Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132352e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e3132352e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          QHvnJaMtBMSPLHm0HSnvTPrlPbz3SJ60XIOlSJa4Qtw=
Subject key identifier:   DF:F9:F1:5E:D0:65:AA:14:00:E4:B0:29:26:8A:B8:F6:93:1D:E8:A6
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       22A3D7BE159728F36486E039721B0FA78074052A
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132352e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:28:07 +0000
ROA not before:           Tue 14 Jul 2026 19:23:07 +0000
ROA not after:            Tue 13 Jul 2027 19:28:07 +0000
asID:                     263349
IP address blocks:        189.51.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:d7:be:15:97:28:f3:64:86:e0:39:72:1b:0f:a7:80:74:05:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:23:07 2026 GMT
            Not After : Jul 13 19:28:07 2027 GMT
        Subject: CN=DFF9F15ED065AA1400E4B029268AB8F6931DE8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:21:db:26:3a:85:35:2f:20:9b:e5:ee:4b:
                    6a:00:a3:86:3e:7d:1e:e2:f8:18:c0:69:44:ad:eb:
                    f0:9a:30:44:34:62:ec:a0:c1:2a:3f:65:55:b6:5a:
                    b9:b3:29:e4:2c:f4:76:2c:60:84:3b:66:c6:ae:b8:
                    e9:bf:12:b4:87:77:40:ff:79:40:7f:42:69:70:33:
                    28:fc:cb:72:4f:85:1c:22:84:49:7b:d9:2b:17:f2:
                    ef:52:2a:5c:f1:e1:21:72:e6:ae:82:62:39:07:9b:
                    e1:60:f6:18:7a:fe:73:48:7a:fa:20:5a:15:6c:a8:
                    c7:8c:b7:91:2f:13:27:31:74:5a:67:8d:3a:ed:69:
                    57:ca:31:2d:09:ac:eb:c0:86:77:7d:47:4b:4b:72:
                    eb:1f:2d:b2:94:fc:76:09:26:bb:3f:13:02:49:ea:
                    6c:75:c0:de:d8:52:9b:2c:44:74:cb:7d:e8:6a:11:
                    0d:f8:aa:a5:96:d2:b3:6f:2d:c9:c7:e3:0c:81:1a:
                    92:8b:04:6d:ab:b2:7a:99:c9:17:58:f8:76:01:f0:
                    01:83:ba:7c:6d:5e:94:67:d2:40:af:63:4d:f0:54:
                    d0:4a:a4:64:2f:06:71:4f:84:82:13:ac:16:eb:16:
                    09:7d:2a:6f:5b:cc:25:68:64:1c:ef:08:ce:06:6f:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F9:F1:5E:D0:65:AA:14:00:E4:B0:29:26:8A:B8:F6:93:1D:E8:A6
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e3132352e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:58:fc:11:b5:5a:67:c2:f1:85:0c:b2:3a:53:21:54:7b:
         2f:42:d5:9e:57:af:e1:e0:03:02:ce:9a:8d:d8:79:42:62:16:
         34:53:07:b8:db:d0:48:46:e1:7e:50:25:9a:2c:54:aa:44:ac:
         f1:3b:a9:c1:5e:64:dd:f4:26:06:be:7e:ae:65:cc:12:aa:0f:
         9f:8a:e4:86:a5:e7:88:41:53:02:a1:7c:d8:86:2b:69:92:52:
         54:e7:ea:3b:3c:af:ff:97:1a:af:86:de:1c:a3:0c:ba:66:bd:
         53:08:83:4b:45:00:a6:09:4a:4e:73:ed:d5:18:a4:12:0f:6d:
         50:09:61:43:c1:91:ad:47:28:c8:89:7e:5f:6f:24:3d:8c:9a:
         e9:12:08:7a:02:f7:1f:aa:dd:ab:22:97:bd:bf:65:11:7e:b2:
         ae:26:98:3b:cf:73:75:00:06:e0:2b:5f:cc:1f:fd:4b:3a:15:
         9b:49:79:bb:f3:b3:cd:26:dc:47:98:85:41:f0:54:d4:4d:3b:
         63:1f:63:d9:09:93:51:c7:b7:d6:cd:5a:1d:b0:ae:c9:9d:5c:
         dd:38:28:40:a5:19:d1:57:34:0e:c5:c6:d4:1e:87:f7:a6:6f:
         29:ed:95:32:aa:f2:1a:82:c5:2b:fc:17:e9:2c:b7:41:3d:8f:
         59:af:3b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:28 2026 by rpki-client