy65L8hqrg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:34 2026 by rpki-client