Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39392e302f32342d3234203d3e20323633333439.roa
File:                     3138392e35312e39392e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          JJFhmXuD7Uqf7KbC7sX+PCGK51MrN+ItL9PnN+f/p8s=
Subject key identifier:   21:AD:76:C1:28:76:24:89:64:45:3D:06:BC:6E:7A:02:27:1B:10:8F
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       6ABBD2E111E99304DE27AB5432EAB88D7997825D
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39392e302f32342d3234203d3e20323633333439.roa
Signing time:             Tue 14 Jul 2026 19:20:07 +0000
ROA not before:           Tue 14 Jul 2026 19:15:07 +0000
ROA not after:            Tue 13 Jul 2027 19:20:07 +0000
asID:                     263349
IP address blocks:        189.51.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:bb:d2:e1:11:e9:93:04:de:27:ab:54:32:ea:b8:8d:79:97:82:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 14 19:15:07 2026 GMT
            Not After : Jul 13 19:20:07 2027 GMT
        Subject: CN=21AD76C12876248964453D06BC6E7A02271B108F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:9e:83:dd:54:e8:81:2a:e9:29:a2:b0:fc:
                    72:ab:1f:18:78:7e:b7:67:92:8b:80:54:76:63:3c:
                    e9:94:8d:8b:a6:e0:c8:28:15:ea:d2:c3:b0:81:16:
                    85:d6:17:9c:98:64:17:b3:7f:89:99:37:2b:de:8a:
                    d0:e5:ba:71:bb:c2:c0:5d:a2:30:d8:03:58:c5:28:
                    ca:1b:99:23:5f:96:84:fc:89:bd:8a:80:d0:b0:1c:
                    30:22:bc:d5:b0:c2:d3:e9:64:38:a8:82:66:a2:ce:
                    59:a7:8c:a3:d3:38:d5:96:b4:c3:1b:45:d8:b1:30:
                    bb:65:8c:0d:2f:49:fe:03:8d:26:83:8d:59:08:00:
                    63:a5:ce:a4:07:f3:02:d7:5b:b5:03:f8:e7:45:88:
                    a6:d5:fb:26:d6:d7:93:e5:18:6a:32:0d:54:ec:c0:
                    0c:cd:c2:9e:34:a8:d1:b9:cf:10:e8:92:95:cd:8b:
                    b0:4f:98:28:3a:67:9a:b8:e9:92:58:45:2d:7c:1e:
                    b3:ad:79:fe:a4:f4:f7:a3:9b:b8:d2:5b:ad:3d:64:
                    46:e0:23:2a:7e:89:01:b7:1e:e4:9c:9c:24:63:5c:
                    4f:f1:cb:13:2d:b0:8a:da:ce:ad:86:54:c9:27:cf:
                    9e:2d:5c:ca:88:0c:87:fa:d3:21:2a:55:49:27:98:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AD:76:C1:28:76:24:89:64:45:3D:06:BC:6E:7A:02:27:1B:10:8F
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3138392e35312e39392e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:5a:1a:53:6e:4b:4f:e9:70:9d:5b:f2:fd:d7:bd:b0:da:
         be:d9:e3:c6:a9:97:43:f7:07:f0:3e:8e:d0:64:c4:fa:8b:ad:
         3a:cd:2e:87:19:5a:03:6a:68:70:0d:d1:ff:2a:d5:2c:ba:7d:
         e1:cc:aa:d1:f0:5f:b3:87:71:d5:e1:b1:22:13:87:f6:34:39:
         ac:1b:56:ea:09:2e:19:f7:86:da:09:a5:e2:1c:c3:ab:35:f9:
         4b:6a:c3:be:a7:b1:6a:08:1d:0c:b7:30:63:9f:22:36:de:44:
         a6:bb:2a:e2:ba:2b:7e:58:52:57:58:ca:90:0f:b8:74:e8:ff:
         32:7f:5f:91:98:8f:cf:8b:13:4f:31:bc:3c:de:81:d8:65:c8:
         01:9a:22:37:05:f8:6c:97:3d:23:87:d1:40:cf:ab:25:9f:13:
         ca:ba:c0:ba:fe:30:d6:3c:38:95:54:87:b3:22:90:e7:38:f3:
         bc:02:59:5f:cf:ea:dd:b9:9c:18:6e:a2:77:ae:48:98:87:e3:
         a4:ad:ee:b5:0b:5c:22:8c:28:05:c4:9d:9a:1b:59:0e:db:ee:
         60:82:46:c5:f6:65:e3:92:39:f1:48:79:44:be:08:a6:74:61:
         27:f2:91:9c:26:23:88:99:61:f0:94:54:aa:ab:7b:2e:36:1e:
         91:2a:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:51:31 2026 by rpki-client