Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131352e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131352e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          IswT293wraN1sAxzH/6dZKHQePA8H3ej6wGmFwZwQ/M=
Subject key identifier:   D1:F5:4E:8B:48:81:B5:7E:65:42:EB:29:8E:31:54:CB:91:0F:4D:FE
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       3F239E169E4FCC9970BF7FB9BB1FCB830A120888
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131352e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:23:22 +0000
ROA not before:           Tue 14 Jul 2026 19:18:22 +0000
ROA not after:            Tue 13 Jul 2027 19:23:22 +0000
asID:                     263349
IP address blocks:        189.51.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:23:9e:16:9e:4f:cc:99:70:bf:7f:b9:bb:1f:cb:83:0a:12:08:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:18:22 2026 GMT
            Not After : Jul 13 19:23:22 2027 GMT
        Subject: CN=D1F54E8B4881B57E6542EB298E3154CB910F4DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7e:c7:a0:92:98:d8:14:49:93:16:e3:a0:52:
                    c5:e4:d5:fd:36:b7:2a:a1:cf:6c:21:24:d3:f8:f7:
                    fb:10:2f:da:42:b3:fd:51:aa:2f:47:96:31:0e:eb:
                    6d:74:49:cb:34:15:f3:fa:09:42:b1:2e:b8:3c:e4:
                    b6:52:8d:c8:eb:2d:ca:73:b8:f6:f7:00:e2:68:e6:
                    04:14:db:27:20:ad:91:85:22:9a:bb:4d:78:18:c8:
                    d6:0a:2c:8c:d2:1d:46:1c:da:43:de:5b:4f:17:32:
                    16:50:ea:f5:81:ca:6a:e4:4c:4d:83:2e:a2:47:2f:
                    88:81:d7:ed:25:71:10:ae:7e:3d:9a:dd:1a:4f:9a:
                    84:dd:d4:83:2b:3d:81:94:73:eb:44:73:24:60:a3:
                    f9:5a:9d:3d:5c:5b:8f:73:15:9d:94:51:65:52:4a:
                    66:22:e4:5b:e8:79:c4:b8:6a:3f:98:24:d5:fc:9a:
                    fa:8e:b0:59:ec:fd:65:ec:62:57:06:56:66:a3:5e:
                    94:06:3f:c1:7c:23:b1:13:f6:cd:01:c7:39:de:8e:
                    15:ca:58:b0:ed:7b:64:3b:b8:6d:53:b2:5d:ae:3a:
                    13:76:9e:c5:26:2a:bf:bb:16:30:b8:73:ac:dd:b3:
                    b5:6f:83:03:70:4b:b3:97:56:07:30:55:1e:ce:c8:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:4E:8B:48:81:B5:7E:65:42:EB:29:8E:31:54:CB:91:0F:4D:FE
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131352e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:83:91:9c:91:39:da:ec:8d:d5:2c:36:46:7a:89:ea:2a:2e:
         c1:40:bb:14:6c:8e:76:af:75:a6:c7:25:29:4c:54:04:99:63:
         0f:f8:15:59:f9:d4:0b:dd:3b:34:2f:2d:7e:d8:7a:fe:15:de:
         f5:13:ed:40:8f:31:39:c7:dc:f2:4f:cd:d9:2a:5a:df:86:15:
         bf:c2:dc:3d:e5:3a:07:d0:ca:3c:43:3b:9a:17:c4:0b:42:96:
         58:6b:8d:30:1a:69:9e:b2:a1:a8:ee:7c:dc:20:2c:48:9e:19:
         46:6b:31:2e:cf:5a:16:18:ad:e3:a5:5d:9a:c2:4c:f2:c8:df:
         31:76:6c:eb:c8:6c:69:3a:b2:c3:8f:0d:f1:d5:5a:1e:2c:dd:
         22:05:28:64:25:c0:3a:01:fe:dd:00:fd:0f:0e:21:4b:ab:2a:
         34:89:f6:9d:e5:b1:41:c4:ed:6b:0e:33:cb:2b:03:7a:26:06:
         64:88:c1:cc:67:99:ec:33:e5:e0:6d:32:c4:ed:2c:6a:b1:c1:
         9f:de:46:ef:a5:5c:f6:a0:6c:d5:3e:fb:2a:7b:b8:b2:d7:14:
         26:cf:06:4f:60:a3:24:09:ea:36:52:f4:5b:1c:e8:c8:fe:07:
         d8:88:6c:6e:50:83:b9:a4:3b:66:df:d1:6b:2a:22:d8:ec:bc:
         8c:96:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:27 2026 by rpki-client