Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132312e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3132312e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          mSKzBNDtWxgpfwEJ8FmphmT2J6kZ9e9VDQdsBS/jCFE=
Subject key identifier:   BA:21:20:DA:B8:7E:24:29:0B:B9:AD:7A:A4:66:A3:68:F1:C3:9F:4C
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       12B13BC7C8E55B368EB5865A27CCD89B4782CA12
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132312e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:24:28 +0000
ROA not before:           Tue 14 Jul 2026 19:19:28 +0000
ROA not after:            Tue 13 Jul 2027 19:24:28 +0000
asID:                     263349
IP address blocks:        189.51.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b1:3b:c7:c8:e5:5b:36:8e:b5:86:5a:27:cc:d8:9b:47:82:ca:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:19:28 2026 GMT
            Not After : Jul 13 19:24:28 2027 GMT
        Subject: CN=BA2120DAB87E24290BB9AD7AA466A368F1C39F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e9:9d:28:ca:76:83:62:39:7b:94:60:99:9c:
                    94:09:85:60:5b:10:df:11:fb:f6:8e:3d:0f:de:48:
                    97:ba:a7:09:25:13:89:64:73:aa:c5:1a:6f:70:9b:
                    8d:13:a3:66:12:3b:90:e6:9d:81:e2:ab:60:0b:5b:
                    04:99:30:12:85:f7:db:07:43:25:50:b1:32:48:ef:
                    bc:67:68:04:e8:57:2f:a6:f4:37:fc:76:d0:ee:7f:
                    66:70:55:9a:ae:50:83:20:3b:d3:00:2a:76:07:95:
                    af:61:84:cc:00:cc:39:e4:39:0d:e1:a8:de:90:3c:
                    7a:ac:6c:c8:45:c7:d7:c1:f5:c8:df:bd:b7:16:5b:
                    2e:32:1c:81:92:2c:f5:f9:91:8c:e4:2d:3a:b8:6b:
                    15:f0:99:cb:77:0e:1c:b5:92:4a:f1:70:ce:0c:89:
                    d3:3b:73:3e:12:61:b5:b0:a1:28:e7:ab:23:60:6b:
                    75:10:c3:b6:f7:4f:cf:03:03:29:08:42:2a:49:20:
                    a1:47:fd:17:8f:15:31:2f:4d:f6:d9:c7:6d:af:a2:
                    d4:3f:b9:fb:f0:a5:08:85:e0:f9:7a:3e:a5:ce:ef:
                    35:d3:cf:af:62:e7:88:a4:38:b8:11:bc:00:97:48:
                    5e:d0:81:53:2b:f1:7e:b9:d2:a7:5d:61:1d:d9:03:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:21:20:DA:B8:7E:24:29:0B:B9:AD:7A:A4:66:A3:68:F1:C3:9F:4C
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132312e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:1a:b0:c8:62:bb:1e:d0:75:7e:e7:95:73:ea:3c:ef:b1:
         95:55:48:24:23:8a:e5:d6:18:25:91:1e:1d:38:3f:5b:87:01:
         8a:fa:74:e2:51:27:d6:d6:02:fb:7b:28:b5:33:5a:a6:77:9d:
         5a:4a:7b:68:f5:bd:16:b8:86:6d:09:d2:b0:04:87:f7:c9:84:
         54:33:9c:0b:d0:e8:67:e4:fa:e4:23:50:04:d4:2c:df:48:44:
         46:a7:9c:e6:46:93:9e:1b:fe:de:51:d6:bb:10:39:31:2e:f6:
         81:fa:3e:b5:19:b6:a3:c0:e2:36:66:3d:a5:2a:1b:23:b0:b5:
         1b:7f:5e:e7:72:44:a1:fd:41:7b:e0:c4:bf:6b:0d:66:17:4a:
         d8:2a:ee:14:b8:5e:03:ff:ff:dd:d1:27:a6:15:61:01:bd:71:
         9c:24:5c:2d:3f:43:dc:ca:f6:a5:9d:18:24:41:eb:c3:50:b9:
         5b:05:5b:22:f2:fd:c7:74:83:fe:cf:3f:66:66:39:13:37:29:
         f2:2b:3f:1e:82:d0:fd:86:d4:bd:4b:62:50:d0:ce:70:d4:6a:
         5c:6f:41:ce:0d:70:60:5d:70:dd:a1:7c:ce:c5:c7:96:e7:56:
         1e:fe:86:cb:d9:8c:a9:2e:6f:36:f1:0c:ba:c5:1c:bc:a0:b9:
         ef:e6:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:35 2026 by rpki-client