Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          J29yszMhBgiUnL19I6nCq98tQ48FBBsPb2TIs60IiAw=
Subject key identifier:   52:7C:24:FA:C0:E3:D3:49:21:E0:E0:B6:67:26:12:00:7A:BC:0F:23
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       0303853A69CE8B11F94E60D6A8BF71A25188DE21
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:24:16 +0000
ROA not before:           Tue 14 Jul 2026 19:19:16 +0000
ROA not after:            Tue 13 Jul 2027 19:24:16 +0000
asID:                     263349
IP address blocks:        189.51.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:03:85:3a:69:ce:8b:11:f9:4e:60:d6:a8:bf:71:a2:51:88:de:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:19:16 2026 GMT
            Not After : Jul 13 19:24:16 2027 GMT
        Subject: CN=527C24FAC0E3D34921E0E0B6672612007ABC0F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:29:88:9c:b6:a0:4b:5c:81:ee:38:f9:8c:
                    63:0b:62:26:7f:47:5b:3f:1c:fc:dd:41:4b:2b:0e:
                    46:6d:84:21:df:99:17:6e:8d:c0:eb:47:5b:05:8d:
                    f6:54:46:b1:64:2c:d9:14:bf:64:e7:10:68:17:2c:
                    f3:e4:ad:ef:24:d0:d2:70:af:ec:54:64:4a:11:df:
                    fc:dd:80:c6:24:03:29:bd:12:09:b2:4e:8c:68:2c:
                    9e:bc:75:f9:53:72:ec:65:41:e4:f4:a2:b8:b2:1f:
                    fc:76:ba:ae:c0:0a:15:c0:8a:81:8c:75:73:23:98:
                    9f:c9:53:11:42:4a:6b:fb:c9:96:62:fc:a3:75:af:
                    29:61:91:9c:d4:34:e7:cf:a9:f7:88:0d:86:01:71:
                    47:9d:09:57:4c:da:63:65:04:59:c8:95:0b:4d:0a:
                    e4:1a:02:cb:33:29:c1:22:e8:cb:97:e9:10:60:dd:
                    03:4d:0d:ca:f0:66:45:55:93:93:38:65:5f:07:97:
                    98:45:62:71:29:2b:27:27:a2:fc:d3:39:fa:1b:10:
                    36:6a:42:36:81:c6:9b:e7:53:69:be:2f:62:d0:be:
                    cb:51:d1:fe:8a:f3:a8:ed:c9:06:d1:97:97:7e:79:
                    f4:0c:ad:46:ca:c6:f0:49:64:54:93:9f:cd:00:c5:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:24:FA:C0:E3:D3:49:21:E0:E0:B6:67:26:12:00:7A:BC:0F:23
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3131392e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:8e:1f:46:82:11:e1:67:df:65:a1:b3:f7:f7:1d:0a:27:aa:
         f7:9e:d7:d4:66:07:4c:47:2f:17:2a:97:d8:3a:40:29:02:6c:
         95:e6:65:a7:02:f1:85:69:9e:f3:89:53:27:54:3f:9a:d5:d0:
         37:e8:a8:f7:26:5b:8e:2e:90:6a:c6:67:b6:a2:a3:6b:4c:5b:
         28:a3:62:fe:cc:ac:32:62:74:69:3f:2e:a1:24:b6:d3:05:00:
         73:70:d4:69:ac:ea:2c:0c:8b:72:c6:1d:74:50:88:7d:20:c3:
         a4:7a:4f:a7:bc:7b:de:5f:85:c5:52:91:b3:9a:26:29:76:2b:
         76:02:80:98:c6:7d:bc:21:9a:c5:c9:d6:32:67:cc:8c:23:e2:
         43:c8:ff:be:0b:10:c6:7f:13:ee:71:eb:0f:b8:09:90:f1:23:
         8c:d0:09:48:3f:22:56:44:e5:3f:18:09:ff:e0:50:63:20:b3:
         ec:f2:5c:cc:27:1b:61:ff:bf:5b:aa:5f:f2:87:fe:f2:9b:65:
         13:c6:f2:4d:d6:fa:92:bb:3f:9c:a2:dd:43:fc:11:5e:ff:f5:
         46:d9:50:22:3f:ac:43:d3:fc:34:79:04:92:97:56:05:4f:88:
         ae:ee:be:8e:4f:6f:1d:26:20:b7:a4:36:44:10:7a:61:e0:2d:
         72:fb:34:c0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAwOFOmnOixH5TmDWqL9xolGI3iEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwN0NFNUNCNjA3NzlFODFDRDJERTA3OURGQ0M0Q0FF
QUQ4NUFEQjAeFw0yNjA3MTQxOTE5MTZaFw0yNzA3MTMxOTI0MTZaMDMxMTAvBgNV
BAMTKDUyN0MyNEZBQzBFM0QzNDkyMUUwRTBCNjY3MjYxMjAwN0FCQzBGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPYSmInLagS1yB7jj5jGMLYiZ/
R1s/HPzdQUsrDkZthCHfmRdujcDrR1sFjfZURrFkLNkUv2TnEGgXLPPkre8k0NJw
r+xUZEoR3/zdgMYkAym9EgmyToxoLJ68dflTcuxlQeT0oriyH/x2uq7AChXAioGM
dXMjmJ/JUxFCSmv7yZZi/KN1rylhkZzUNOfPqfeIDYYBcUedCVdM2mNlBFnIlQtN
CuQaAsszKcEi6MuX6RBg3QNNDcrwZkVVk5M4ZV8Hl5hFYnEpKycnovzTOfobEDZq
QjaBxpvnU2m+L2LQvstR0f6K86jtyQbRl5d+efQMrUbKxvBJZFSTn80AxbrHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUnwk+sDj00kh4OC2ZyYSAHq8DyMwHwYDVR0j
BBgwFoAUDwfOXLYHeegc0t4HnfzEyurYWtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC8wRjA3Q0U1Q0I2MDc3OUU4MUNEMkRFMDc5REZDQzRDQUVBRDg1QURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMDdDRTVDQjYwNzc5RTgx
Q0QyREUwNzlERkNDNENBRUFEODVBREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzMTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9M3cwDQYJKoZIhvcNAQELBQADggEBABiOH0aC
EeFn32Whs/f3HQonqvee19RmB0xHLxcql9g6QCkCbJXmZacC8YVpnvOJUydUP5rV
0DfoqPcmW44ukGrGZ7aio2tMWyijYv7MrDJidGk/LqEkttMFAHNw1Gms6iwMi3LG
HXRQiH0gw6R6T6e8e95fhcVSkbOaJil2K3YCgJjGfbwhmsXJ1jJnzIwj4kPI/74L
EMZ/E+5x6w+4CZDxI4zQCUg/IlZE5T8YCf/gUGMgs+zyXMwnG2H/v1uqX/KH/vKb
ZRPG8k3W+pK7P5yi3UP8EV7/9UbZUCI/rEPT/DR5BJKXVgVPiK7uvo5Pbx0mILek
NkQQemHgLXL7NMA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:30 2026 by rpki-client