Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e39372e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          P1Khd2tOTqhVOobXxCDGCkSgf7js7WgGic/j3kbfgbs=
Subject key identifier:   B8:1F:6E:4C:7C:BD:D9:5E:2B:C1:33:DD:62:04:3A:28:25:E9:5E:53
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       0157427A148FBC6CE90439DCB94026382EE34D2F
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:19:33 +0000
ROA not before:           Tue 14 Jul 2026 19:14:33 +0000
ROA not after:            Tue 13 Jul 2027 19:19:33 +0000
asID:                     263349
IP address blocks:        189.51.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:57:42:7a:14:8f:bc:6c:e9:04:39:dc:b9:40:26:38:2e:e3:4d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:14:33 2026 GMT
            Not After : Jul 13 19:19:33 2027 GMT
        Subject: CN=B81F6E4C7CBDD95E2BC133DD62043A2825E95E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:89:5e:05:f2:62:72:81:f9:96:ad:1b:c3:33:
                    af:43:e1:ee:d8:91:52:00:c9:33:66:66:ee:45:d7:
                    8e:51:8c:5d:dc:7f:37:bd:6b:5d:47:a9:33:43:3c:
                    77:21:ab:7b:79:3d:c2:e2:72:04:c2:f2:07:80:e4:
                    e4:e1:5c:d0:a7:5c:85:98:bc:fa:20:45:eb:e5:29:
                    f1:83:33:1c:1b:4c:5d:c7:f6:74:e7:39:27:6e:19:
                    cf:42:a7:3c:5b:ab:af:34:76:5b:73:5c:47:1c:cd:
                    05:ec:d3:02:d4:57:65:21:f7:cf:02:91:9b:80:dc:
                    24:a8:4c:67:ea:b1:fc:eb:cb:51:86:f3:e5:bd:fc:
                    24:fc:bf:86:52:cc:69:c4:e2:08:57:ed:08:6b:02:
                    81:cb:e9:85:7c:8c:e3:3a:6b:f9:bb:62:a2:78:08:
                    71:56:a7:b4:d7:b2:48:fc:59:24:83:0a:71:2e:ce:
                    86:14:18:01:e1:a5:33:0f:78:be:af:d5:ff:e0:63:
                    4b:2d:b1:a9:65:0e:63:37:ef:c6:03:bd:b0:75:fe:
                    d8:99:2c:d0:cc:ff:ae:46:75:bb:30:ba:fe:78:de:
                    0c:45:05:c3:ca:50:1d:cf:67:f4:ae:51:e0:b2:ed:
                    22:20:a5:c3:a7:9c:fa:10:24:7f:b1:b1:a2:a3:99:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:6E:4C:7C:BD:D9:5E:2B:C1:33:DD:62:04:3A:28:25:E9:5E:53
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39372e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:a3:ca:70:d7:d7:d9:90:88:cf:55:29:d2:9c:16:8c:c2:d0:
         54:31:25:5a:c1:cc:de:10:68:15:ef:33:d0:d5:a7:87:aa:2e:
         02:f0:13:2d:22:af:63:ac:74:35:87:97:2e:de:8f:cc:63:4f:
         5b:76:a5:8a:5d:73:9e:09:75:ef:bd:d6:5b:ee:dc:8a:dc:98:
         93:c5:99:10:46:8e:72:a9:fa:e4:cd:91:39:51:4d:71:c4:df:
         04:fa:55:23:79:4a:1a:9d:dd:7e:1c:4c:a1:6c:09:ed:7a:0b:
         10:2e:fc:d2:1e:f6:46:0b:33:93:eb:ff:46:93:b4:42:d3:80:
         0b:07:67:80:fa:15:84:4c:19:c7:b3:4b:12:54:bf:4f:df:6f:
         52:0a:91:3e:d4:ef:58:75:26:a9:f1:5a:da:52:a8:ba:b0:e4:
         36:d8:9f:e9:5d:c3:b0:d1:22:69:63:09:0d:11:30:0a:11:c6:
         a2:4e:e8:15:9d:4e:65:a7:ae:a9:d6:35:24:29:90:af:e1:2a:
         9e:13:40:cd:4b:15:c1:37:97:ee:bc:57:63:18:d2:89:a9:9b:
         64:7a:ce:f0:f6:2f:60:5e:26:ac:f8:d3:bf:00:19:39:bf:9b:
         d0:54:41:f0:2c:76:65:10:61:d1:a4:fe:57:54:2a:d2:69:91:
         24:52:e6:86
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAVdCehSPvGzpBDncuUAmOC7jTS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYwN0NFNUNCNjA3NzlFODFDRDJERTA3OURGQ0M0Q0FF
QUQ4NUFEQjAeFw0yNjA3MTQxOTE0MzNaFw0yNzA3MTMxOTE5MzNaMDMxMTAvBgNV
BAMTKEI4MUY2RTRDN0NCREQ5NUUyQkMxMzNERDYyMDQzQTI4MjVFOTVFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXiV4F8mJygfmWrRvDM69D4e7Y
kVIAyTNmZu5F145RjF3cfze9a11HqTNDPHchq3t5PcLicgTC8geA5OThXNCnXIWY
vPogRevlKfGDMxwbTF3H9nTnOSduGc9Cpzxbq680dltzXEcczQXs0wLUV2Uh988C
kZuA3CSoTGfqsfzry1GG8+W9/CT8v4ZSzGnE4ghX7QhrAoHL6YV8jOM6a/m7YqJ4
CHFWp7TXskj8WSSDCnEuzoYUGAHhpTMPeL6v1f/gY0stsallDmM378YDvbB1/tiZ
LNDM/65Gdbswuv543gxFBcPKUB3PZ/SuUeCy7SIgpcOnnPoQJH+xsaKjmS/pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuB9uTHy92V4rwTPdYgQ6KCXpXlMwHwYDVR0j
BBgwFoAUDwfOXLYHeegc0t4HnfzEyurYWtswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHQ0dFhUak5ZQ29WTkpNV29QM0d1dnB4Y2pySm93RUhNejlhWHFwWmlr
bk0vMC8wRjA3Q0U1Q0I2MDc3OUU4MUNEMkRFMDc5REZDQzRDQUVBRDg1QURCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGMDdDRTVDQjYwNzc5RTgx
Q0QyREUwNzlERkNDNENBRUFEODVBREIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0NHRYVGpOWUNvVk5KTVdvUDNHdXZweGNqckpvd0VITXo5YVhxcFppa25NLzAv
MzEzODM5MmUzNTMxMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzMzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvTNhMA0GCSqGSIb3DQEBCwUAA4IBAQDKo8pw19fZ
kIjPVSnSnBaMwtBUMSVawczeEGgV7zPQ1aeHqi4C8BMtIq9jrHQ1h5cu3o/MY09b
dqWKXXOeCXXvvdZb7tyK3JiTxZkQRo5yqfrkzZE5UU1xxN8E+lUjeUoand1+HEyh
bAntegsQLvzSHvZGCzOT6/9Gk7RC04ALB2eA+hWETBnHs0sSVL9P329SCpE+1O9Y
dSap8VraUqi6sOQ22J/pXcOw0SJpYwkNETAKEcaiTugVnU5lp66p1jUkKZCv4Sqe
E0DNSxXBN5fuvFdjGNKJqZtkes7w9i9gXias+NO/ABk5v5vQVEHwLHZlEGHRpP5X
VCrSaZEkUuaG
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:46 2026 by rpki-client