Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32332e302f32342d3234203d3e20323633333439.roa
File:                     3139312e33372e32332e302f32342d3234203d3e20323633333439.roa (raw, json)
Hash identifier:          dO6pqfv82J4VWf5N/uWX3oT/hAdLu/cwCc5EBXyZ9Fk=
Subject key identifier:   6B:3B:B9:0E:48:14:A9:84:AE:D2:DE:B1:01:3D:20:0F:26:FE:9B:8E
Certificate issuer:       /CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
Certificate serial:       6FCDE8EFF3FC9713416BD9B7F30704DDE2F50DA7
Authority key identifier: 0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32332e302f32342d3234203d3e20323633333439.roa
Signing time:             Wed 15 Jul 2026 13:31:03 +0000
ROA not before:           Wed 15 Jul 2026 13:26:03 +0000
ROA not after:            Wed 14 Jul 2027 13:31:03 +0000
asID:                     263349
IP address blocks:        191.37.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl
                          rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cd:e8:ef:f3:fc:97:13:41:6b:d9:b7:f3:07:04:dd:e2:f5:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB
        Validity
            Not Before: Jul 15 13:26:03 2026 GMT
            Not After : Jul 14 13:31:03 2027 GMT
        Subject: CN=6B3BB90E4814A984AED2DEB1013D200F26FE9B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:25:44:fd:ef:14:47:c2:9c:6f:47:13:ad:
                    18:89:69:22:12:f4:19:5e:be:36:f8:4a:01:be:91:
                    6a:6e:8b:2b:b4:5b:fe:f5:1b:0f:29:99:4a:c3:71:
                    19:5a:90:e0:f4:57:09:a7:06:02:64:5e:47:a1:eb:
                    4d:6d:b2:f9:e4:24:cc:15:d6:90:06:f4:92:14:96:
                    17:f0:c3:68:f1:04:2c:9b:38:6e:8c:08:9d:21:3d:
                    9f:fa:57:60:46:85:91:85:57:16:9a:21:ad:1e:62:
                    d5:e6:fb:fb:e6:08:78:21:c9:1d:8d:a9:f9:5c:40:
                    4a:b1:d6:d9:8b:1c:0e:15:92:cc:92:09:92:37:cb:
                    9b:0a:9b:a9:56:04:d6:bb:bb:09:79:ec:31:92:e1:
                    b0:c0:44:e1:e2:e8:38:6b:17:8a:8b:8b:67:7a:c9:
                    34:ce:0c:40:1b:92:65:e3:bc:e2:70:b8:4a:2d:52:
                    ae:6d:98:b6:6f:7c:56:47:6c:00:2f:4a:fd:25:f1:
                    33:e8:00:fe:88:dc:89:8e:89:3d:0b:5f:c9:b4:87:
                    f9:3b:db:f4:ab:7e:f6:ea:00:fe:c0:75:11:47:f8:
                    20:b9:4f:59:62:2a:77:9a:bf:6c:30:da:d9:0a:58:
                    c4:1c:10:27:b9:0b:7e:a4:fc:20:e4:0a:47:ad:9c:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3B:B9:0E:48:14:A9:84:AE:D2:DE:B1:01:3D:20:0F:26:FE:9B:8E
            X509v3 Authority Key Identifier:
                keyid:0F:07:CE:5C:B6:07:79:E8:1C:D2:DE:07:9D:FC:C4:CA:EA:D8:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F07CE5CB60779E81CD2DE079DFCC4CAEAD85ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ht4tXTjNYCoVNJMWoP3GuvpxcjrJowEHMz9aXqpZiknM/0/3139312e33372e32332e302f32342d3234203d3e20323633333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:87:50:29:1b:12:52:1e:39:c7:dd:93:28:2b:e4:59:92:43:
         2b:fb:42:ed:f2:c5:85:08:17:e1:dc:1b:36:03:3a:61:5f:4d:
         8a:c9:4b:7e:2a:48:8b:d6:43:28:f8:ef:34:64:be:7e:99:4b:
         5e:2a:c1:e5:ab:ca:e1:f0:40:6e:ae:19:cc:5b:f9:1d:2e:88:
         0a:81:f2:26:06:38:15:d6:29:ed:b3:ff:d2:b0:14:b1:3a:2d:
         59:f8:e6:cf:47:56:8f:d4:f9:cd:de:7a:3e:09:3d:dc:bb:f2:
         18:dc:35:f2:43:88:76:9e:a7:52:3c:ce:e6:ff:9b:24:61:c3:
         8f:2d:f3:36:61:d2:04:c7:fd:64:23:78:85:83:12:7c:9c:c9:
         a0:2b:3c:ca:b5:f0:07:6c:07:b1:31:e4:f9:d7:4e:e8:cd:f3:
         ea:8a:1f:5a:d3:df:16:10:12:fb:57:48:0d:2d:05:69:0f:50:
         c2:91:a4:ee:2f:e3:d8:34:68:a1:a9:c7:8b:dd:02:ba:6e:98:
         10:37:12:99:11:81:bf:0b:e6:dc:6c:3e:37:25:54:94:e8:e5:
         f4:21:3c:6e:4d:13:4b:f3:d3:35:15:5e:5f:d1:cc:c9:58:e8:
         1b:95:79:49:12:82:c3:4d:3d:0e:ab:48:fc:03:64:29:d6:47:
         49:fb:a6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:42 2026 by rpki-client